Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/HLAxwrPSaOp4MijC8lzj2o1iDLY.roa
File: HLAxwrPSaOp4MijC8lzj2o1iDLY.roa (raw, json)
Hash identifier: 0U8K21LTOjdI4a9DncwEBS6Tw/2mbT7xjbtZHpEyFew=
Subject key identifier: 1C:B0:31:C2:B3:D2:68:EA:78:32:28:C2:F2:5C:E3:DA:8D:62:0C:B6
Certificate issuer: /CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Certificate serial: 018CBDD9848E91600A7822D5FFD3BF34DC0F
Authority key identifier: FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/HLAxwrPSaOp4MijC8lzj2o1iDLY.roa
Signing time: Sun 31 Dec 2023 03:09:58 +0000
ROA not before: Sun 31 Dec 2023 03:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197015
IP address blocks: 83.242.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bd:d9:84:8e:91:60:0a:78:22:d5:ff:d3:bf:34:dc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Validity
Not Before: Dec 31 03:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cb031c2b3d268ea783228c2f25ce3da8d620cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:d5:5d:16:46:9e:6d:ce:c2:21:80:76:cc:
7b:cf:58:e0:8b:67:5d:04:d7:f7:a3:2c:f5:52:99:
9a:94:12:53:e3:be:ec:95:3a:c0:a7:7f:82:73:9d:
be:0f:33:de:94:f5:92:94:22:b6:bd:02:a2:10:17:
6e:0f:2c:cd:41:50:ae:40:68:ba:ed:d0:64:2e:4b:
a3:fe:82:82:b4:d3:2b:cd:51:ca:bc:9c:44:02:c7:
ff:f2:8f:dd:db:24:1d:8d:e7:4d:60:0f:f3:ee:60:
35:c7:c3:2f:d4:73:91:f2:f3:bc:b4:ed:a8:43:62:
cd:4f:a6:c6:f7:2d:cc:bc:8a:df:08:0f:25:2b:17:
e3:25:2d:6f:44:0d:ce:2f:18:2b:fc:11:99:4d:e2:
b6:a7:fd:a2:e6:dd:f5:e3:36:16:c2:91:dd:ec:23:
86:e2:7b:8d:7e:a3:4a:d4:d7:b2:06:45:03:06:41:
7c:ab:cb:63:4d:74:00:9e:07:43:e3:aa:a2:e6:e3:
77:f2:60:01:65:87:f9:6a:29:51:f7:51:6c:c8:10:
67:a5:91:6d:71:da:d6:d1:62:62:e5:eb:d6:94:56:
d5:5f:19:d4:1b:85:cc:a0:53:8e:0d:c8:ac:be:b4:
e7:35:c0:2f:d2:9f:b5:c8:33:d9:44:8f:b4:49:5e:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B0:31:C2:B3:D2:68:EA:78:32:28:C2:F2:5C:E3:DA:8D:62:0C:B6
X509v3 Authority Key Identifier:
keyid:FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/HLAxwrPSaOp4MijC8lzj2o1iDLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.242.97.0/24
Signature Algorithm: sha256WithRSAEncryption
83:47:80:e6:74:63:15:1a:12:e3:5d:2d:b7:b9:77:0a:78:1b:
0f:9c:02:79:08:60:fd:48:02:f3:42:8b:0d:36:16:10:b7:a4:
ff:3b:ec:f1:9b:f0:32:a9:5c:93:04:47:04:8a:60:14:f4:04:
12:48:21:46:75:cd:58:48:13:e2:0b:04:97:e6:6e:a4:0d:b4:
f7:7d:3d:6f:59:f0:c0:b1:b5:0c:f3:22:f2:39:7b:f2:82:36:
60:14:61:91:76:ee:e2:c9:7d:49:6d:74:82:22:2e:a7:64:15:
a5:4b:68:4a:d2:3e:6f:f7:34:63:cd:93:63:08:3e:c4:6c:a2:
c2:c4:8e:07:fa:13:85:87:dd:9c:6b:d1:b6:17:54:30:8f:45:
be:bd:62:9e:d3:7e:2d:db:4a:8f:73:f0:07:d3:1e:e1:7f:25:
cf:0f:65:5b:74:ee:9d:e5:67:f4:c6:7c:2d:fc:a8:39:07:14:
3f:ac:ac:66:c8:fb:95:ce:b7:de:4d:86:9d:33:00:8e:c9:de:
41:d0:f6:58:a8:a2:5f:dc:bf:a4:2f:c2:39:bb:32:c1:0e:0d:
7d:cc:5a:38:cb:ef:e7:dc:c3:c2:cd:43:57:0d:a8:b9:1d:76:
2d:38:1e:08:6e:61:5c:92:12:06:dd:36:ae:20:57:4e:04:1a:
fa:bf:19:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:15 2024 by rpki-client on console-fra.rpki-client.org