Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HljnB1-QV_Od6lPSYhCVquIAoU4.roa
File: HljnB1-QV_Od6lPSYhCVquIAoU4.roa (raw, json)
Hash identifier: QLXSO9nZHyI+oMvxNGZAWyhMw1pRkO69PLYKztFlS6s=
Subject key identifier: 1E:58:E7:07:5F:90:57:F3:9D:EA:53:D2:62:10:95:AA:E2:00:A1:4E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018D88C964057DA016F630DFD5A282F953CA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HljnB1-QV_Od6lPSYhCVquIAoU4.roa
Signing time: Thu 08 Feb 2024 12:55:16 +0000
ROA not before: Thu 08 Feb 2024 12:55:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8434
IP address blocks: 194.71.27.0/24 maxlen: 24
194.132.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 10:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:c9:64:05:7d:a0:16:f6:30:df:d5:a2:82:f9:53:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 8 12:55:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e58e7075f9057f39dea53d2621095aae200a14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:62:41:3d:ef:bd:64:ec:12:4b:14:60:36:
94:ff:26:41:76:f2:1b:f2:cb:85:53:5a:95:49:22:
ba:7d:66:31:48:e1:ee:16:65:a4:fa:b5:8a:92:0e:
e9:50:ef:52:a3:21:04:84:9a:c3:ff:70:c3:39:83:
a6:44:ab:5b:11:60:10:38:ca:30:ac:0e:a7:13:46:
4b:3f:d9:8a:9e:e6:66:aa:67:a9:04:63:9a:07:30:
7b:c2:de:ed:21:3c:c7:8a:72:4c:e4:ec:70:c2:ac:
d2:20:b4:51:39:35:fe:82:6e:c1:1e:b9:32:d8:0e:
29:f2:91:d2:7c:c5:ec:a1:5d:b0:ab:8b:e4:be:49:
36:47:f7:18:b5:9a:8c:9d:13:dd:2e:00:c9:63:43:
10:d0:d0:95:33:25:d2:3e:64:81:10:e7:bf:b3:e5:
e3:8e:32:df:76:1b:ba:11:9f:ce:82:13:c7:b1:fe:
da:a0:6f:89:18:17:2a:39:1b:60:34:45:61:c3:f0:
14:77:96:13:f7:83:85:87:86:4b:9a:91:1b:51:e0:
17:b7:c9:1f:c2:f1:27:61:4d:bd:95:50:aa:cd:e2:
96:12:a5:93:a4:4e:d2:fa:8a:6c:8a:95:39:41:e6:
79:5b:31:8a:36:a0:ba:43:26:ad:68:d8:c2:f6:79:
ca:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:58:E7:07:5F:90:57:F3:9D:EA:53:D2:62:10:95:AA:E2:00:A1:4E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HljnB1-QV_Od6lPSYhCVquIAoU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.27.0/24
194.132.174.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ee:5a:cc:2d:59:c1:c9:d2:90:f9:c0:30:df:5e:c1:42:2e:
33:a4:27:0b:f8:fa:4f:ac:bb:77:55:6d:82:89:b7:19:6c:68:
e4:81:d5:34:8f:ae:8c:e1:49:ee:f5:1a:77:0e:ae:e4:3b:38:
4b:b5:d1:2b:41:05:59:f4:66:76:6b:22:1f:1d:60:4c:67:66:
b7:bf:47:16:ca:34:b1:77:0e:81:11:91:5d:57:48:7e:f8:67:
69:cc:44:1c:44:85:4e:88:4b:7e:8a:85:f0:9c:88:56:23:d9:
ba:bf:4c:0b:44:48:5b:da:80:b4:06:ca:0c:b5:7d:3b:03:5a:
68:0b:ae:ec:d9:bd:8c:d8:65:7c:c3:21:62:cf:b8:09:0e:f4:
36:73:6b:91:c0:12:2e:2d:df:27:64:5b:20:98:bf:d2:d5:25:
50:76:d4:71:e2:80:c1:75:a7:9a:75:b0:7b:23:3c:00:c6:9f:
96:97:7f:c5:4a:e0:92:81:9a:76:f5:10:01:0e:e8:2f:55:7e:
d8:be:e9:2e:98:cc:23:b6:b6:2e:14:8c:8f:ba:8f:33:2a:3e:
61:39:24:11:70:d7:5a:81:16:01:67:cc:9d:0a:9d:9c:c7:dd:
7b:66:35:1c:b9:79:9e:91:79:74:3e:c5:c3:e1:79:52:7e:f0:
e3:d0:a1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 15:02:36 2024 by rpki-client on console-fra.rpki-client.org