Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/hZ5H4CUsh0PmrlPJnbVEmXfSQNM.roa
File: hZ5H4CUsh0PmrlPJnbVEmXfSQNM.roa (raw, json)
Hash identifier: 9ok/FrLajI5ekXa0OBw5mO4PfoYO0sDaKv9qxiRoefQ=
Subject key identifier: 85:9E:47:E0:25:2C:87:43:E6:AE:53:C9:9D:B5:44:99:77:D2:40:D3
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 0185C5367979BC0BCCE016504B62645B6594
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/hZ5H4CUsh0PmrlPJnbVEmXfSQNM.roa
Signing time: Wed 18 Jan 2023 14:09:19 +0000
ROA not before: Wed 18 Jan 2023 14:09:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205051
IP address blocks: 185.231.208.0/22 maxlen: 24
91.205.80.0/22 maxlen: 24
91.205.82.0/24 maxlen: 24
45.142.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:36:79:79:bc:0b:cc:e0:16:50:4b:62:64:5b:65:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Jan 18 14:09:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=859e47e0252c8743e6ae53c99db5449977d240d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:34:47:33:d3:45:41:de:cd:42:71:e9:9c:
a0:b5:58:4d:b5:99:e5:14:a8:6e:77:38:28:12:26:
f8:79:9e:cb:82:e0:fc:d5:05:5e:2d:85:d2:ae:08:
98:87:55:73:00:f2:f7:cf:39:8c:f0:ec:8c:45:d7:
2a:8c:aa:c6:13:ff:4b:2e:a5:40:61:b2:34:80:5b:
3b:34:e3:2b:bb:68:4a:1c:fe:13:87:f1:fb:a8:22:
98:1e:6a:f6:04:63:c6:b4:56:07:d5:04:f1:75:91:
3a:51:77:19:e4:8d:39:a3:74:1e:7b:3a:9b:8e:71:
3f:fc:e1:60:57:c8:22:73:a7:26:12:08:b4:83:13:
1f:e4:3f:db:51:a3:22:84:e1:b0:a8:62:6e:01:34:
63:67:7b:31:ef:e3:ef:8f:aa:f0:c9:b8:25:1b:57:
c1:96:88:3b:b5:5b:69:f6:81:85:47:a3:70:94:56:
bb:42:58:6e:15:57:85:c6:45:5f:8b:ba:ee:0a:46:
b7:0e:03:60:f9:d8:1f:4c:ad:00:ac:f2:28:30:59:
0b:98:9b:ec:9c:cb:94:9f:b4:4f:5b:41:74:bc:52:
cf:ca:fe:b7:4e:bd:39:2e:74:6f:77:58:d7:aa:25:
15:f6:24:24:02:51:37:0c:56:9d:69:78:c8:69:61:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9E:47:E0:25:2C:87:43:E6:AE:53:C9:9D:B5:44:99:77:D2:40:D3
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/hZ5H4CUsh0PmrlPJnbVEmXfSQNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.168.0/22
91.205.80.0/22
185.231.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:2e:40:a7:17:37:39:58:a2:9d:c3:9b:c6:0d:6a:26:3f:7d:
d1:7b:e1:ac:4f:b3:ea:77:73:74:d9:ea:b0:7a:22:f7:e5:68:
ab:2e:83:48:ba:8a:3c:fd:35:03:55:25:60:aa:f8:c3:73:67:
9f:b1:84:cb:d3:a7:5b:08:b0:31:5c:26:86:e2:cf:51:53:2b:
7d:4a:a0:f5:89:83:8b:83:49:63:55:7c:4f:c1:f6:e5:0e:8e:
04:7c:50:c6:65:93:af:c2:00:23:4e:8a:02:a3:49:48:6c:27:
fa:54:4a:e6:af:dd:3a:30:43:a6:ff:62:70:d1:b6:a0:e6:c7:
07:3c:cc:66:4c:78:c9:6e:95:0b:4b:52:f5:c6:49:05:fe:e4:
5e:39:9f:4e:96:72:57:0e:4e:5b:88:a8:8e:c1:d7:d5:e3:ef:
1f:de:be:78:43:5e:e2:d4:a3:7a:5d:25:be:69:4f:23:2c:30:
6f:98:d7:b9:21:7f:10:59:72:1e:6e:b2:96:38:99:c3:bc:6f:
cd:8d:14:c1:68:55:de:f2:d8:ef:f0:f0:14:22:c5:53:8c:88:
3f:1a:c7:a3:e6:65:67:b8:cd:03:6c:81:e5:2f:aa:a7:d8:a1:
77:47:77:1d:ce:e9:1e:e6:55:72:00:29:a5:53:63:7e:11:2a:
27:10:b1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:17 2024 by rpki-client on console-fra.rpki-client.org