Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/HyhRUs89mCqQEgCZDVc5q3JUCjM.roa
File: HyhRUs89mCqQEgCZDVc5q3JUCjM.roa (raw, json)
Hash identifier: 5LgFI5UPGQrelQ5bYP2Ch7HSbvAGzyJCMCrJb2bfllY=
Subject key identifier: 1F:28:51:52:CF:3D:98:2A:90:12:00:99:0D:57:39:AB:72:54:0A:33
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AD74A6EEA844F1B9204BF6DD36C2E
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/HyhRUs89mCqQEgCZDVc5q3JUCjM.roa
Signing time: Mon 02 Jan 2023 17:15:08 +0000
ROA not before: Mon 02 Jan 2023 17:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206487
IP address blocks: 194.49.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:d7:4a:6e:ea:84:4f:1b:92:04:bf:6d:d3:6c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f285152cf3d982a901200990d5739ab72540a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:82:b3:f3:91:20:c0:79:6f:3a:3f:22:ff:
21:29:ac:cf:75:60:8f:05:67:39:23:f4:13:9d:b7:
48:ce:34:c7:6c:64:51:9d:29:4e:80:58:3a:28:bc:
08:36:3c:d3:b6:d3:c3:63:09:cf:14:bf:b6:e9:c7:
d8:49:b4:53:73:2e:39:76:39:2d:f6:42:1c:af:15:
c3:fe:9f:89:50:ed:0c:96:78:2c:b8:96:55:a7:81:
21:46:fc:27:84:56:ec:8a:17:d1:bd:35:95:d4:39:
0f:31:ca:6e:c9:a8:7d:cf:28:3e:3f:4b:f9:6c:5c:
c7:ba:d7:81:12:ec:91:dc:c1:bc:b2:10:22:df:0a:
40:ab:e5:52:3a:d8:e0:6d:e2:fe:d6:5d:b8:f9:75:
05:1e:16:46:f0:39:97:2f:06:02:9c:7c:83:f0:c1:
70:f3:af:3c:3e:ab:53:44:b8:9c:79:7d:10:51:87:
14:8b:ad:a1:7a:2c:96:5f:34:c2:ed:f0:b3:89:74:
66:95:1a:fb:91:ec:ef:98:e4:e4:30:72:42:27:c7:
5d:63:85:75:61:35:35:3a:ce:c4:ea:60:41:00:87:
28:e3:e8:8b:6f:0e:76:6b:89:86:96:4a:cf:bd:4d:
11:8b:f5:90:43:0d:f8:73:48:0e:96:a8:6b:fb:3a:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:28:51:52:CF:3D:98:2A:90:12:00:99:0D:57:39:AB:72:54:0A:33
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/HyhRUs89mCqQEgCZDVc5q3JUCjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.0.0/22
Signature Algorithm: sha256WithRSAEncryption
00:01:2c:d8:e2:5f:ba:36:53:ff:47:a7:6c:c0:76:12:2f:4e:
b3:dd:6f:1b:fa:06:14:95:e6:78:f0:65:7d:52:d3:c6:c2:66:
65:9f:3a:d9:a2:1b:71:b3:25:af:59:38:1b:99:b4:23:b7:cb:
fa:bc:87:72:82:fb:8b:53:88:05:5f:ec:c6:5e:ec:85:87:47:
6c:0d:f1:5f:e5:84:73:94:c8:5d:cf:b3:6a:19:7a:d6:7a:26:
51:e4:c6:e1:0b:c0:49:f1:96:98:5b:47:b4:1e:b0:dd:e2:70:
99:b7:9f:f5:81:9a:b2:01:f9:f9:7d:52:cd:b9:3e:c2:6d:de:
f7:cc:35:f9:37:8e:32:d4:9b:27:2a:00:42:9a:59:45:70:62:
b9:54:19:af:06:96:78:d4:94:59:0d:f7:1a:5c:75:f9:35:8e:
02:89:8d:22:e9:24:12:be:27:25:36:28:a0:b6:19:5a:e9:a7:
45:4f:93:54:77:57:4b:ef:b3:27:c2:75:e7:e3:7b:a8:f7:8b:
4d:95:36:4e:5e:27:e5:7c:24:d5:02:36:71:c8:e9:02:b3:42:
05:43:2f:b0:17:5e:3f:f4:79:53:27:0e:97:ca:82:87:af:b5:
3d:d9:2e:66:c5:e4:22:85:05:d8:b9:34:b6:70:97:7b:d1:12:
23:3f:9a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org