Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/HVFe1gAHviK9Z963S-v5fYs6lMc.roa
File: HVFe1gAHviK9Z963S-v5fYs6lMc.roa (raw, json)
Hash identifier: YKlEJkLUgDO6Q6Xv86C6iHabAhLvCiNA5pnIljV/wwE=
Subject key identifier: 1D:51:5E:D6:00:07:BE:22:BD:67:DE:B7:4B:EB:F9:7D:8B:3A:94:C7
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 01857082BB763EEF73C2E7DDB01C851A31F1
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/HVFe1gAHviK9Z963S-v5fYs6lMc.roa
Signing time: Mon 02 Jan 2023 03:24:53 +0000
ROA not before: Mon 02 Jan 2023 03:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2088
IP address blocks: 193.54.33.0/24 maxlen: 24
193.51.58.0/24 maxlen: 24
193.55.5.0/24 maxlen: 24
194.254.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:bb:76:3e:ef:73:c2:e7:dd:b0:1c:85:1a:31:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 03:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d515ed60007be22bd67deb74bebf97d8b3a94c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:bf:4b:1a:77:32:85:74:f4:35:11:2a:27:
d8:78:9f:e8:b0:af:06:fd:2c:4f:2b:15:32:13:26:
21:e2:1e:10:b2:b3:e8:61:bc:90:b6:a7:88:c8:af:
f2:00:83:f7:c6:59:94:4d:7e:1d:20:01:fb:78:b6:
03:36:ab:5b:ac:80:94:73:66:81:c4:9a:e9:50:4f:
4a:65:6a:65:5f:da:ef:c3:3c:fe:e5:06:eb:1e:b2:
93:5e:bd:62:05:27:51:cc:09:d0:48:8e:d3:e1:73:
91:cc:b7:6c:19:49:34:f7:e2:81:91:60:87:57:c8:
ea:74:d9:df:09:23:3b:9f:fd:19:d6:bc:a1:66:eb:
f2:0f:4c:6e:29:25:4d:40:99:b1:2e:97:0f:52:1a:
40:f5:68:e2:66:22:0c:71:b4:4d:d0:97:e2:ee:ba:
6b:f8:33:f1:d6:09:fa:d7:d8:06:3f:de:8b:0b:3e:
4d:ea:52:4d:3e:23:36:e1:08:27:82:35:88:79:8c:
5d:07:1c:37:eb:d4:8e:62:e1:f2:e6:54:ad:74:21:
16:49:18:19:a4:84:70:52:34:00:62:3f:2e:74:01:
b3:45:3f:b9:45:a9:58:a3:44:eb:5f:c8:a8:e8:6a:
2c:8e:7e:ee:2a:f6:91:48:b5:03:9f:72:48:14:66:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:51:5E:D6:00:07:BE:22:BD:67:DE:B7:4B:EB:F9:7D:8B:3A:94:C7
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/HVFe1gAHviK9Z963S-v5fYs6lMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.51.58.0/24
193.54.33.0/24
193.55.5.0/24
194.254.188.0/24
Signature Algorithm: sha256WithRSAEncryption
00:cc:86:7e:b7:d5:00:25:5f:b2:d9:5b:eb:03:ee:03:83:67:
ce:ed:28:0b:8d:f0:d8:9a:7e:54:35:6c:8d:16:4c:23:51:cb:
2e:cc:e9:7c:81:3a:a7:92:b6:e2:c5:c7:a1:c9:59:89:4b:a1:
06:b0:42:62:5c:12:6c:82:01:c7:99:f6:cf:2a:2b:53:d8:3d:
1e:6d:00:b1:df:66:6a:1d:af:63:be:65:b6:16:dd:5a:ab:6e:
12:0a:41:06:3e:0e:9f:0e:4c:ff:66:9c:11:ea:c7:a3:36:a9:
7b:8e:86:e6:f0:72:5b:ab:9c:19:2b:c9:22:37:9f:b9:e3:93:
c9:49:58:57:01:ca:32:fd:d3:9a:7f:91:4a:58:21:80:9d:b1:
48:fe:e6:2c:d3:90:80:bc:13:01:6c:9c:5c:62:02:f4:03:3f:
12:82:0d:2c:c4:ea:57:1b:64:0e:87:bb:63:4b:ff:15:89:fd:
83:df:d2:43:5b:48:3f:4d:71:44:2c:fe:ed:52:d1:dc:1a:f9:
cd:8a:8d:6c:8f:e1:b2:e0:4f:3e:c2:1c:c4:72:dd:f8:1a:c0:
a6:5f:ef:e2:d3:fd:26:3d:8f:ce:3e:63:3c:46:80:e4:3e:81:
68:fe:28:2d:d1:8e:8e:7c:1c:0e:bb:fa:9a:82:e1:eb:1d:35:
7b:9a:cf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:38 2024 by rpki-client on console-ams.rpki-client.org