Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/HjYjmhuuBIOvQ_F0Rv112pO2CF8.roa
File: HjYjmhuuBIOvQ_F0Rv112pO2CF8.roa (raw, json)
Hash identifier: HElrdlR9Z1vNQhEKvM+Ao6Uqrnoxocf5eEiPA58+tkU=
Subject key identifier: 1E:36:23:9A:1B:AE:04:83:AF:43:F1:74:46:FD:75:DA:93:B6:08:5F
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 0185704BBBFA1E6607EBB51AC17726111FB8
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/HjYjmhuuBIOvQ_F0Rv112pO2CF8.roa
Signing time: Mon 02 Jan 2023 02:24:49 +0000
ROA not before: Mon 02 Jan 2023 02:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31252
IP address blocks: 193.57.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:bb:fa:1e:66:07:eb:b5:1a:c1:77:26:11:1f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Jan 2 02:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e36239a1bae0483af43f17446fd75da93b6085f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:c4:3f:cf:70:4f:d0:13:0a:fd:ef:e1:4d:
73:12:3c:d8:58:d6:b5:30:aa:09:b7:6f:3d:f5:bf:
00:24:c2:59:f5:3e:ad:91:d1:34:cc:00:a4:a2:4c:
82:3f:6f:09:78:ac:23:32:75:95:c4:84:dc:93:2c:
e4:b2:e3:8d:39:03:f5:1c:72:af:8c:f9:a6:9b:ff:
a0:18:98:1e:73:46:25:21:f3:a3:e0:a3:c1:4c:96:
d6:1e:a3:27:76:e6:c6:6a:88:34:83:b6:05:d9:55:
57:d6:c8:ba:4c:22:a0:eb:13:1c:d3:79:9c:55:ef:
20:2d:9b:9c:c7:83:f4:ad:46:3e:52:77:c6:e5:41:
c7:de:be:d5:cd:3e:2b:14:41:c4:6c:b0:8f:2a:e5:
d4:ee:c1:28:2b:c5:70:a0:b9:04:52:5f:ad:6d:be:
4f:fc:8d:d2:a0:be:c5:ca:5a:17:2a:e6:3f:b7:88:
75:43:de:d7:8c:ee:02:ee:27:6f:05:15:eb:47:a3:
09:42:09:c2:19:d9:01:ff:dd:c3:1d:fd:c4:6c:b6:
17:74:c4:ff:07:48:5d:7a:9b:fa:88:bb:ff:53:59:
37:9a:4b:12:e9:0d:61:0c:0a:92:2c:92:44:5d:f2:
27:e6:1e:4b:87:17:fa:a6:a6:4a:8b:e8:f7:66:e7:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:36:23:9A:1B:AE:04:83:AF:43:F1:74:46:FD:75:DA:93:B6:08:5F
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/HjYjmhuuBIOvQ_F0Rv112pO2CF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:61:2f:5c:ed:8a:d5:70:e3:9f:3f:d0:62:d1:c1:f8:f2:d9:
c0:f8:c0:b6:68:ea:cb:6c:0a:cc:c1:0d:3d:b1:ad:1d:ee:f5:
79:ad:f5:d1:6d:a7:e6:41:aa:84:10:fc:30:78:af:96:20:d4:
21:98:d9:fd:5f:7e:8e:f7:a5:b5:9d:a4:76:62:09:97:c2:9a:
1f:2b:ef:ee:0c:29:84:76:3d:ce:e0:23:b2:96:c8:5a:5e:b7:
c2:b7:39:59:0e:3b:4b:28:c8:20:5d:e0:c0:09:f9:c3:c0:a7:
a9:d3:70:2c:9c:c4:fa:a6:e8:cd:57:ad:03:6e:63:c4:9f:30:
23:b5:19:6c:8c:f5:b9:5d:d1:0a:77:a1:d6:2a:1c:25:96:ca:
83:dc:76:73:3f:72:52:ff:99:39:d3:7d:f4:1f:c3:61:a1:c5:
e8:78:ca:73:cd:da:99:0e:79:e8:58:bb:64:6e:10:34:32:25:
78:f3:4d:da:dd:8d:e6:98:90:27:ad:d8:4d:21:5b:1e:a5:ec:
6d:a4:41:f5:a8:2e:4a:84:18:e4:b6:51:8b:a7:af:14:59:ef:
b3:7a:89:bc:5e:b4:29:60:5b:60:0c:10:4a:70:fb:2d:26:68:
85:98:4a:7d:ed:be:80:fa:74:60:2f:62:af:80:8b:e1:1d:58:
9b:0e:e0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:05 2024 by rpki-client on console-fra.rpki-client.org