Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/H7AoSh9mxx5Cbqp2zE4c3Ob-4mI.roa
File: H7AoSh9mxx5Cbqp2zE4c3Ob-4mI.roa (raw, json)
Hash identifier: ad9EVlUBvox2mFJdrzyGyVUXvTuh7Xse5jT1XMtMULA=
Subject key identifier: 1F:B0:28:4A:1F:66:C7:1E:42:6E:AA:76:CC:4E:1C:DC:E6:FE:E2:62
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 018591FEA12C9041B9FF8F27F9D892959735
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/H7AoSh9mxx5Cbqp2zE4c3Ob-4mI.roa
Signing time: Sun 08 Jan 2023 15:27:41 +0000
ROA not before: Sun 08 Jan 2023 15:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62257
IP address blocks: 194.147.150.0/24 maxlen: 24
194.147.170.0/24 maxlen: 24
194.36.175.0/24 maxlen: 24
45.139.9.0/24 maxlen: 24
194.180.208.0/24 maxlen: 24
194.180.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:91:fe:a1:2c:90:41:b9:ff:8f:27:f9:d8:92:95:97:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 8 15:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fb0284a1f66c71e426eaa76cc4e1cdce6fee262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:40:b2:cc:d7:14:e0:5d:cd:9d:67:3e:a5:ed:
eb:1f:e2:9d:aa:a7:ec:37:8e:55:98:5e:7d:b8:ed:
5d:bf:6b:28:3a:2c:9f:91:32:d4:5c:b5:6b:b6:62:
7b:20:9b:cd:3d:ca:42:b1:af:96:42:d0:7a:ae:ee:
80:55:7c:c3:ac:e7:c2:c4:96:0e:1f:99:7a:a4:45:
a9:a2:c5:ad:72:cc:d6:77:65:0e:23:2b:71:0a:a0:
b9:21:e7:86:0d:5d:06:82:a2:7f:27:6f:69:8f:0b:
38:ad:34:9d:be:d1:cd:ab:46:df:c5:31:7e:69:5e:
35:6a:f6:f1:38:b8:b1:6d:3e:da:cc:96:34:77:0b:
20:fb:0b:7d:cf:93:3f:7b:a3:36:d4:e1:59:e2:45:
71:ea:a7:c9:40:a6:1a:1e:46:93:38:63:48:89:4f:
5a:32:a5:17:2c:5a:8c:e3:4a:87:14:ad:ef:ad:7e:
1e:80:27:1e:f8:c0:9a:e0:5b:ba:c9:7f:74:8a:35:
ce:e2:1f:95:09:a9:46:20:ea:07:11:13:b4:df:d7:
58:2d:2e:61:10:e6:ed:0f:18:0e:06:3d:5e:22:5b:
a9:1e:07:22:4d:0b:95:cb:4b:50:2a:a3:7e:98:9d:
f5:ec:72:0c:94:e3:98:16:50:61:fb:30:66:39:d1:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B0:28:4A:1F:66:C7:1E:42:6E:AA:76:CC:4E:1C:DC:E6:FE:E2:62
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/H7AoSh9mxx5Cbqp2zE4c3Ob-4mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
194.36.175.0/24
194.147.150.0/24
194.147.170.0/24
194.180.208.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:29:26:5e:a4:1e:83:b7:84:18:f0:20:3a:2c:43:00:76:c1:
2c:99:f5:52:3f:08:28:9a:7b:de:f2:51:b4:0e:48:89:b1:d6:
8b:b4:de:5c:77:42:b0:4e:c5:73:42:e4:42:a6:47:65:db:fe:
cd:4d:b8:2e:01:b7:fa:ee:5f:d3:07:64:2b:ee:47:38:b3:05:
e6:fa:59:7b:1e:73:0b:26:07:9e:0b:ee:93:af:3f:55:31:c2:
fc:50:32:9a:7c:7e:2a:db:b1:7d:51:8e:22:fb:bf:3c:6c:9f:
48:d8:4f:59:16:34:32:be:78:7f:f2:ff:fa:f7:46:c9:d7:d9:
d4:91:46:2a:66:77:d4:dd:c2:c0:6c:40:f6:98:a4:70:fa:97:
f0:ad:f1:d2:59:ef:e7:9e:c4:65:85:6f:45:60:eb:c1:5f:4e:
c7:c7:c0:e7:03:5b:9c:92:b3:3c:32:c8:73:7e:11:d4:82:a6:
6a:ec:ad:69:80:19:fe:20:0e:38:84:be:70:5f:1a:f2:35:18:
5b:f9:88:e9:b7:75:2c:16:63:7a:93:cf:cf:f8:62:9e:16:5c:
2b:6f:16:69:2d:d9:6e:ef:f6:e9:66:50:86:f5:bc:c0:29:6d:
2c:d8:6a:33:ab:fa:e6:6e:59:cf:74:9c:79:f9:fa:c2:c4:7a:
5b:ad:dc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org