Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HygF-9eASAC0Iy8tAXrNusnTB-U.roa
File: HygF-9eASAC0Iy8tAXrNusnTB-U.roa (raw, json)
Hash identifier: VKwpccNFw+uzSiARHBJSfCDwyrfYg182J/IMyHBaQaU=
Subject key identifier: 1F:28:05:FB:D7:80:48:00:B4:23:2F:2D:01:7A:CD:BA:C9:D3:07:E5
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018616527AA2EBAB384174741983C9254794
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HygF-9eASAC0Iy8tAXrNusnTB-U.roa
Signing time: Fri 03 Feb 2023 08:09:09 +0000
ROA not before: Fri 03 Feb 2023 08:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212578
IP address blocks: 195.114.192.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.193.0/24 maxlen: 24
195.114.194.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.204.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
195.114.206.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
195.114.201.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:52:7a:a2:eb:ab:38:41:74:74:19:83:c9:25:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 3 08:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f2805fbd7804800b4232f2d017acdbac9d307e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:2a:3f:3e:88:d6:fa:14:df:69:5e:21:9a:
0f:fb:4a:52:68:65:b9:08:c2:da:ad:d0:4c:c1:48:
f1:6a:dc:f5:9e:7a:04:58:ab:f9:9b:df:2e:4b:df:
58:0d:e0:db:ac:8d:c9:55:e6:58:5f:12:ce:ce:23:
43:f6:98:12:b2:ed:d3:4f:47:68:1b:df:8c:a5:c8:
ea:82:64:1d:43:d0:fd:8c:98:ef:09:7e:62:f7:0d:
bb:ea:24:e1:98:49:fa:11:6a:f5:81:e2:a9:cc:c7:
41:d1:f7:38:98:f8:7a:6a:02:8f:30:ec:f5:28:c6:
0a:f8:1b:63:34:02:e6:fd:e3:74:81:14:32:cd:ea:
7c:bb:d1:36:a1:b3:93:8f:3a:de:79:02:ac:68:99:
f2:5f:2f:09:2b:2c:34:d8:89:ed:f9:8f:d9:a3:ce:
45:36:32:db:a1:28:e3:30:62:24:d6:f2:ef:0a:ad:
0d:ec:c6:b2:f9:57:f5:f8:10:24:54:26:fc:65:55:
91:0e:35:51:68:20:d9:10:b2:82:6f:5c:67:30:a6:
7c:fa:46:0b:51:d4:f8:51:45:87:8f:77:b7:19:c9:
0b:84:5c:0e:17:c0:d8:f4:85:49:4b:6a:a5:08:a7:
6b:de:8b:e5:e7:78:89:1f:b6:37:50:39:92:c1:b7:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:28:05:FB:D7:80:48:00:B4:23:2F:2D:01:7A:CD:BA:C9:D3:07:E5
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HygF-9eASAC0Iy8tAXrNusnTB-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.192.0-195.114.198.255
195.114.200.0-195.114.206.255
Signature Algorithm: sha256WithRSAEncryption
7d:a3:12:78:1f:01:d0:ae:c9:d3:45:fa:eb:ab:3a:d4:03:d1:
f0:91:f0:30:28:91:1c:3d:5f:e2:d3:4a:7e:a0:be:45:c8:2e:
6b:85:53:10:40:1b:32:dd:89:a7:d3:09:d4:90:56:af:a5:ea:
f9:b1:3c:ff:7b:f6:9a:a7:f1:6a:50:db:06:13:ac:94:bd:9c:
7d:fe:fd:99:6b:c2:f1:99:2c:64:00:8c:7b:db:6b:a7:45:26:
85:c1:c2:af:68:92:83:a4:d7:0d:e5:b0:ad:6b:fb:c2:92:a2:
53:4a:8e:ce:b7:6f:07:3e:00:99:aa:f1:74:40:73:cb:b9:5d:
70:e8:2f:ca:f6:df:63:35:5b:fc:9e:4a:3d:e3:73:cd:d6:57:
04:62:ca:89:7e:93:15:ca:d9:2b:17:98:ce:9c:c3:22:0d:85:
60:5c:24:67:0e:10:de:2a:e1:72:2d:32:f8:13:4e:64:e6:9d:
92:93:0c:8a:09:47:de:f5:1c:39:d7:cd:fc:3a:3d:8a:49:62:
e4:d8:6d:79:16:61:d6:41:fe:59:50:26:31:f5:42:bf:a2:8b:
3d:67:fc:8c:41:43:25:21:a0:a2:71:02:d6:dc:37:e0:57:c1:
23:4c:66:0c:13:d9:b1:68:24:06:16:12:4d:b8:7f:82:43:f1:
00:67:ea:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:42 2023 by rpki-client on console-ams.rpki-client.org