Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/hmpgJ2Fyj2qCwqxmqJzFaD5iwSg.roa
File: hmpgJ2Fyj2qCwqxmqJzFaD5iwSg.roa (raw, json)
Hash identifier: 5rK4eft3AP79LHJPg5D4adnpiAyWJwejd1qiCoulmfc=
Subject key identifier: 86:6A:60:27:61:72:8F:6A:82:C2:AC:66:A8:9C:C5:68:3E:62:C1:28
Certificate issuer: /CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Certificate serial: 01856F94D4C005FF30DB4E2E2937EA4D7304
Authority key identifier: 1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/hmpgJ2Fyj2qCwqxmqJzFaD5iwSg.roa
Signing time: Sun 01 Jan 2023 23:05:02 +0000
ROA not before: Sun 01 Jan 2023 23:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51325
IP address blocks: 195.226.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:d4:c0:05:ff:30:db:4e:2e:29:37:ea:4d:73:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Validity
Not Before: Jan 1 23:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=866a602761728f6a82c2ac66a89cc5683e62c128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:b3:a4:f9:16:81:bc:2d:6d:ea:f5:3c:86:
98:33:a8:b5:36:b2:48:f7:92:56:e5:4d:3b:cf:11:
1b:46:3d:9d:e0:3c:d4:ce:da:08:25:6b:65:1f:78:
e7:70:8a:85:e8:a6:82:6a:25:07:de:ac:02:b3:3c:
04:dc:a5:bd:24:50:42:f5:7a:c1:62:5e:d0:e9:44:
64:ba:3d:39:7c:c1:47:92:04:30:cc:34:f8:0d:c7:
fd:29:9f:79:3e:41:a8:c4:dc:9b:e8:3e:27:65:08:
14:2b:ca:9d:64:8d:b1:98:6a:24:4e:d8:84:57:8d:
1f:82:0d:4b:a5:0e:22:9e:57:66:12:0f:68:1f:82:
43:80:25:80:48:8a:bd:db:ca:97:a4:a9:c6:75:d2:
d3:0b:ed:18:cf:8f:bb:3b:ba:8d:ab:9d:f7:80:5f:
46:bc:83:08:ab:59:c3:47:ea:b5:aa:d2:7b:60:6f:
72:fd:ca:6c:75:77:e8:33:ba:cf:0b:33:b8:6d:44:
fd:1f:73:55:78:4c:a3:4d:1c:87:20:25:af:ad:5c:
9f:8a:aa:a6:d9:ad:f2:62:fd:5c:09:1e:39:14:69:
e9:47:e6:2d:68:0f:7c:3e:9a:1a:eb:ce:58:89:da:
28:48:6d:37:f8:8a:35:1c:5f:92:04:a8:6e:de:86:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6A:60:27:61:72:8F:6A:82:C2:AC:66:A8:9C:C5:68:3E:62:C1:28
X509v3 Authority Key Identifier:
keyid:1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/hmpgJ2Fyj2qCwqxmqJzFaD5iwSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:dc:76:6f:47:75:84:c2:5a:59:89:61:aa:8b:60:b9:5c:cb:
13:0d:e3:33:ef:1c:58:1a:93:f7:12:a5:12:4c:e2:c5:6b:be:
e8:01:95:36:72:10:67:38:fb:d7:59:0a:67:fd:d4:95:75:a6:
3a:63:ac:09:4a:b2:2b:b6:f9:4d:33:a0:74:14:0a:f0:6f:a6:
a9:1a:3d:9b:00:f2:12:99:aa:30:0c:2b:07:16:3b:e7:7d:9c:
0c:e9:ab:ea:80:26:b0:64:de:17:0d:3e:c4:23:51:ad:f7:b6:
17:54:ad:44:b9:d9:2b:fa:0e:78:8e:e8:75:f8:8d:b3:3d:4d:
19:c7:31:6e:a6:55:48:2d:14:00:4f:8d:65:01:05:fa:41:d5:
66:6f:55:fc:2b:ec:c5:a7:75:e3:77:89:d3:3d:27:8f:12:17:
87:e2:5b:77:f8:b7:bc:90:59:1f:e2:b9:23:2d:c2:ca:3e:e2:
8f:cb:c4:55:4c:6a:98:63:02:94:f0:2b:ff:0d:a6:3a:d3:ca:
d8:1d:03:73:02:77:f2:33:46:96:51:dc:ae:6d:be:81:4a:c1:
12:6b:dd:7f:6b:d4:71:a0:c6:cc:2b:ee:f1:a4:67:7f:e7:19:
fe:c2:c4:89:96:47:3c:7e:7f:89:f0:ce:38:16:b7:54:88:6b:
14:4a:f3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:50 2024 by rpki-client on console-ams.rpki-client.org