Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/haekipfnhvo-GD4ld0MuhdcLtKs.roa
File: haekipfnhvo-GD4ld0MuhdcLtKs.roa (raw, json)
Hash identifier: pDirPg48IKPQBsv9lDNx9i55o1BvnbpgKT7Ac66eHzA=
Subject key identifier: 85:A7:A4:8A:97:E7:86:FA:3E:18:3E:25:77:43:2E:85:D7:0B:B4:AB
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 0185702700D583DB0AB47050B447992524EA
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/haekipfnhvo-GD4ld0MuhdcLtKs.roa
Signing time: Mon 02 Jan 2023 01:44:42 +0000
ROA not before: Mon 02 Jan 2023 01:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 46.244.32.0/20 maxlen: 20
92.246.224.0/19 maxlen: 19
185.45.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:27:00:d5:83:db:0a:b4:70:50:b4:47:99:25:24:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Jan 2 01:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85a7a48a97e786fa3e183e2577432e85d70bb4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:f2:3e:6b:6f:76:1e:b0:a3:d1:8f:60:f0:
44:0f:69:f0:6f:df:2c:cc:31:81:22:46:35:6c:3c:
0a:b2:53:3c:34:35:30:3d:ea:7e:02:fc:9a:b8:1e:
cc:74:4f:44:87:72:4a:de:22:58:66:0c:03:51:c6:
1b:b2:5f:91:be:b4:32:7c:0c:21:ef:33:cc:05:aa:
96:b9:dd:f5:13:09:1c:25:16:39:fc:36:3a:e5:a7:
94:4c:3d:22:76:cd:64:44:fd:b6:d7:14:10:25:03:
a3:32:e8:bb:4d:58:6f:d4:a2:03:5f:3e:75:ba:76:
38:5d:71:e2:5a:53:dd:0f:7a:4c:ed:46:26:7c:6b:
6f:e2:3c:b0:0f:89:d8:38:93:6b:08:d9:37:b9:8e:
2c:31:db:86:c8:4f:fd:96:54:6f:44:06:91:da:ee:
30:5d:01:f5:4a:ed:94:79:21:76:bf:47:63:b2:b3:
f4:74:d4:b3:18:9d:5f:eb:a0:61:49:d3:de:15:24:
bf:85:69:c0:5b:0a:13:f7:af:03:75:94:10:49:7f:
99:a6:65:b9:a6:be:c1:52:ce:ea:02:37:82:1f:e9:
4e:5b:32:5f:a3:0c:30:ae:f0:91:72:c0:ae:54:fb:
85:5c:28:d3:e7:83:96:66:9d:9a:b2:93:ee:12:51:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A7:A4:8A:97:E7:86:FA:3E:18:3E:25:77:43:2E:85:D7:0B:B4:AB
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/haekipfnhvo-GD4ld0MuhdcLtKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.32.0/20
92.246.224.0/19
185.45.160.0/22
Signature Algorithm: sha256WithRSAEncryption
82:63:21:fb:d7:e0:ea:8c:36:7c:6e:3f:7c:e8:27:e3:8f:71:
cb:fa:81:c8:8d:07:ab:6b:21:cf:cd:5c:e1:49:b3:35:9f:d4:
49:ac:bb:43:13:4c:d9:f2:27:86:f2:ed:50:23:ef:af:82:4a:
ad:5f:b8:77:29:01:12:59:16:d2:65:53:71:54:cf:ab:a6:59:
b1:27:63:37:39:dd:a7:92:d3:12:c2:4e:20:68:f8:27:e0:6f:
f8:5c:b9:09:55:9d:47:eb:6f:0f:ce:7a:3a:d8:46:34:1b:43:
83:bf:90:e0:97:4c:e7:8f:f2:c6:05:a5:90:17:6e:09:bc:7d:
68:6d:92:46:9d:8b:70:67:0e:61:aa:40:9b:82:3c:89:7f:08:
25:bd:60:c1:ea:a6:ff:38:1f:aa:91:0a:96:f0:09:86:0e:ba:
ad:4d:cf:29:a7:58:15:e8:2c:c4:fc:b2:87:e3:21:b1:0f:83:
64:b7:ab:29:24:76:00:1e:e0:0c:a7:6f:06:8c:e3:20:99:1f:
b5:4d:ae:e6:93:e3:3e:4d:42:1b:1a:19:df:4a:c5:73:2f:ec:
61:61:9a:3b:89:8b:05:2d:3a:54:c8:26:a2:d2:1e:1d:1d:7a:
4f:36:8c:67:56:22:d3:13:d0:c8:5d:d8:a9:5c:8e:66:f0:3a:
04:8f:d2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:22 2024 by rpki-client on console-fra.rpki-client.org