Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/HDr_xFBn92uE2e76Bp0g4pLnQMc.roa
File: HDr_xFBn92uE2e76Bp0g4pLnQMc.roa (raw, json)
Hash identifier: 91rCwFPPHMdqDO+keHFoz7iAIV1IlNevKQ9tsFYkJkg=
Subject key identifier: 1C:3A:FF:C4:50:67:F7:6B:84:D9:EE:FA:06:9D:20:E2:92:E7:40:C7
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 01906E723C46D08A43AAB40343AF656AEA5A
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/HDr_xFBn92uE2e76Bp0g4pLnQMc.roa
Signing time: Mon 01 Jul 2024 13:18:18 +0000
ROA not before: Mon 01 Jul 2024 13:18:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41171
IP address blocks: 62.106.83.0/24 maxlen: 24
146.19.142.0/24 maxlen: 24
146.19.228.0/24 maxlen: 24
185.253.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 16:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:72:3c:46:d0:8a:43:aa:b4:03:43:af:65:6a:ea:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Jul 1 13:18:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c3affc45067f76b84d9eefa069d20e292e740c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e1:96:4a:f7:72:b3:e5:46:4d:b8:bd:a3:d5:
a1:a6:89:63:44:be:c1:db:a8:1d:7d:00:d3:b0:a4:
00:c3:c2:67:39:d9:f3:e9:ae:27:fa:fb:6f:80:4a:
27:8f:a1:ca:7c:e9:4f:48:33:2d:b6:da:f5:4c:6e:
a1:d2:61:af:91:3e:07:4f:bb:48:0a:c1:00:fc:f1:
3a:49:34:ba:73:ef:9e:c9:a6:59:4d:57:42:72:c6:
3e:6a:de:03:35:3f:09:cd:66:35:f9:b5:47:bb:a1:
d5:7b:7e:fd:75:c8:2c:9b:7a:e8:7f:90:44:3a:6e:
2a:55:c0:57:54:65:d1:9b:6e:d8:d0:4e:75:4c:7b:
75:af:80:5b:40:f6:08:45:5b:a7:2a:8f:55:c9:91:
ee:7c:89:86:11:9d:3c:f9:88:c4:c5:47:2b:fb:78:
db:27:ea:8e:67:1f:dd:b9:4c:7d:da:87:bc:b9:8a:
b9:3c:06:4f:38:14:80:f5:d8:29:f6:b6:8c:f7:b8:
6a:0b:8d:32:09:44:5e:f8:d5:13:fb:dd:0c:a0:47:
c7:be:de:80:76:ec:63:bd:4a:a3:c5:41:82:7e:16:
a1:6b:39:26:51:ab:6c:99:58:9d:eb:32:80:fd:7e:
63:f4:03:5c:46:9b:b8:b9:f2:7e:ba:c1:9b:44:f5:
82:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3A:FF:C4:50:67:F7:6B:84:D9:EE:FA:06:9D:20:E2:92:E7:40:C7
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/HDr_xFBn92uE2e76Bp0g4pLnQMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.83.0/24
146.19.142.0/24
146.19.228.0/24
185.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:1c:24:5d:74:61:4e:e7:80:b3:98:64:0b:00:3c:68:a5:80:
e1:04:8b:71:de:c7:74:91:3a:e1:1e:66:3b:2e:8d:0a:38:b1:
48:4c:34:ec:8e:9e:54:ab:21:82:5e:55:20:07:09:f5:1b:ea:
dd:4b:07:88:bf:92:46:85:03:58:51:c1:9d:e5:02:55:bc:eb:
ea:14:1a:e2:7a:ff:be:f2:1b:36:b2:a0:a4:06:52:26:73:9b:
9e:da:93:f5:b1:e6:e0:25:7e:c9:5b:fe:37:dc:32:39:26:89:
da:dc:a4:76:0c:b1:10:4f:57:63:53:b3:36:9e:1a:2e:8e:ba:
38:49:8e:3d:0f:9d:c0:30:94:3b:1d:13:82:95:1c:1e:38:ba:
61:6a:9b:4d:a9:6b:03:93:2a:4c:82:fd:bc:df:75:75:02:b0:
3b:e7:ea:83:38:b5:71:a4:e9:a3:fb:76:60:5f:b3:78:99:f5:
4b:d8:30:aa:47:45:a5:40:19:6a:f6:58:bf:78:fa:96:b6:fc:
04:35:71:28:16:cd:1c:96:5a:77:c6:06:b4:ea:69:7f:bc:f8:
6e:7e:4b:c1:a4:f8:2c:36:23:fd:ea:ab:7f:8d:1b:c7:3f:51:
69:81:c6:96:b1:7f:2e:53:9c:42:dc:4f:9f:7d:19:9b:1d:0a:
84:5a:6b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 19:10:20 2024 by rpki-client on console-fra.rpki-client.org