Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/HMJfsixNFVs3D7yg_hfyFohe2gM.roa
File: HMJfsixNFVs3D7yg_hfyFohe2gM.roa (raw, json)
Hash identifier: RaH0R+VXgLotGgCIWmFZ+7Y8G7ML09xoUSajz8qEhXA=
Subject key identifier: 1C:C2:5F:B2:2C:4D:15:5B:37:0F:BC:A0:FE:17:F2:16:88:5E:DA:03
Certificate issuer: /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial: 0185A4FA49C1B449FDFBBA7EE5F904532A51
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/HMJfsixNFVs3D7yg_hfyFohe2gM.roa
Signing time: Thu 12 Jan 2023 07:55:44 +0000
ROA not before: Thu 12 Jan 2023 07:55:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 91.194.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:fa:49:c1:b4:49:fd:fb:ba:7e:e5:f9:04:53:2a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Validity
Not Before: Jan 12 07:55:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cc25fb22c4d155b370fbca0fe17f216885eda03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ab:58:a8:ab:88:65:dd:cd:84:f7:00:e7:3c:
fa:da:24:e4:8f:74:74:d2:95:9d:14:36:d6:a6:0f:
c8:f5:ed:09:71:07:be:c4:08:52:04:75:73:43:7b:
62:cc:b8:05:ee:f4:d3:c2:72:ce:0a:a5:be:f9:e3:
e1:00:ef:d4:df:f5:2f:29:39:3a:33:87:5b:50:84:
fd:66:9f:26:e1:a0:ca:0a:ed:c3:22:a9:cc:a1:b0:
72:73:68:1d:35:38:bd:31:db:ea:3e:3d:0b:af:eb:
03:61:02:5a:bc:63:5b:bb:5c:a2:78:89:93:3f:ad:
b8:04:b3:2a:da:70:fd:81:67:16:9b:81:58:42:04:
39:80:c0:20:4c:12:33:28:61:5e:5a:2e:c0:d6:d9:
a4:7d:96:cd:91:60:69:30:f6:04:ee:5f:0f:e3:04:
b0:09:c3:db:2c:a7:aa:69:47:d1:ad:06:56:b7:bd:
f3:83:87:bf:22:63:10:80:c8:1d:0b:2e:c2:f5:20:
e1:66:71:15:e8:8d:72:35:5f:c5:de:34:41:da:07:
9c:88:19:6b:b0:0d:88:c1:93:39:40:9d:de:33:15:
22:f8:fd:d9:5a:73:a3:29:0c:13:b0:8f:20:41:1e:
f1:96:ff:38:2d:58:be:96:e0:ce:24:1c:5c:84:2c:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C2:5F:B2:2C:4D:15:5B:37:0F:BC:A0:FE:17:F2:16:88:5E:DA:03
X509v3 Authority Key Identifier:
keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/HMJfsixNFVs3D7yg_hfyFohe2gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.48.0/23
Signature Algorithm: sha256WithRSAEncryption
14:4b:3a:72:f9:09:f2:48:2d:ba:47:45:b7:26:91:95:51:9e:
77:79:27:42:b7:33:3f:43:b5:e7:94:ce:36:3c:33:b4:71:2f:
42:b1:9b:27:2a:6a:d5:5c:4a:5f:ae:29:bc:ac:7a:0a:f3:ba:
e2:23:e8:a7:43:70:a4:48:d1:b6:f9:8c:7f:3e:48:3d:c4:98:
2e:74:a7:68:93:27:51:42:bb:3e:dd:86:95:df:7e:6b:f8:22:
51:2e:5a:c9:e8:91:33:33:e6:75:9f:68:f0:41:3f:24:5a:79:
ac:05:00:ba:ac:0c:23:c9:89:6c:99:5c:df:c7:04:e4:19:e4:
87:f2:33:c3:15:75:1e:07:87:93:5f:dc:93:a0:87:5b:7e:1d:
5f:0c:05:25:94:1e:fc:20:c1:c9:64:f7:be:8c:33:81:ea:30:
4a:b8:f7:f1:99:82:ce:ad:89:ca:c5:4e:30:0e:1d:24:81:21:
6d:6e:1e:0f:f2:65:88:f2:4a:20:9e:53:23:d4:69:56:9a:76:
3b:39:f9:0d:5c:5c:34:fd:8a:26:60:1e:e6:88:f8:e6:56:18:
48:28:e3:87:ad:c4:33:fd:d3:fb:9f:46:48:72:10:1d:95:93:
4b:1e:ad:73:3b:b0:ce:5b:0d:09:9b:64:9b:c9:c3:e7:6f:47:
cd:fe:ba:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWk+knBtEn9+7p+5fkEUypRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYjk4MWNiNmVlNzlkMmRmOGM4OWQ2YTM0YzU1NGJkZTNm
Y2M3NWYwHhcNMjMwMTEyMDc1NTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2MyNWZiMjJjNGQxNTViMzcwZmJjYTBmZTE3ZjIxNjg4NWVkYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6tYqKuIZd3NhPcA5zz62iTkj3R0
0pWdFDbWpg/I9e0JcQe+xAhSBHVzQ3tizLgF7vTTwnLOCqW++ePhAO/U3/UvKTk6
M4dbUIT9Zp8m4aDKCu3DIqnMobByc2gdNTi9MdvqPj0Lr+sDYQJavGNbu1yieImT
P624BLMq2nD9gWcWm4FYQgQ5gMAgTBIzKGFeWi7A1tmkfZbNkWBpMPYE7l8P4wSw
CcPbLKeqaUfRrQZWt73zg4e/ImMQgMgdCy7C9SDhZnEV6I1yNV/F3jRB2geciBlr
sA2IwZM5QJ3eMxUi+P3ZWnOjKQwTsI8gQR7xlv84LVi+luDOJBxchCzkEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBzCX7IsTRVbNw+8oP4X8haIXtoDMB8GA1UdIwQY
MBaAFHO5gctu550t+MidajTFVL3j/MdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMThiNWEtNDBlZi00Nzc5LWEwZTUt
YWE1ODFkMzc4YTdjLzEvSE1KZnNpeE5GVnMzRDd5Z19oZnlGb2hlMmdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kMThiNWEtNDBlZi00Nzc5LWEwZTUtYWE1ODFkMzc4YTdj
LzEvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8IwMA0G
CSqGSIb3DQEBCwUAA4IBAQAUSzpy+QnySC26R0W3JpGVUZ53eSdCtzM/Q7XnlM42
PDO0cS9CsZsnKmrVXEpfrim8rHoK87riI+inQ3CkSNG2+Yx/Pkg9xJgudKdokydR
Qrs+3YaV335r+CJRLlrJ6JEzM+Z1n2jwQT8kWnmsBQC6rAwjyYlsmVzfxwTkGeSH
8jPDFXUeB4eTX9yToIdbfh1fDAUllB78IMHJZPe+jDOB6jBKuPfxmYLOrYnKxU4w
Dh0kgSFtbh4P8mWI8kognlMj1GlWmnY7OfkNXFw0/YomYB7miPjmVhhIKOOHrcQz
/dP7n0ZIchAdlZNLHq1zO7DOWw0Jm2SbycPnb0fN/rqU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:31 2024 by rpki-client on console-ams.rpki-client.org