Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/hQz_edU-JyJbUCh6jq3-SrV9gm8.roa
File: hQz_edU-JyJbUCh6jq3-SrV9gm8.roa (raw, json)
Hash identifier: 4cJWNazlS6Orw5sd/Re9dKCFBZ5EzLTRiKxja8BBhjw=
Subject key identifier: 85:0C:FF:79:D5:3E:27:22:5B:50:28:7A:8E:AD:FE:4A:B5:7D:82:6F
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 0189552987AE9D3591C75DA14376972BA21C
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/hQz_edU-JyJbUCh6jq3-SrV9gm8.roa
Signing time: Fri 14 Jul 2023 16:08:52 +0000
ROA not before: Fri 14 Jul 2023 16:08:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203936
IP address blocks: 185.238.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:29:87:ae:9d:35:91:c7:5d:a1:43:76:97:2b:a2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Jul 14 16:08:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=850cff79d53e27225b50287a8eadfe4ab57d826f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:35:3d:b1:42:16:b4:b3:a6:24:b4:0b:c6:
6b:ef:f6:8e:94:38:50:de:19:e1:11:0f:2c:3a:75:
dd:9a:ee:1f:d5:3d:5b:7d:40:da:d5:45:fa:49:ef:
a8:d3:d5:2a:77:72:15:d2:b9:d3:37:57:02:7a:51:
69:cd:8a:e0:49:38:70:66:8b:c8:23:72:82:55:c7:
ef:8d:07:61:b1:06:62:aa:cc:0e:1d:cc:5d:12:3a:
bd:bc:6a:b7:a0:3f:6f:29:5a:b5:2e:1a:9b:65:f1:
12:12:b7:46:06:b6:7f:12:0b:6a:e1:d2:23:71:70:
b9:da:93:b3:81:ec:44:9d:3a:06:a9:70:96:6b:ff:
4c:40:0c:74:48:bd:a6:82:49:20:9f:02:ed:9b:10:
60:3a:60:be:cf:a9:13:4b:8b:85:86:cc:0a:4c:a8:
b4:53:48:15:1c:89:c5:7b:81:4a:d1:34:77:c5:b3:
c8:a0:36:44:c6:25:d4:cd:05:dc:47:db:18:e1:40:
98:f6:a9:6e:76:a1:5e:06:fa:6e:62:4e:e7:cb:f5:
4a:26:75:6a:5e:7f:7e:ed:5f:ec:66:f6:7f:d0:a6:
7a:00:93:5f:2c:77:9f:73:af:b0:ee:c8:7f:5a:9a:
2d:33:69:96:1d:76:e8:1c:d2:c3:b2:da:4d:ec:28:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0C:FF:79:D5:3E:27:22:5B:50:28:7A:8E:AD:FE:4A:B5:7D:82:6F
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/hQz_edU-JyJbUCh6jq3-SrV9gm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.87.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3c:55:5f:06:ef:f7:b1:74:b8:ac:6d:f9:a4:63:e7:c6:df:
12:6b:33:73:ed:09:68:9a:b6:f7:b9:e4:be:6a:61:59:6e:56:
7a:97:d6:fd:38:57:69:02:6f:d9:ae:cf:81:33:7f:18:b3:94:
3f:09:97:b5:6b:54:7c:37:5f:99:71:20:ec:8b:e2:c1:8f:a8:
d4:eb:18:dc:cc:83:72:63:56:ad:18:b6:bd:41:8b:f2:10:00:
67:ca:e9:63:63:6a:6e:9a:8c:e6:cd:79:e2:b8:99:88:8e:f2:
e7:ed:37:6c:f8:8f:38:d4:4e:02:7c:31:a5:a7:a4:61:40:a9:
6c:75:0c:86:c3:85:33:b9:75:73:4c:75:3a:de:79:f2:49:da:
1b:41:30:9b:19:3a:90:52:80:53:e7:a6:f4:24:d2:17:e3:0e:
2f:d3:08:25:9f:2b:6c:72:e1:2a:ba:94:31:90:43:47:0b:8d:
b3:bc:ed:d9:6a:b0:ab:fe:c6:34:62:6d:43:41:95:4f:9e:4c:
2c:9e:c1:61:76:40:c6:5e:5c:64:fb:16:a0:24:63:b9:bc:a7:
45:c3:cd:09:d4:45:59:ad:95:66:03:26:e5:ab:b6:bc:3f:98:
36:16:52:3b:1d:21:ff:ab:eb:41:29:cc:e8:61:58:31:80:20:
09:c0:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:57 2024 by rpki-client on console-ams.rpki-client.org