Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Hpf1J0elfsfx9r4mdx6wJBLDQpU.roa
File: Hpf1J0elfsfx9r4mdx6wJBLDQpU.roa (raw, json)
Hash identifier: BQspw36GiO9Tf9+IypUoTvafN0Iy6SFEKrur7tzIYgk=
Subject key identifier: 1E:97:F5:27:47:A5:7E:C7:F1:F6:BE:26:77:1E:B0:24:12:C3:42:95
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018C7915E24D9FD629AB5FAF8BE4D0F86582
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Hpf1J0elfsfx9r4mdx6wJBLDQpU.roa
Signing time: Sun 17 Dec 2023 18:42:06 +0000
ROA not before: Sun 17 Dec 2023 18:42:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 85.237.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:79:15:e2:4d:9f:d6:29:ab:5f:af:8b:e4:d0:f8:65:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Dec 17 18:42:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e97f52747a57ec7f1f6be26771eb02412c34295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:d5:07:12:48:b0:36:7f:5c:92:00:62:30:
1c:3b:0a:a9:47:9f:34:41:da:e7:4f:90:07:4b:96:
b5:2d:a7:af:d8:08:73:e9:26:8a:b8:ea:54:26:b8:
d4:3a:0a:2c:40:4c:f1:91:41:8f:45:dd:09:b0:bd:
d8:39:13:82:b1:a0:40:9d:b7:56:32:23:12:76:45:
29:4b:dd:3b:e9:66:59:a6:63:54:4d:a1:f8:12:95:
63:e2:00:13:a7:93:3c:4e:a2:80:17:7e:6d:45:d8:
d2:8c:2b:20:89:e5:a4:07:e8:7e:3b:c8:fd:51:ea:
89:55:9d:40:75:b3:a2:c7:1c:ad:06:b6:5b:92:0a:
ba:da:69:c9:69:52:80:02:91:bb:e2:4e:f0:5f:aa:
01:39:35:c5:4e:4c:2a:52:85:f8:5c:c8:11:8b:6a:
e8:25:b0:8c:85:bd:be:32:d9:20:07:55:d1:b7:7e:
79:02:7a:79:24:8e:03:06:34:55:14:0c:13:ee:05:
52:2e:81:17:fb:6f:00:5c:6c:22:c0:53:27:e6:04:
ca:f4:65:b7:1a:3b:18:b5:e2:de:2b:b1:7f:2b:be:
aa:7f:52:d8:61:41:0d:ed:03:24:54:77:bc:c4:75:
29:7e:6f:f8:c8:2b:84:b7:bc:9e:f2:e3:5b:6b:18:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:97:F5:27:47:A5:7E:C7:F1:F6:BE:26:77:1E:B0:24:12:C3:42:95
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Hpf1J0elfsfx9r4mdx6wJBLDQpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.68.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d1:f2:9d:4e:f3:2f:db:5c:7f:5c:c6:b9:6f:bb:8e:69:08:
07:3a:40:57:13:5a:29:01:b4:3a:f0:41:78:b7:a1:b2:f6:e1:
d4:80:c2:42:ec:bb:8d:74:53:c0:af:cd:37:b3:35:22:af:8e:
b1:49:b7:6f:0d:8e:62:3b:d2:fc:ad:5c:cc:07:fc:f9:b7:62:
16:d0:c3:88:04:d0:8b:a6:ef:01:f3:0d:43:37:e0:c9:2b:a9:
56:c4:90:47:e1:01:a2:55:6a:5e:85:02:1c:eb:6e:18:79:26:
78:f2:84:32:94:f0:ea:1f:ae:b0:3a:ba:28:d5:d5:54:00:b5:
44:4a:6c:36:81:89:12:6d:bb:2a:89:3f:4a:3f:0b:66:05:19:
1a:80:b6:e0:7d:7b:33:51:5b:68:11:02:1b:bd:34:6c:95:b3:
89:a4:67:53:fc:80:0a:ea:90:34:9f:3a:9a:78:1c:cc:49:8e:
0a:b2:8e:7d:9d:fd:f3:25:cf:71:24:79:15:78:ab:2c:f1:63:
f7:43:64:d6:5e:b8:50:f1:89:3a:ad:16:fc:11:ae:be:8f:ee:
8b:fe:f7:8e:5d:e2:ec:f7:18:82:eb:bf:30:c8:25:eb:76:94:
5c:a0:be:aa:26:4e:b2:41:be:1d:05:5b:69:d4:c7:56:82:4e:
3e:6b:ae:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org