Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/HLU-8iHUhehb82vcDbv3CZQfquI.roa
File: HLU-8iHUhehb82vcDbv3CZQfquI.roa (raw, json)
Hash identifier: C67zb3yVZjcinuLzsDJfFDrSwAcTF0CK8htWS3E4LIE=
Subject key identifier: 1C:B5:3E:F2:21:D4:85:E8:5B:F3:6B:DC:0D:BB:F7:09:94:1F:AA:E2
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 01860E8092C58062CD8DE4D5BFEF7D9264C0
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/HLU-8iHUhehb82vcDbv3CZQfquI.roa
Signing time: Wed 01 Feb 2023 19:42:32 +0000
ROA not before: Wed 01 Feb 2023 19:42:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210779
IP address blocks: 176.105.253.0/24 maxlen: 24
2a0d:c740:3c::/48 maxlen: 48
2a0d:c740:2c::/48 maxlen: 48
2a0d:c740:f::/48 maxlen: 48
2a0d:c740:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 11 Feb 2023 01:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0e:80:92:c5:80:62:cd:8d:e4:d5:bf:ef:7d:92:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Feb 1 19:42:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cb53ef221d485e85bf36bdc0dbbf709941faae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:07:7f:f0:d5:03:f9:34:f2:6a:02:f5:5b:
de:45:50:1a:e2:79:cd:1b:c8:bb:10:29:df:51:eb:
8b:2d:0c:91:55:b9:e0:95:e0:99:2b:22:a7:c4:b9:
7e:9b:b4:2e:da:da:6e:62:f8:49:2d:04:37:58:49:
80:5b:fc:0d:67:ca:8e:64:58:62:c0:2f:bc:01:95:
53:17:5a:91:6f:a3:02:9b:e0:ce:5a:a0:d9:94:c5:
d0:31:1b:39:ba:64:9d:fe:3f:66:b4:56:86:78:f8:
15:a4:a9:d9:f0:e7:f3:d3:82:68:41:c7:40:17:5a:
a9:4a:42:cc:19:32:c0:18:29:1b:a2:59:de:44:40:
38:53:bf:62:4d:cb:e2:28:1b:48:78:59:8f:5b:0d:
1b:68:56:c9:10:6b:eb:2c:f3:2b:65:2e:a6:f2:6c:
15:e5:71:2a:08:d6:d3:91:2d:50:7d:b3:fb:46:c6:
29:1e:06:8c:87:11:79:f5:b1:f5:97:1c:67:b1:52:
a8:0c:d1:a5:c8:17:73:09:62:9e:ee:58:03:0d:61:
8f:76:e9:4e:77:ff:ee:ab:b5:d0:d6:9a:f9:7f:26:
26:22:b2:54:51:1e:23:b1:a6:c0:8c:d0:1b:99:a0:
d3:1f:79:60:79:3f:9c:5c:07:bc:40:91:34:94:e5:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B5:3E:F2:21:D4:85:E8:5B:F3:6B:DC:0D:BB:F7:09:94:1F:AA:E2
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/HLU-8iHUhehb82vcDbv3CZQfquI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.253.0/24
IPv6:
2a0d:c740:a::/48
2a0d:c740:f::/48
2a0d:c740:2c::/48
2a0d:c740:3c::/48
Signature Algorithm: sha256WithRSAEncryption
ae:4e:ec:3f:82:13:5d:8c:2e:c0:b6:87:66:75:2b:87:b0:5e:
e3:05:dc:8e:61:78:d4:56:c2:1a:53:58:59:77:67:97:ab:d8:
d6:56:66:b2:82:c5:6c:3d:d0:d8:d3:f6:2e:81:fd:77:1d:64:
24:bb:31:32:e9:8a:13:4b:3e:78:a3:88:ca:37:5a:6f:26:d4:
50:29:03:4e:9e:c5:1d:c7:9a:32:62:f4:e5:65:46:0f:0a:95:
cb:b3:7b:ee:d5:17:d6:5d:2c:b0:1c:c7:55:b4:e1:3b:dc:86:
60:ce:d5:65:2f:09:82:a0:65:19:73:76:d6:fa:d8:fd:c9:44:
5d:f1:47:bd:e1:39:aa:7f:4c:7d:a6:62:c5:eb:d2:0b:f5:0d:
ec:df:28:81:df:7c:03:1b:41:f5:03:91:8d:13:11:0f:31:f3:
a7:6c:6a:48:3a:cb:11:6a:0f:e9:b6:f3:2d:22:d1:7f:39:07:
7f:b2:90:b5:5e:17:86:99:7b:72:e2:38:a9:7e:35:80:bb:48:
8a:37:f3:3f:bd:d9:78:a3:96:96:2d:7e:91:6b:ea:1f:1f:f2:
d6:6f:39:06:90:d4:a8:7a:2e:df:95:61:76:53:e9:66:fa:ca:
30:c4:d5:70:97:09:05:4e:dc:13:f8:db:34:fc:75:05:36:1f:
c8:ad:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org