Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HPYgoasMKFxcLzQu52VuowrtLqs.roa
File: HPYgoasMKFxcLzQu52VuowrtLqs.roa (raw, json)
Hash identifier: eq1DmD11vA0L/hF4ouf3HTHrx3loMB9hA8QpEyBy4aM=
Subject key identifier: 1C:F6:20:A1:AB:0C:28:5C:5C:2F:34:2E:E7:65:6E:A3:0A:ED:2E:AB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186544819695985B3CC85DC6D131CBEE8E0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HPYgoasMKFxcLzQu52VuowrtLqs.roa
Signing time: Wed 15 Feb 2023 08:54:16 +0000
ROA not before: Wed 15 Feb 2023 08:54:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 45.147.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 19:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:48:19:69:59:85:b3:cc:85:dc:6d:13:1c:be:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 15 08:54:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cf620a1ab0c285c5c2f342ee7656ea30aed2eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a9:04:57:04:2b:f7:26:d7:bc:a1:75:29:36:
a8:2c:13:5d:de:1c:f6:de:72:82:34:1d:fc:db:93:
66:27:97:04:45:c3:f6:b4:ad:a7:41:26:d0:22:72:
7f:3c:91:0f:22:64:36:90:a1:5b:6d:18:32:83:98:
69:98:c3:53:bf:e8:83:f9:b4:12:bd:7d:ae:fd:2f:
2c:e5:90:dc:49:1a:07:77:b6:79:76:60:d0:c3:7a:
36:99:35:e4:37:c2:c7:4d:0c:78:64:1e:d4:96:04:
e8:df:a8:90:19:82:35:d8:05:77:62:75:54:8b:d7:
6b:2b:20:57:59:12:2d:27:3f:60:7e:a1:04:6f:01:
df:d3:e4:5d:ea:f3:06:a0:70:1e:81:84:28:08:29:
c0:b1:4f:dd:3a:53:77:35:7f:a6:20:e8:be:0f:22:
a5:d7:52:6c:41:4a:43:36:1c:c1:1a:c2:c3:8f:95:
ac:c1:e3:74:76:cf:e4:61:41:c6:c0:dc:a1:ef:94:
96:ee:d0:96:bc:51:00:4e:cf:a7:30:0f:12:42:8c:
4e:7b:0c:43:e9:6d:b6:a2:6a:ca:44:e3:be:e5:94:
38:b7:22:13:ff:67:8d:b3:25:18:31:6b:5f:3a:69:
d4:4d:a5:68:67:a1:5c:b3:70:39:c1:35:f0:d3:14:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F6:20:A1:AB:0C:28:5C:5C:2F:34:2E:E7:65:6E:A3:0A:ED:2E:AB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HPYgoasMKFxcLzQu52VuowrtLqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.227.0/24
Signature Algorithm: sha256WithRSAEncryption
30:70:87:93:d7:be:8e:1c:1b:00:00:44:ac:9b:28:0c:9c:e6:
51:76:b8:64:50:d4:c2:ae:33:cb:eb:d4:c4:6e:46:e4:37:31:
e1:b1:94:46:35:32:9a:3f:d2:1b:6c:3c:23:ca:96:4c:50:ba:
53:31:b9:9f:06:83:fb:cb:90:30:f6:72:5d:d4:f7:b3:b4:84:
42:09:61:e5:85:07:26:c5:ab:89:49:30:05:0e:0a:a7:cc:18:
aa:34:09:a6:61:62:75:76:8a:14:60:24:f2:52:4a:33:f1:dd:
50:f6:7d:39:9b:77:4d:e6:c1:6b:df:cc:01:14:6a:b0:11:7c:
be:8f:c4:e7:92:de:b1:1a:49:34:72:fb:80:5c:12:30:36:e5:
f2:f4:3c:48:1a:5c:18:f0:38:6a:39:d4:f2:14:12:b9:1e:dc:
29:12:2e:70:a5:65:ce:93:90:0f:aa:3e:7a:d3:58:f5:7d:05:
52:ba:be:cf:be:b9:35:e3:a5:b1:7a:43:04:d0:59:d4:02:90:
ad:9b:15:bc:2a:f7:fb:80:fe:9c:f4:c8:ec:b2:01:65:d1:7e:
ca:5e:e7:d1:91:71:4c:4b:1b:51:7a:1e:2b:b2:62:8b:cd:92:
85:63:02:0a:29:5f:64:79:77:6a:53:82:39:a7:9d:66:99:3f:
1c:8d:b0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org