Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/HjhN1AEWSLNbIQeiLyWy5MJU46s.roa
File: HjhN1AEWSLNbIQeiLyWy5MJU46s.roa (raw, json)
Hash identifier: qWCRMzKNm4il72HYUJt7SDA/d60PysMnzT0PYxkZs3k=
Subject key identifier: 1E:38:4D:D4:01:16:48:B3:5B:21:07:A2:2F:25:B2:E4:C2:54:E3:AB
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 01856FCB98A7F0543C6CE76B6CE1B2BC8872
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/HjhN1AEWSLNbIQeiLyWy5MJU46s.roa
Signing time: Mon 02 Jan 2023 00:04:51 +0000
ROA not before: Mon 02 Jan 2023 00:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20712
IP address blocks: 91.240.176.0/24 maxlen: 24
2001:67c:2a40::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:98:a7:f0:54:3c:6c:e7:6b:6c:e1:b2:bc:88:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Jan 2 00:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e384dd4011648b35b2107a22f25b2e4c254e3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:d8:f1:07:57:ba:f5:1f:2b:11:78:d2:58:
04:8b:0e:6a:ea:77:ba:44:8b:8a:b7:f5:55:04:59:
26:ed:28:4d:87:2f:c2:c2:72:5d:50:cd:43:f2:3f:
9d:a9:54:bf:78:1b:0d:a7:7b:e4:5d:f0:10:f8:b6:
77:18:af:12:92:64:b4:7f:2a:85:01:4e:46:db:05:
f5:5b:da:bd:34:dc:af:61:ca:4b:97:bb:6f:f3:b9:
26:18:4c:81:38:e6:37:f7:7f:2c:96:9a:49:ff:ce:
9a:0a:63:6e:f9:54:6d:61:ee:4c:80:cf:ec:a9:18:
4e:3d:a3:74:e8:58:63:41:30:0f:40:d5:87:db:66:
2b:16:90:98:15:cb:4b:66:ba:8b:83:9c:82:89:b9:
4c:4f:78:e6:3e:a8:d9:8f:25:c9:c9:70:1a:a2:be:
3c:ff:e0:28:53:a3:1a:c6:a8:ee:c5:4f:49:25:98:
c6:1d:46:47:0f:a5:6e:95:95:97:04:a5:11:11:46:
b9:f9:4d:7a:43:1c:3b:34:c8:60:06:11:09:72:01:
ca:9e:94:60:a3:7b:07:e3:9d:5a:99:21:ba:ae:9b:
94:e8:39:ee:ca:4b:5e:26:0d:7c:ed:aa:29:ec:cd:
0a:67:2e:ae:22:f6:85:ce:bf:6a:44:b4:d2:7d:7f:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:38:4D:D4:01:16:48:B3:5B:21:07:A2:2F:25:B2:E4:C2:54:E3:AB
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/HjhN1AEWSLNbIQeiLyWy5MJU46s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.176.0/24
IPv6:
2001:67c:2a40::/48
Signature Algorithm: sha256WithRSAEncryption
75:ad:2a:37:48:5f:de:da:e4:e9:32:2a:62:10:7c:03:34:48:
27:0d:ba:75:00:22:ab:9a:ae:f9:f6:b6:53:93:de:ec:81:1c:
d1:7f:e7:7a:4c:01:2b:9f:d0:54:c5:08:af:b5:1e:0e:71:c8:
be:06:f4:ca:af:8b:01:8d:f2:66:89:3c:59:f1:a4:a4:e1:26:
b0:87:60:2f:16:3c:51:b4:84:10:41:a4:1d:ef:48:7d:62:a5:
7f:28:63:6b:4b:7d:b6:16:41:7e:5d:8d:26:0a:37:49:93:3b:
fb:6f:98:16:8b:b6:e7:a9:cf:42:93:ef:d4:a4:12:36:30:3a:
64:fb:e0:a3:1c:db:81:27:4c:e5:d2:15:15:3e:20:bf:c7:34:
e5:2f:d4:19:1a:ae:2b:c9:8f:a0:34:cd:ec:6a:0e:d3:c1:6a:
c7:bb:b2:eb:ab:a0:3f:a4:cf:87:62:92:f6:65:3d:7b:30:cf:
8c:ef:26:c6:21:8f:86:54:66:e2:2a:42:5a:be:ec:ea:ce:db:
c8:b7:7d:1e:eb:5e:e1:4b:01:25:9d:0b:28:c5:9b:5a:16:00:
79:44:6f:c8:6e:68:c2:ed:b9:01:ac:55:13:8a:8c:6a:2f:29:
ce:f4:99:27:a7:5b:01:ee:5d:4c:35:8a:26:f6:ae:88:8f:ee:
89:f8:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:31 2024 by rpki-client on console-ams.rpki-client.org