Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/HBjrbLsDxfACoxgZJhBryYblDIY.roa
File: HBjrbLsDxfACoxgZJhBryYblDIY.roa (raw, json)
Hash identifier: rF4c6Jkc94sJH2XyxREehdCCKmG95Qmbh7cog9EHqx0=
Subject key identifier: 1C:18:EB:6C:BB:03:C5:F0:02:A3:18:19:26:10:6B:C9:86:E5:0C:86
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 0185708C9A1BC7F83F4EC773003011FDE8B9
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/HBjrbLsDxfACoxgZJhBryYblDIY.roa
Signing time: Mon 02 Jan 2023 03:35:40 +0000
ROA not before: Mon 02 Jan 2023 03:35:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62000
IP address blocks: 185.140.44.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:9a:1b:c7:f8:3f:4e:c7:73:00:30:11:fd:e8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Jan 2 03:35:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c18eb6cbb03c5f002a3181926106bc986e50c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:24:5b:77:73:71:da:ab:1d:55:0c:46:dc:
60:c2:e1:07:41:12:3f:be:81:4e:c5:c8:58:bf:2f:
d2:1e:32:ef:36:fc:ed:79:81:88:44:77:5b:0f:ef:
e5:4c:6e:ab:53:22:af:28:62:66:5a:9e:73:00:40:
6c:99:60:59:c8:44:3c:85:73:5e:3c:41:51:92:b8:
8c:a4:d7:61:e0:f4:2e:02:62:8a:52:78:fd:3b:c2:
51:d4:03:cc:81:01:62:1a:f6:45:bb:28:0d:be:5f:
77:6b:03:42:dc:0e:8f:5f:f3:5a:df:af:38:40:33:
d8:07:ab:0f:47:3b:0f:d7:ac:72:c4:8c:a3:36:a2:
26:05:d2:44:5c:30:50:b6:91:07:5d:d4:4f:e5:61:
7e:49:c6:de:36:1e:39:bb:59:ed:71:79:43:7d:6d:
ff:eb:e6:ee:3d:7c:3c:47:be:01:6e:29:88:0a:e1:
b0:5c:29:a3:b1:18:35:5c:33:34:74:64:50:ae:30:
f9:a0:0b:73:8c:7b:82:b0:85:05:c8:5a:ed:cf:cc:
06:c5:ba:f6:95:6e:7f:f9:2b:7e:4c:86:21:d8:ea:
15:94:64:17:4a:e7:02:f2:3e:3a:10:f7:17:66:96:
7e:67:7d:07:c7:44:f6:22:5d:a9:d9:6c:82:19:63:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:18:EB:6C:BB:03:C5:F0:02:A3:18:19:26:10:6B:C9:86:E5:0C:86
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/HBjrbLsDxfACoxgZJhBryYblDIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.44.0/22
Signature Algorithm: sha256WithRSAEncryption
24:93:58:6c:60:3a:d3:1a:5a:c2:d9:f3:ba:bf:80:dc:7b:2a:
00:fc:23:15:7a:99:9a:4b:eb:50:2d:b0:bc:25:4b:4f:82:7a:
24:ff:67:15:4d:1c:69:fc:88:13:65:d9:1b:cc:79:81:77:08:
d0:0a:39:c2:7b:3f:6b:18:e9:9b:27:6d:30:5f:c4:ec:ef:c4:
f2:1a:47:fa:f2:27:31:aa:c6:20:84:94:3a:08:91:44:b2:89:
8f:74:55:1f:2a:e1:77:c7:9c:a3:e9:4e:6b:5b:31:f0:4c:37:
78:7f:fd:11:1e:ea:a8:3c:d0:a2:2a:70:f3:d4:82:b4:1d:7d:
8a:1c:5d:bc:38:56:2d:6d:e1:a8:92:58:ca:6d:d3:ee:cf:c9:
2c:b4:8b:23:36:98:6e:c5:b7:ca:a5:0e:51:89:b6:51:b8:11:
6d:b0:a1:8a:d7:80:c4:80:6a:95:b8:2f:74:ad:e5:a0:8b:22:
35:83:dd:f2:c8:b6:15:db:e0:b0:56:5b:c7:c5:8d:67:76:57:
11:da:57:3c:84:24:fe:10:54:2c:0b:61:3c:7a:76:49:76:3d:
b9:ff:8e:a5:17:66:3e:02:0f:62:2e:58:06:ef:be:10:54:2c:
49:e0:12:80:67:87:87:50:a5:27:bf:4c:ff:67:24:d7:b4:4f:
39:ba:4c:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjJobx/g/TsdzADAR/ei5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMGIyZjQ2YmE1NzBhMTY3N2JmZDU4NGM3MjgyMmFkOWQ5
ZmU1YjAwHhcNMjMwMTAyMDMzNTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzE4ZWI2Y2JiMDNjNWYwMDJhMzE4MTkyNjEwNmJjOTg2ZTUwYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8QkW3dzcdqrHVUMRtxgwuEHQRI/
voFOxchYvy/SHjLvNvzteYGIRHdbD+/lTG6rUyKvKGJmWp5zAEBsmWBZyEQ8hXNe
PEFRkriMpNdh4PQuAmKKUnj9O8JR1APMgQFiGvZFuygNvl93awNC3A6PX/Na3684
QDPYB6sPRzsP16xyxIyjNqImBdJEXDBQtpEHXdRP5WF+ScbeNh45u1ntcXlDfW3/
6+buPXw8R74BbimICuGwXCmjsRg1XDM0dGRQrjD5oAtzjHuCsIUFyFrtz8wGxbr2
lW5/+St+TIYh2OoVlGQXSucC8j46EPcXZpZ+Z30Hx0T2Il2p2WyCGWPYIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwY62y7A8XwAqMYGSYQa8mG5QyGMB8GA1UdIwQY
MBaAFDALL0a6VwoWd7/VhMcoIq2dn+WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmIt
OTgwNzI5MzZjNTE4LzEvSEJqcmJMc0R4ZkFDb3hnWkpoQnJ5WWJsRElZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmItOTgwNzI5MzZjNTE4
LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYwsMA0G
CSqGSIb3DQEBCwUAA4IBAQAkk1hsYDrTGlrC2fO6v4DceyoA/CMVepmaS+tQLbC8
JUtPgnok/2cVTRxp/IgTZdkbzHmBdwjQCjnCez9rGOmbJ20wX8Ts78TyGkf68icx
qsYghJQ6CJFEsomPdFUfKuF3x5yj6U5rWzHwTDd4f/0RHuqoPNCiKnDz1IK0HX2K
HF28OFYtbeGokljKbdPuz8kstIsjNphuxbfKpQ5RibZRuBFtsKGK14DEgGqVuC90
reWgiyI1g93yyLYV2+CwVlvHxY1ndlcR2lc8hCT+EFQsC2E8enZJdj25/46lF2Y+
Ag9iLlgG774QVCxJ4BKAZ4eHUKUnv0z/ZyTXtE85ukyK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:54 2024 by rpki-client on console-fra.rpki-client.org