Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/HjXNIWT3a6EpH9YoqdeYAY7bSD4.roa
File: HjXNIWT3a6EpH9YoqdeYAY7bSD4.roa (raw, json)
Hash identifier: frK0Jokc9GIqbGkKdrCYOFpJXMlf7rJ/gDBBEP0XVI0=
Subject key identifier: 1E:35:CD:21:64:F7:6B:A1:29:1F:D6:28:A9:D7:98:01:8E:DB:48:3E
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01867806D03D4E9857FB4B2079F44569A1AC
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/HjXNIWT3a6EpH9YoqdeYAY7bSD4.roa
Signing time: Wed 22 Feb 2023 07:29:17 +0000
ROA not before: Wed 22 Feb 2023 07:29:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200088
IP address blocks: 45.82.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:06:d0:3d:4e:98:57:fb:4b:20:79:f4:45:69:a1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Feb 22 07:29:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e35cd2164f76ba1291fd628a9d798018edb483e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:a0:30:8b:42:6d:c2:57:3f:f0:68:8b:78:
90:c2:1e:de:43:27:9b:31:57:7c:7a:6f:62:5d:04:
69:4d:dd:bc:85:1f:d8:1d:75:e8:5f:c6:ba:d0:44:
23:1f:92:3e:99:03:a1:c9:8b:cb:21:7d:26:97:77:
7e:c6:45:c8:bd:2b:4b:c2:c5:00:9b:86:cd:66:f8:
e0:4f:58:7e:49:ce:9b:59:9e:7c:4e:2d:18:46:1d:
0f:0a:fa:0b:7e:d1:0f:cc:cd:1a:d9:7d:90:05:83:
d2:c0:e1:1a:c7:9f:44:3d:aa:49:11:1e:dd:24:d1:
d5:5e:e2:0b:cb:28:7d:15:9b:82:3a:86:99:3b:1a:
50:20:a1:35:46:43:fd:78:bc:d8:9c:2f:06:35:41:
41:4d:0a:9e:ad:4e:10:a5:f2:ed:03:03:3a:a1:3d:
b1:cc:c4:ce:81:9f:e5:37:43:ea:a5:f6:ef:6a:3c:
47:71:e2:3d:45:3c:ef:e8:4d:a2:6a:66:13:25:3d:
c8:19:20:e1:07:85:52:0b:d3:8f:56:3a:c6:1f:91:
e2:9c:89:02:b3:88:88:a5:2e:01:1a:6a:8b:c6:27:
50:7b:74:d8:50:cb:3b:36:89:e4:56:73:f2:44:a5:
f9:08:61:d1:e8:68:a0:f0:e5:a5:ae:90:48:43:25:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:35:CD:21:64:F7:6B:A1:29:1F:D6:28:A9:D7:98:01:8E:DB:48:3E
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/HjXNIWT3a6EpH9YoqdeYAY7bSD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.15.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c7:fa:ae:1f:f5:f5:92:54:fe:1d:3c:a2:d2:50:d1:76:22:
5a:81:36:f5:07:a5:d3:29:78:ff:5f:4d:80:66:84:58:19:bb:
59:a6:2a:a7:db:9c:68:83:d4:b2:d0:89:2f:e0:5e:57:cc:ea:
5e:5d:d7:b7:47:28:95:b3:b5:3b:c2:6a:17:a0:74:10:72:82:
ce:1d:d3:8e:d3:e4:4c:46:ae:c2:e5:3e:a7:8c:1c:87:29:ed:
2a:0e:80:3e:b3:a9:1b:18:1d:ae:b8:15:6b:46:3c:ed:f2:72:
b6:b7:8a:31:32:ab:ad:1a:cb:93:e0:cb:e5:6f:c0:00:06:60:
c7:31:02:02:62:89:46:f5:77:f5:d1:ed:b1:88:5a:a9:58:0c:
38:eb:62:c2:fc:99:b7:e6:e1:86:d5:df:be:2d:8a:9a:ab:73:
ac:d7:f6:b8:e2:df:ac:fa:14:44:81:86:59:03:69:92:0a:4c:
6f:a1:c7:8d:8c:1c:ad:9c:fc:43:f2:f3:f0:62:8e:1c:e1:57:
2e:b2:fb:23:fe:8c:20:2c:a9:fc:ee:69:7e:35:84:26:df:a9:
d6:87:4d:cd:3b:66:dc:ab:c6:19:ea:b6:55:6e:d6:c0:f1:35:
ce:9e:78:f5:63:c9:e9:e0:73:ed:2b:0d:a6:b2:f6:ed:b0:51:
36:4b:75:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ4BtA9TphX+0sgefRFaaGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx
NjlmODMwHhcNMjMwMjIyMDcyOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTM1Y2QyMTY0Zjc2YmExMjkxZmQ2MjhhOWQ3OTgwMThlZGI0ODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRWgMItCbcJXP/Boi3iQwh7eQyeb
MVd8em9iXQRpTd28hR/YHXXoX8a60EQjH5I+mQOhyYvLIX0ml3d+xkXIvStLwsUA
m4bNZvjgT1h+Sc6bWZ58Ti0YRh0PCvoLftEPzM0a2X2QBYPSwOEax59EPapJER7d
JNHVXuILyyh9FZuCOoaZOxpQIKE1RkP9eLzYnC8GNUFBTQqerU4QpfLtAwM6oT2x
zMTOgZ/lN0PqpfbvajxHceI9RTzv6E2iamYTJT3IGSDhB4VSC9OPVjrGH5HinIkC
s4iIpS4BGmqLxidQe3TYUMs7NonkVnPyRKX5CGHR6Gig8OWlrpBIQyVYhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB41zSFk92uhKR/WKKnXmAGO20g+MB8GA1UdIwQY
MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt
NWM0NzZlMzMyNWY1LzEvSGpYTklXVDNhNkVwSDlZb3FkZVlBWTdiU0Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1
LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVIPMA0G
CSqGSIb3DQEBCwUAA4IBAQAyx/quH/X1klT+HTyi0lDRdiJagTb1B6XTKXj/X02A
ZoRYGbtZpiqn25xog9Sy0Ikv4F5XzOpeXde3RyiVs7U7wmoXoHQQcoLOHdOO0+RM
Rq7C5T6njByHKe0qDoA+s6kbGB2uuBVrRjzt8nK2t4oxMqutGsuT4Mvlb8AABmDH
MQICYolG9Xf10e2xiFqpWAw462LC/Jm35uGG1d++LYqaq3Os1/a44t+s+hREgYZZ
A2mSCkxvoceNjBytnPxD8vPwYo4c4Vcusvsj/owgLKn87ml+NYQm36nWh03NO2bc
q8YZ6rZVbtbA8TXOnnj1Y8np4HPtKw2msvbtsFE2S3Vd
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:56 2024 by rpki-client on console-ams.rpki-client.org