Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/T_dUVG6PGGu4CMH5j4Rwemuj4HE.roa
File: T_dUVG6PGGu4CMH5j4Rwemuj4HE.roa (raw, json)
Hash identifier: EChFhFJrDGc9Kb3VXPVMoF71bUzzO5vdy39tov24PIo=
Subject key identifier: 4F:F7:54:54:6E:8F:18:6B:B8:08:C1:F9:8F:84:70:7A:6B:A3:E0:71
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 018B80B79204AFCD8121A380F67B190CD0CE
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/T_dUVG6PGGu4CMH5j4Rwemuj4HE.roa
Signing time: Mon 30 Oct 2023 13:13:15 +0000
ROA not before: Mon 30 Oct 2023 13:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 185.248.164.0/23 maxlen: 23
185.248.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:b7:92:04:af:cd:81:21:a3:80:f6:7b:19:0c:d0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Oct 30 13:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ff754546e8f186bb808c1f98f84707a6ba3e071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:5d:9e:42:7b:da:b5:fe:19:3d:53:21:8c:
8b:27:48:87:b0:fa:74:10:f4:ec:61:2f:17:12:4a:
be:3f:10:c3:39:e7:3c:a6:c9:6d:34:57:74:1f:44:
16:16:59:fc:06:c3:91:db:9d:30:5d:8f:f7:25:1c:
9a:71:b8:ca:74:0a:95:03:3d:ce:50:85:1e:09:eb:
fa:2d:a1:a8:25:f1:fa:a7:8b:1c:07:ce:73:c8:77:
a7:be:92:70:a5:14:50:e9:80:6d:a6:1b:df:a3:94:
89:9e:37:14:6f:2f:3d:5f:10:f0:49:7b:c1:4d:8a:
17:de:92:f5:e5:7b:14:08:94:d4:92:29:22:13:e4:
e5:85:a0:c7:08:00:2c:02:b2:79:da:3b:8e:de:3a:
ce:db:b0:2d:b2:92:a4:16:72:bb:ac:be:ed:69:fd:
b7:55:96:fc:fa:54:f4:4b:ec:58:a0:f8:bd:1e:64:
44:42:f3:52:b6:4a:38:8c:49:b0:5f:9f:dc:b8:1e:
cb:77:ff:c6:2e:47:bd:1f:39:2b:42:d7:fe:52:c2:
e3:3d:03:6d:92:92:b1:b5:e0:d0:01:cb:7f:5e:6a:
cc:f2:0f:71:0b:73:0b:17:cb:a9:25:a8:5b:9f:2c:
45:fe:dc:21:d7:7d:22:ec:82:3e:c3:06:0b:19:eb:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:54:54:6E:8F:18:6B:B8:08:C1:F9:8F:84:70:7A:6B:A3:E0:71
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/T_dUVG6PGGu4CMH5j4Rwemuj4HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.164.0/23
185.248.167.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f0:2c:41:8d:66:98:c4:42:88:ec:30:fb:4a:fc:d3:54:98:
80:9c:04:eb:f8:42:7f:7f:e7:5f:1f:e5:2d:29:8b:7b:14:ce:
b0:58:7e:e8:80:85:c8:0e:e5:e1:b6:fa:02:cf:70:f8:c7:26:
65:e6:d5:86:14:7d:ee:0e:f8:18:9c:ad:7e:c7:86:7c:8b:e4:
4b:5f:1f:b8:10:bb:1a:15:fc:3b:ca:54:b8:3b:9d:eb:fe:e5:
45:19:78:78:3f:91:05:3e:96:44:ad:34:76:05:e1:02:1b:1f:
71:ba:ec:e5:34:e6:72:03:c9:dd:85:b4:7d:3b:01:4d:b7:71:
51:0e:fb:8f:e8:20:12:32:f3:13:9a:d1:f7:9e:70:92:95:71:
30:30:b8:d5:ae:3e:b4:80:e7:03:73:c0:43:72:6d:21:26:61:
c0:31:02:ae:a2:45:cc:b5:91:3d:e6:b0:9a:a6:1b:35:35:b0:
ec:41:10:d1:99:eb:f5:f4:49:48:c8:fb:6e:54:31:28:dc:5f:
63:38:b5:17:45:13:d7:9f:84:7a:9e:3c:c2:f7:84:48:09:7b:
7e:6f:71:ad:ce:8c:96:e8:2e:32:fb:0b:5f:6e:c4:c6:55:7b:
8a:ae:3a:1f:f3:c6:58:3b:15:23:ba:e8:d7:bf:10:92:fb:e2:
95:90:5b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:16 2024 by rpki-client on console-fra.rpki-client.org