Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hFBwYjPMKR33gLH7oiMOMUbcPSA.roa
File: hFBwYjPMKR33gLH7oiMOMUbcPSA.roa (raw, json)
Hash identifier: qGQsibUaCZCORy7vqFwKKEgURfRiE0mHLdp8E1ChhuQ=
Subject key identifier: 84:50:70:62:33:CC:29:1D:F7:80:B1:FB:A2:23:0E:31:46:DC:3D:20
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018F107894731F26282EFAEBB5FF5630E57A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hFBwYjPMKR33gLH7oiMOMUbcPSA.roa
Signing time: Wed 24 Apr 2024 14:18:08 +0000
ROA not before: Wed 24 Apr 2024 14:18:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8434
IP address blocks: 192.71.158.0/24 maxlen: 24
192.121.172.0/24 maxlen: 24
192.121.192.0/24 maxlen: 24
193.180.61.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.68.0/23 maxlen: 23
193.234.237.0/24 maxlen: 24
194.14.129.0/24 maxlen: 24
194.14.212.0/24 maxlen: 24
194.68.56.0/23 maxlen: 23
194.68.99.0/24 maxlen: 24
194.68.126.0/24 maxlen: 24
194.71.27.0/24 maxlen: 24
194.71.83.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.248.0/21 maxlen: 21
194.132.108.0/23 maxlen: 24
194.132.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 07:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:10:78:94:73:1f:26:28:2e:fa:eb:b5:ff:56:30:e5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 24 14:18:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8450706233cc291df780b1fba2230e3146dc3d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:6d:e1:b1:47:4c:16:ed:f8:d2:e7:38:7a:
38:47:90:a4:6d:d3:b9:bf:bb:25:da:21:be:6c:6d:
01:80:ef:3a:e8:9f:3c:4a:90:59:8d:9b:70:e5:01:
eb:59:b1:33:1b:16:30:16:dd:3e:d0:19:e6:fc:96:
da:7c:dd:a3:49:a7:a2:1b:18:a0:97:75:96:5f:e2:
76:fd:29:7d:5d:74:36:8d:0b:ec:b7:b6:2b:78:ac:
51:2c:73:b6:19:f9:03:05:9b:28:ea:0c:55:8d:d1:
58:85:92:20:30:70:d1:27:e3:ee:3f:4b:8a:41:8c:
c2:20:b9:50:fc:83:21:62:25:9a:fa:ed:1b:86:9b:
8e:7f:6d:00:fc:ef:73:bf:79:4e:01:23:bc:fc:d7:
ac:87:3a:aa:57:ca:4c:36:32:8f:b6:49:2f:3d:9a:
9d:fe:39:cb:d8:b9:f2:13:50:06:37:e1:7a:32:19:
87:06:fe:a5:2c:52:06:84:43:ba:99:6e:5f:41:e8:
7b:c3:0f:51:41:f6:3d:88:75:00:45:28:04:84:4f:
4d:e4:c1:97:3a:ff:b7:25:9e:7f:e0:8a:66:f5:51:
18:ef:e3:ee:1e:c3:f9:67:86:0e:c7:f7:26:f3:78:
e3:dc:32:62:86:c0:f0:34:64:cf:53:b9:e8:3a:f1:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:70:62:33:CC:29:1D:F7:80:B1:FB:A2:23:0E:31:46:DC:3D:20
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hFBwYjPMKR33gLH7oiMOMUbcPSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.158.0/24
192.121.172.0/24
192.121.192.0/24
193.180.61.0/24
193.183.118.0/24
193.234.68.0/23
193.234.237.0/24
194.14.129.0/24
194.14.212.0/24
194.68.56.0/23
194.68.99.0/24
194.68.126.0/24
194.71.27.0/24
194.71.83.0/24
194.71.140.0/23
194.71.248.0/21
194.132.108.0/23
194.132.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:18:3c:07:33:11:60:9c:b5:d9:02:47:2f:2f:c1:b3:2c:d5:
ef:21:26:9c:23:91:8a:14:fe:5a:0b:da:64:50:bb:a8:b7:e3:
22:e2:74:00:1f:a3:8a:d7:df:80:60:bb:3e:b2:17:ff:66:14:
ff:00:ef:67:d3:5f:cc:42:cc:9f:57:9b:ea:c1:1f:5c:d3:cc:
f2:d7:3e:53:1a:2e:01:99:05:f8:e6:01:c2:2d:29:fb:c7:26:
ac:27:f4:50:08:bc:aa:3b:ea:0f:f1:76:ef:fd:12:38:1c:b6:
90:60:18:8d:64:2c:f1:76:c3:81:43:ea:fb:e7:cb:d2:09:a9:
7b:bf:ea:b8:6f:06:04:76:eb:47:ba:b9:02:34:2a:c6:4d:9a:
18:87:d6:81:53:2d:66:65:4e:9b:a9:87:7c:ba:74:a9:72:a2:
54:9a:a6:05:57:0a:77:6e:b1:27:b4:c3:4a:88:8b:b7:16:bb:
b9:e2:f2:da:b8:c5:c1:c9:69:76:8a:3c:3e:6c:5f:42:51:98:
4d:2c:29:79:5d:1b:f3:4b:4a:1a:45:48:34:80:68:7a:82:2f:
3b:d9:6c:ad:22:ba:4c:17:7f:a5:cf:e4:cc:29:67:10:be:50:
3e:22:84:b7:de:7f:9b:cc:9d:59:6a:ff:26:39:f1:74:4a:b0:
b6:36:48:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 08:19:56 2024 by rpki-client on console-ams.rpki-client.org