Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HS2A0CAyMVBuqo9v5EgcZuGVKtQ.roa
File: HS2A0CAyMVBuqo9v5EgcZuGVKtQ.roa (raw, json)
Hash identifier: cg1XZF/uHciwX8NgoZbV4Mz2yT9B5qMATHckz5u6m6g=
Subject key identifier: 1D:2D:80:D0:20:32:31:50:6E:AA:8F:6F:E4:48:1C:66:E1:95:2A:D4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B62B643FB88C109BC5686366BB21C0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HS2A0CAyMVBuqo9v5EgcZuGVKtQ.roa
Signing time: Mon 02 Jan 2023 09:00:42 +0000
ROA not before: Mon 02 Jan 2023 09:00:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.240.122.0/24 maxlen: 24
45.131.132.0/24 maxlen: 24
45.131.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jan 2023 15:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:2b:64:3f:b8:8c:10:9b:c5:68:63:66:bb:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d2d80d0203231506eaa8f6fe4481c66e1952ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:b0:c3:c1:df:ec:a1:a7:67:53:b3:ee:52:
9d:27:50:10:a5:cd:50:29:e8:bc:c9:46:f1:57:91:
2f:96:38:d6:e5:43:97:52:a6:be:61:58:e3:5b:6e:
3c:2d:07:6d:7c:de:06:bd:42:6d:65:cb:47:2c:03:
cb:3b:be:44:2d:65:87:af:7d:c8:6c:5e:a1:69:de:
ae:b8:08:14:9d:6b:cb:ea:e3:5d:23:d2:52:44:9c:
9c:1b:a4:b1:c2:0e:14:18:0b:ff:1a:73:5a:d9:4c:
f3:ba:7d:34:6b:82:e3:fe:03:4d:4c:2c:08:b7:df:
26:d6:47:e1:c8:ab:7a:34:8e:6f:a5:45:ad:44:66:
6d:7c:00:94:96:26:1b:63:96:15:6e:6c:94:33:19:
ec:7f:4e:fe:bb:f4:22:e1:7d:de:e2:a2:82:36:41:
81:d6:dd:b1:7c:41:2a:29:22:83:2b:25:7b:fc:ae:
ad:85:ea:80:17:2f:11:0a:56:fa:d9:6e:04:e9:0b:
3d:30:de:bf:c6:f1:93:22:ce:93:95:e9:d9:ed:15:
cd:ca:6a:6e:a5:cc:b4:7a:ea:4d:63:54:29:41:55:
fb:53:92:23:eb:7d:f7:8f:d0:6d:91:13:db:3c:54:
77:14:9e:66:c2:1e:ec:fe:b0:a1:51:a9:8d:ab:2c:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2D:80:D0:20:32:31:50:6E:AA:8F:6F:E4:48:1C:66:E1:95:2A:D4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HS2A0CAyMVBuqo9v5EgcZuGVKtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.132.0/23
185.240.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:92:73:71:81:61:cb:88:d8:c1:9b:3c:08:41:ee:16:61:1a:
00:71:e9:15:0f:a3:3f:21:3a:bf:b0:9b:97:f3:34:89:db:14:
48:16:c8:4e:86:bf:37:25:27:a4:93:c3:5c:09:ad:0b:84:99:
a9:72:31:df:b5:28:53:1a:64:93:4c:6c:44:71:fe:ff:77:e5:
7c:73:ef:65:55:aa:79:34:d3:05:7c:a2:6a:2b:0a:6f:27:70:
4e:e4:56:7b:47:57:84:83:64:ad:5a:2d:f2:d2:d1:aa:32:90:
dc:94:ab:10:16:2e:2b:32:91:cc:b7:55:7e:3e:a4:ec:48:8a:
17:74:66:41:79:ab:9f:8d:58:3c:fa:89:53:5b:6d:be:f7:37:
ea:f6:09:25:3e:fe:8f:5a:ba:e2:41:60:54:09:b4:ca:0a:6f:
81:61:5d:83:c6:eb:5e:48:da:c6:cf:be:d2:50:c0:72:83:28:
f4:02:d1:ab:21:83:97:78:1b:db:fb:2f:a1:32:73:7e:9f:99:
69:b9:ec:d0:00:31:75:3a:39:e3:f5:53:2c:f8:33:2a:6d:db:
d4:a5:82:4d:d4:a7:86:c1:73:1c:99:4f:c4:3f:0e:89:15:2f:
3a:e6:71:3c:cb:04:42:63:1b:81:3d:f4:7a:d0:36:c1:85:77:
19:ea:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org