Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/HurEBTuhejdx7wihSG0IOQ_-TBc.roa
File: HurEBTuhejdx7wihSG0IOQ_-TBc.roa (raw, json)
Hash identifier: SuYNSD5qAJtsLnhh42W2pjVprrYS8HoEZzPL+zsjyBo=
Subject key identifier: 1E:EA:C4:05:3B:A1:7A:37:71:EF:08:A1:48:6D:08:39:0F:FE:4C:17
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C2A7BB1C5A914451ACDCF9BC65E86
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/HurEBTuhejdx7wihSG0IOQ_-TBc.roa
Signing time: Mon 02 Jan 2023 05:55:00 +0000
ROA not before: Mon 02 Jan 2023 05:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200453
IP address blocks: 185.94.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:2a:7b:b1:c5:a9:14:45:1a:cd:cf:9b:c6:5e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eeac4053ba17a3771ef08a1486d08390ffe4c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:93:73:ca:be:60:6c:c1:04:4f:7b:23:c6:a5:
66:54:cf:7e:59:7d:ef:bd:9f:56:44:53:b7:43:49:
cc:9a:5e:92:0d:6e:0b:1d:8d:3b:c4:f6:a7:0a:57:
fc:ad:ae:98:9b:dc:7b:4e:8b:3b:1c:ed:54:70:d0:
e7:70:17:4b:6b:e7:71:2b:7c:49:e8:b0:bd:24:5d:
85:ab:00:de:ac:0c:c7:02:75:d4:e2:ca:8a:e5:14:
b9:0f:26:18:61:1d:85:1a:85:b5:0d:17:f7:d0:cd:
08:b6:5d:87:c8:30:bb:d6:de:ba:0b:b0:d8:68:af:
4a:fe:79:35:75:a0:cd:a5:52:9f:d0:06:7f:98:c0:
ff:c0:0d:aa:e8:e2:5f:5c:eb:a9:25:14:5a:8f:92:
c4:bf:92:7c:03:f7:46:76:51:f8:19:40:97:3e:69:
d5:ab:91:f1:3a:54:00:33:c0:b2:21:78:ce:aa:b1:
c4:e0:e6:da:7c:f3:7a:20:9f:72:74:32:fb:33:be:
c7:1a:87:4e:dc:33:0b:9d:19:b9:02:ad:f6:ec:8e:
13:82:a7:23:26:62:6a:94:37:21:1d:86:b4:45:90:
61:72:f2:17:a4:a9:79:17:90:1e:21:a6:99:db:3b:
0c:7d:06:7a:c7:fe:2b:f3:f3:b4:4d:12:f2:4f:e4:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:C4:05:3B:A1:7A:37:71:EF:08:A1:48:6D:08:39:0F:FE:4C:17
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/HurEBTuhejdx7wihSG0IOQ_-TBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.166.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ca:1a:26:69:c6:b5:90:93:ec:54:28:f9:2a:07:6a:d9:36:
b4:76:04:00:d4:af:43:67:f9:24:b1:ab:aa:80:da:f9:b1:66:
6a:0b:21:ec:8d:ed:36:d8:58:79:cf:31:c6:41:6a:09:f1:89:
c3:ae:e6:5f:4c:b4:93:4f:cd:ed:3c:d7:e6:e4:58:84:1b:09:
95:34:78:ce:8e:e7:2a:a0:bc:18:22:8f:68:62:8b:90:7c:fd:
94:3b:58:71:21:91:20:fc:7d:ee:fe:48:fc:02:48:52:a0:8c:
94:37:ac:72:4e:ef:4d:7b:82:9e:e2:32:8d:c0:d3:cd:36:29:
19:c3:f5:7b:82:eb:e6:37:26:d2:c8:cc:02:d1:de:34:aa:d7:
fe:cc:b3:c3:e5:76:57:d9:23:56:bd:fa:91:8d:13:bd:ba:d7:
fe:3e:b8:29:2d:ae:2f:73:71:8b:dc:8a:97:5f:fc:8e:32:03:
17:3b:dd:a5:35:78:a8:9a:ba:b6:a6:fa:fa:fe:08:a4:4b:e6:
5b:c9:be:28:7d:1b:68:00:eb:b6:93:38:55:0e:71:ca:da:b2:
f5:81:bb:19:54:c0:c7:65:b1:c4:b6:50:01:43:68:a9:bd:55:
6a:75:7a:f4:29:11:76:3f:8b:54:55:ee:b0:00:71:ac:9d:1e:
f8:d6:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org