Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HAc-YiyBtDQ-3HO2hUQBort6H1A.roa
File: HAc-YiyBtDQ-3HO2hUQBort6H1A.roa (raw, json)
Hash identifier: +ddgrYbDPbasKL21LEnJ9q9Gxdgkc68CXBVAiigq74E=
Subject key identifier: 1C:07:3E:62:2C:81:B4:34:3E:DC:73:B6:85:44:01:A2:BB:7A:1F:50
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01858165AC97AF86D04A1292DFEAB9E99C74
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HAc-YiyBtDQ-3HO2hUQBort6H1A.roa
Signing time: Thu 05 Jan 2023 10:06:42 +0000
ROA not before: Thu 05 Jan 2023 10:06:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 192.176.176.0/21 maxlen: 24
192.71.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:65:ac:97:af:86:d0:4a:12:92:df:ea:b9:e9:9c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 5 10:06:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c073e622c81b4343edc73b6854401a2bb7a1f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:1a:82:98:43:90:fd:ae:da:a4:30:cb:0f:
22:01:f4:8c:9b:43:2e:27:12:79:9c:8d:85:5e:7b:
37:c3:c6:b2:0b:36:0b:d0:30:2d:a7:2c:db:c3:c4:
74:9c:e5:55:cd:f8:7d:b3:da:48:ed:d5:bd:9d:67:
f3:d9:cc:b3:dd:01:c8:a5:40:d5:8a:13:92:4a:29:
52:a0:97:7c:a2:37:ac:e0:fd:b9:97:d7:fb:fa:f7:
b7:1b:a4:48:88:f6:25:f4:70:10:04:c8:ef:64:4e:
53:10:c6:8a:1f:91:0e:2e:e5:16:bf:40:67:b1:bd:
b1:3e:f7:73:da:70:69:15:61:41:8e:b2:0b:85:3d:
54:03:56:4f:92:18:9c:c3:e5:85:a0:91:ee:b2:ff:
aa:f5:10:a9:4c:74:6c:50:49:f0:b1:12:74:ad:6c:
a8:5c:2d:fd:79:69:4d:36:de:f7:66:30:f7:44:e6:
18:40:cb:9b:f2:7d:18:53:c9:b3:e7:a4:3c:76:3e:
20:1c:30:3d:53:8f:38:32:f0:0f:d1:1e:b3:92:ff:
ae:2b:f3:0a:d8:90:f4:94:67:2a:c6:93:05:ae:4d:
3f:74:ed:db:12:63:7d:e3:1b:41:23:b8:df:df:6d:
a4:0a:f9:68:76:28:2f:0c:63:f5:14:ba:0f:f1:98:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:07:3E:62:2C:81:B4:34:3E:DC:73:B6:85:44:01:A2:BB:7A:1F:50
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HAc-YiyBtDQ-3HO2hUQBort6H1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.155.0/24
192.176.176.0/21
Signature Algorithm: sha256WithRSAEncryption
39:ad:33:77:a6:3a:3c:8c:15:7d:92:51:40:f0:43:67:95:de:
24:e2:03:72:d7:53:ff:0a:d0:46:be:a8:4e:41:bd:de:c5:1f:
f1:61:ba:cd:1c:f6:a9:d9:a4:39:5e:36:99:f1:82:0d:56:94:
d3:21:36:21:51:29:fc:6a:22:32:96:cc:eb:c7:c0:03:73:15:
75:b9:01:6b:ea:05:ac:33:03:24:91:a7:1c:f8:1e:43:59:7c:
d5:2d:09:5c:21:bc:1f:7a:a9:ea:6a:df:f3:a0:00:1e:55:81:
bd:31:6a:d1:ae:42:a7:28:17:2c:5c:a8:93:45:9f:49:b5:59:
d8:cd:4b:42:c8:ba:9c:b5:50:6a:82:71:64:ec:d6:5c:be:63:
e0:2e:4d:5f:8b:74:5f:bd:64:99:fb:b7:35:51:d4:f9:21:ab:
ab:38:e2:45:6d:87:68:a7:dc:0d:f1:aa:f3:12:2f:86:22:5f:
9f:b5:af:c8:9f:ac:83:18:06:58:f0:d1:58:d3:c0:f5:c5:85:
6c:e9:92:3e:09:09:96:42:70:48:19:b2:3a:35:ca:84:86:2f:
34:1a:f8:42:d3:06:a2:c9:74:74:b8:ca:52:96:99:98:92:40:
f8:de:d3:e7:ed:dc:4d:ce:57:b1:ca:fb:5f:db:3e:e5:a0:56:
93:0c:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org