Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/HyB-wEnoMQ_QPFk10f1XquLkJog.roa
File: HyB-wEnoMQ_QPFk10f1XquLkJog.roa (raw, json)
Hash identifier: WhjHVuFQs/cVgOVkVm9ULKfZfoVFgR/K+ctoa7ZHCrs=
Subject key identifier: 1F:20:7E:C0:49:E8:31:0F:D0:3C:59:35:D1:FD:57:AA:E2:E4:26:88
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 01856F2FF3B208E24B6266E4B6EB0256CE9E
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/HyB-wEnoMQ_QPFk10f1XquLkJog.roa
Signing time: Sun 01 Jan 2023 21:14:51 +0000
ROA not before: Sun 01 Jan 2023 21:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.30.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f3:b2:08:e2:4b:62:66:e4:b6:eb:02:56:ce:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Jan 1 21:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f207ec049e8310fd03c5935d1fd57aae2e42688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:a6:18:49:48:d2:5a:3e:da:aa:23:b3:02:
09:db:22:6e:3c:ab:b3:68:32:c5:c2:de:97:63:ba:
e7:af:69:0c:f8:09:40:72:38:c1:57:15:a7:35:01:
5e:8c:85:ee:3e:a9:21:e7:a1:ca:6d:4d:0c:ef:e9:
62:bb:ba:0d:77:2f:91:2a:01:1f:98:c2:c4:eb:06:
1a:3a:f1:a4:8a:79:12:09:87:95:13:58:dd:30:00:
a2:74:fa:1a:d8:5e:11:a7:65:bf:ab:ff:f5:a0:77:
65:70:de:06:8c:c3:c8:d9:69:a2:fb:af:8c:aa:46:
f2:80:eb:fc:57:71:58:c0:19:06:7b:5b:63:da:23:
99:7f:09:51:50:35:75:4c:c1:9a:3c:99:25:03:52:
c6:e3:e4:2d:87:a2:eb:32:ea:cb:4d:66:02:e8:76:
97:c0:5a:59:4d:3e:44:a3:2a:c0:84:58:df:75:2e:
85:e7:88:59:11:d0:e6:88:c6:89:b0:0f:b1:cd:1a:
5d:7f:18:27:b1:95:65:9f:83:58:4a:83:cf:ca:3c:
42:5c:86:1f:a1:06:ae:3f:22:41:d6:e8:4c:1e:55:
a9:e9:96:90:20:41:6e:c0:63:05:bd:ba:13:50:d3:
c2:ed:6a:06:84:5d:54:95:7a:ec:6e:80:7e:76:f1:
1b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:7E:C0:49:E8:31:0F:D0:3C:59:35:D1:FD:57:AA:E2:E4:26:88
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/HyB-wEnoMQ_QPFk10f1XquLkJog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.175.0/24
Signature Algorithm: sha256WithRSAEncryption
69:d8:06:6b:e2:ff:b3:9e:6c:dd:0a:65:da:ed:92:ee:26:da:
14:2d:69:d6:48:00:6b:30:c2:c7:27:b7:ed:cb:44:b7:52:d6:
ab:13:93:76:72:d9:ee:1b:ce:63:34:92:08:f2:86:9f:54:d5:
7b:7c:dd:e0:af:74:09:0c:09:6e:f7:d0:9e:4a:db:ac:6a:73:
b0:59:f2:41:20:4f:7b:91:d4:4d:79:3d:75:8e:21:c1:5f:bb:
10:da:c9:cc:1d:52:2a:cb:ba:91:f9:9f:ac:20:25:4d:7a:04:
a9:35:e7:ad:a1:94:d0:6e:21:71:4a:78:16:9f:09:b4:62:3f:
a4:8f:28:1e:4e:f9:9f:a7:65:bb:87:a0:7d:eb:b2:1f:77:f8:
e9:15:74:44:58:be:f4:d3:56:44:3f:be:71:64:83:22:f3:b0:
f7:15:f8:74:7d:5d:04:b6:c9:fd:cc:ec:e6:0a:5a:06:e9:90:
2d:bd:02:5a:8d:92:3c:92:6a:e3:a3:31:ca:f4:a3:bd:e2:6c:
c7:a4:38:57:f2:df:a2:d3:6d:3c:2c:6b:c9:88:77:20:14:a7:
ca:c9:f8:0d:f8:6b:ce:d1:ef:61:5c:be:d1:f7:3f:e9:12:24:
af:ac:fa:82:72:b7:e2:39:3d:c1:1d:81:65:9e:2f:28:74:b3:
2a:04:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org