Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hrmWGAespKrFUCEtg5pT5T_du74.roa
File: hrmWGAespKrFUCEtg5pT5T_du74.roa (raw, json)
Hash identifier: rQyh3wY0oZVgLXGkUyRvfCO1BEtBVl+3TQnP9ZWxt/M=
Subject key identifier: 86:B9:96:18:07:AC:A4:AA:C5:50:21:2D:83:9A:53:E5:3F:DD:BB:BE
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53F4737EE7F35B9B8713072BF6EBBB
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hrmWGAespKrFUCEtg5pT5T_du74.roa
Signing time: Sun 01 Jan 2023 07:55:19 +0000
ROA not before: Sun 01 Jan 2023 07:55:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44541
IP address blocks: 185.142.142.0/24 maxlen: 32
2a06:7a06::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f4:73:7e:e7:f3:5b:9b:87:13:07:2b:f6:eb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86b9961807aca4aac550212d839a53e53fddbbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:f6:48:6c:a0:8d:5c:da:d0:36:c5:13:ff:
73:db:91:63:95:fc:17:b9:43:09:f9:60:55:a2:f0:
76:bd:f8:c6:73:a3:8a:f3:8d:df:eb:a2:b9:f3:ac:
1f:b8:84:46:40:41:5a:9d:8a:78:12:a0:8e:58:20:
e8:ab:d7:77:4f:5f:4b:36:e2:c6:96:0f:5c:b8:c9:
56:23:c0:54:b7:d3:9f:66:3a:23:57:3a:f4:cd:1f:
4d:64:25:f1:93:b6:7b:87:0e:01:48:ed:79:1e:55:
79:b2:83:23:9e:04:5e:3c:9b:6e:aa:fa:e1:a2:fc:
2c:00:34:ae:9f:f3:76:c1:9c:ad:9c:10:ac:0c:f6:
83:a3:be:cd:fb:a3:fb:e9:a5:38:3b:e9:d1:2c:ab:
14:d7:19:7c:4f:6a:17:49:32:26:60:2f:a8:23:7c:
98:95:d8:5b:aa:ad:08:02:3a:f9:04:df:ae:34:01:
db:f0:ed:f0:01:53:ef:34:54:aa:e6:12:47:46:6d:
be:1e:4d:0a:f1:d9:4e:ef:e4:24:fd:8a:48:eb:07:
07:1e:54:a3:f4:1e:8f:02:78:38:29:a1:02:dc:56:
99:ef:c7:35:5d:ba:b6:c7:a5:78:25:a0:d0:b6:05:
e4:a5:00:dd:43:a1:d2:68:ee:09:da:69:5f:21:2d:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B9:96:18:07:AC:A4:AA:C5:50:21:2D:83:9A:53:E5:3F:DD:BB:BE
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hrmWGAespKrFUCEtg5pT5T_du74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.142.0/24
IPv6:
2a06:7a06::/48
Signature Algorithm: sha256WithRSAEncryption
19:56:be:89:0c:45:9e:c3:5a:cb:e8:d8:10:97:96:cc:e3:28:
f1:a7:62:e9:6a:97:b2:37:a2:7b:0a:8a:b4:33:4a:35:64:f5:
c0:ef:9e:80:ba:66:e0:d3:f6:d0:42:6d:bd:b3:ee:0a:bf:b1:
f3:3c:3a:58:67:fa:b0:25:98:a9:20:24:a3:9f:0e:19:10:0b:
48:cd:62:c2:c1:dd:91:e8:ce:42:7c:5f:40:36:96:66:d8:c5:
5a:a0:13:7f:59:5c:b0:e2:e9:ed:96:f2:df:db:89:2d:03:af:
5e:e0:e6:d1:f8:c7:b7:bd:e3:1b:05:54:76:93:3c:45:4a:ec:
e1:2e:a6:02:ab:b6:fc:f9:74:42:b7:cc:02:4f:22:c2:93:06:
c9:4f:96:c2:0a:ab:ca:dc:08:3d:31:a1:1d:dc:28:4b:2a:15:
c9:3f:ae:0a:08:32:df:0b:82:03:6e:12:74:02:6c:78:35:2f:
22:70:95:82:7a:c6:29:74:d0:6c:5c:ef:2a:5a:88:84:1c:0a:
e1:27:3c:2b:ab:3f:40:98:53:19:1d:12:7d:96:8d:71:ec:d5:
6f:0a:b7:60:9c:f3:24:f3:09:38:0b:aa:91:0a:4b:99:e5:c2:
b7:1f:7a:d6:9a:51:b8:44:d3:44:da:0f:68:f3:2e:a6:1d:ab:
b7:41:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org