Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/hwJ7B_S05TvpS2v4ybOof-GJAWg.roa
File: hwJ7B_S05TvpS2v4ybOof-GJAWg.roa (raw, json)
Hash identifier: OvGCvBf04UaMByz1WtG4o9cFXcaTefWXLmx8XMFYnSw=
Subject key identifier: 87:02:7B:07:F4:B4:E5:3B:E9:4B:6B:F8:C9:B3:A8:7F:E1:89:01:68
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 018AE0B000754375DEB52ADBF80C137BB5A5
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/hwJ7B_S05TvpS2v4ybOof-GJAWg.roa
Signing time: Fri 29 Sep 2023 11:25:45 +0000
ROA not before: Fri 29 Sep 2023 11:25:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57146
IP address blocks: 185.127.12.0/23 maxlen: 23
185.127.12.0/22 maxlen: 22
185.127.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Oct 2023 09:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:b0:00:75:43:75:de:b5:2a:db:f8:0c:13:7b:b5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Sep 29 11:25:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87027b07f4b4e53be94b6bf8c9b3a87fe1890168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:70:b1:60:9c:a4:56:1e:31:28:ea:6a:fc:
9a:92:db:71:2d:e7:a9:32:77:e7:b1:e2:44:e7:79:
3a:8c:c1:79:56:63:e8:fc:3a:8f:d5:6e:d7:34:47:
24:04:fe:0c:f7:98:f3:36:b1:08:21:5a:2a:1d:19:
26:f0:74:10:ce:a7:21:e0:fd:e8:24:16:35:b4:e1:
98:62:df:f6:d0:29:a9:04:34:31:93:df:ee:64:99:
39:07:9c:61:c6:28:f6:7b:a8:65:9c:48:be:9d:0e:
c5:13:9a:89:1b:e7:e9:c0:86:19:33:71:00:f3:0c:
84:41:94:ba:32:14:70:71:19:81:89:09:2d:00:0b:
06:c9:50:94:4f:fe:c3:a9:82:ad:88:25:3b:cb:ca:
aa:d8:db:c6:b6:f8:37:fd:f6:7e:b5:54:5c:c1:57:
d1:7f:a3:ef:f1:52:36:b1:1b:c2:0b:1f:96:91:3a:
ab:51:34:0e:d7:35:b4:14:fe:0d:1c:b1:5d:6e:bd:
a3:6c:4e:af:e3:93:51:ee:97:e8:08:14:c6:d7:dd:
b5:c4:9a:92:a5:a7:fa:e4:67:2e:e3:e3:1d:47:8a:
49:07:bb:1f:df:08:ed:7d:20:7e:fc:65:c3:5a:ef:
5c:cc:5c:07:9d:67:5e:bf:63:19:fe:0c:47:66:52:
d4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:02:7B:07:F4:B4:E5:3B:E9:4B:6B:F8:C9:B3:A8:7F:E1:89:01:68
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/hwJ7B_S05TvpS2v4ybOof-GJAWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.12.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:23:70:8c:37:0e:5d:54:b3:36:02:e8:cd:77:33:cb:17:76:
19:9b:ef:8d:27:cc:01:da:95:a3:81:8a:81:96:36:ad:9a:74:
25:5f:14:b7:f9:6d:01:9d:c4:85:d2:5e:b4:54:02:d4:57:dd:
7f:bf:ce:3a:38:91:9c:8a:b3:8b:4d:a6:03:b6:37:c5:18:a0:
05:c9:3a:ea:0b:c3:26:20:fe:9d:2b:04:7d:fe:b0:80:f0:3d:
d4:72:e1:2b:61:90:ce:48:49:33:04:df:ed:29:81:dd:72:59:
b3:07:70:9d:34:b8:c3:30:bf:80:28:58:d5:3b:14:e2:8b:81:
0a:52:43:38:8c:f3:6a:18:6a:e6:ca:fc:d3:7e:8f:ed:7e:cc:
b9:22:1f:fe:07:0a:5b:2b:ac:2e:4a:60:4a:f1:67:cc:a9:5c:
ee:24:28:d4:ae:a8:d3:da:37:2e:29:0c:73:9e:4e:41:03:6c:
bd:2e:41:c8:8f:b8:28:07:96:36:b8:4a:19:dd:d8:d0:30:2d:
96:84:ae:af:77:8d:7a:5c:07:38:e4:bc:11:50:1f:a0:1e:e1:
31:3b:bc:15:62:36:10:20:37:db:52:b1:77:c1:7d:91:80:53:
b8:44:86:51:97:7b:57:3e:fb:8c:44:09:3a:8a:ee:64:45:60:
02:f8:29:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:14 2024 by rpki-client on console-fra.rpki-client.org