Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/HBedeaxUk3GLkCKbO3V9mBnOft8.roa
File: HBedeaxUk3GLkCKbO3V9mBnOft8.roa (raw, json)
Hash identifier: pF3pRP/sNB4iyziAsFAE03hdnmFK7lGrf3fjJZVr06w=
Subject key identifier: 1C:17:9D:79:AC:54:93:71:8B:90:22:9B:3B:75:7D:98:19:CE:7E:DF
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737ABFB4544F39E77953B2216EDEC65C
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/HBedeaxUk3GLkCKbO3V9mBnOft8.roa
Signing time: Mon 02 Jan 2023 17:15:02 +0000
ROA not before: Mon 02 Jan 2023 17:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47380
IP address blocks: 185.93.232.0/22 maxlen: 24
91.242.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:bf:b4:54:4f:39:e7:79:53:b2:21:6e:de:c6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c179d79ac5493718b90229b3b757d9819ce7edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:0c:20:15:79:1b:3e:55:1f:c7:bf:b0:dd:
7a:ea:66:26:84:cf:5e:df:77:b2:45:c5:0f:1c:ed:
1d:d1:4c:de:c2:4f:c9:c6:cc:12:b3:ac:da:74:fd:
bc:9a:5a:7a:f8:7d:83:51:19:81:aa:0d:ab:c6:2c:
7a:eb:72:20:29:2c:a5:75:a3:70:9b:ef:91:36:86:
3e:5d:ab:39:61:2f:f1:64:ff:1c:68:67:cc:43:1f:
77:ec:69:c2:f1:46:89:23:d5:3f:f2:56:3d:90:1d:
6d:59:e9:54:ab:0c:fd:f1:0a:1c:69:2b:50:1e:e9:
bc:4e:54:74:6b:65:9b:1e:8b:89:4f:4a:83:79:23:
28:2f:94:77:2e:0a:f4:a8:8e:bc:9c:5b:16:2d:12:
19:f3:93:ef:6e:b1:3b:f7:41:bf:e1:8e:d0:7e:69:
7f:1a:d5:a2:77:25:d9:9c:f3:01:69:22:ca:a0:2d:
53:f6:4e:44:2c:95:07:02:8c:5f:5d:5c:0b:23:a4:
65:28:d1:f9:dc:a5:9c:03:76:e5:3a:91:2e:8a:c7:
26:e0:3e:e1:e1:71:e5:c8:98:08:df:e9:a6:7d:9a:
20:cb:fc:77:88:e7:f8:7a:0c:93:2e:30:d0:1c:3b:
a4:0f:6e:eb:1e:24:6f:b6:ef:4b:c2:3a:66:5d:a0:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:17:9D:79:AC:54:93:71:8B:90:22:9B:3B:75:7D:98:19:CE:7E:DF
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/HBedeaxUk3GLkCKbO3V9mBnOft8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.144.0/22
185.93.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:2a:bb:08:1a:bc:a5:7f:af:c9:39:b0:22:35:c0:85:a1:52:
f8:7d:3b:37:ec:d7:6b:f1:cf:97:9a:68:8f:9b:16:32:4b:52:
00:6a:3f:20:65:e7:f8:6a:4f:da:9b:23:51:40:b2:74:56:40:
7d:eb:c9:76:f9:24:37:de:bc:b2:c2:e9:dc:3d:f4:68:f9:ac:
e3:c1:f9:d3:1d:b4:15:23:a9:e8:90:fb:99:af:c9:8e:30:d1:
ca:f5:17:0b:43:c6:1a:3e:ae:bf:de:9c:c3:cd:cb:92:bd:3e:
59:bc:a7:71:37:64:70:46:f8:f6:55:6c:f0:56:29:34:fd:77:
cf:7a:ad:7a:01:d0:2b:53:fa:af:85:45:ac:ce:ce:c1:69:b1:
54:1c:db:ac:97:6f:e3:78:7a:b1:52:8b:12:2d:01:88:02:3b:
6e:6a:f4:03:91:12:e4:ab:8f:14:37:09:07:38:4b:4c:6b:47:
06:56:74:dd:d1:e5:35:5f:93:9d:07:72:ac:ce:a7:13:e6:99:
69:d6:23:07:60:77:92:e1:04:b4:30:6f:83:69:a3:6e:ca:25:
6e:33:3c:e4:c8:2e:b4:3d:6e:76:46:46:b1:e4:df:4f:a7:f2:
60:87:e6:4d:e5:69:b5:3d:04:52:24:81:64:2b:4a:4a:67:03:
85:c6:e0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org