Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HFZH_ZQMvVbWeb7If8nRCFDc7K4.roa
File: HFZH_ZQMvVbWeb7If8nRCFDc7K4.roa (raw, json)
Hash identifier: t0OPV+sjbquTT23YC3AoHfeNIviGfNGEXNuZu7BqTWc=
Subject key identifier: 1C:56:47:FD:94:0C:BD:56:D6:79:BE:C8:7F:C9:D1:08:50:DC:EC:AE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188AFB26CA7E69816FE2CE677B90A34B73C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HFZH_ZQMvVbWeb7If8nRCFDc7K4.roa
Signing time: Mon 12 Jun 2023 13:01:25 +0000
ROA not before: Mon 12 Jun 2023 13:01:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 195.133.80.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.25.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:b2:6c:a7:e6:98:16:fe:2c:e6:77:b9:0a:34:b7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 12 13:01:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c5647fd940cbd56d679bec87fc9d10850dcecae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:f0:f5:63:f5:e9:4d:fb:0e:63:67:ee:49:
b1:e7:b9:a3:19:ba:3a:77:67:dc:83:7b:4d:73:d0:
24:4b:30:70:4b:c4:d2:d1:23:45:5d:19:70:d2:50:
b9:db:3e:22:93:88:e2:3e:48:e0:74:cc:7f:13:b2:
d7:7b:b4:7d:62:ba:f2:66:a0:3a:c1:06:8d:2e:ef:
29:40:a2:6f:02:dd:df:5a:23:92:1d:4c:b6:4d:99:
09:98:54:7d:5b:17:da:3b:f6:74:30:06:6b:68:5d:
58:0e:52:51:e9:aa:5e:01:69:0a:e4:15:7d:56:ae:
42:84:bd:bc:ba:e5:56:0b:9a:aa:81:b9:ef:cb:b1:
8e:c4:7f:78:f6:10:54:b3:11:bf:39:5b:dc:f2:80:
54:c6:06:d5:e7:23:3e:0d:d2:b6:70:80:30:54:44:
d1:9a:69:cf:67:40:cb:eb:9f:84:59:34:b3:bf:db:
6a:6f:b1:76:1e:b2:32:2c:9d:44:c6:b6:e0:2f:a7:
46:19:9d:71:ef:43:f1:1a:bf:16:d6:02:ac:76:21:
f4:02:e9:71:ed:a5:5d:ce:a9:0b:a9:19:ad:1d:4b:
84:b2:06:aa:78:51:2e:e6:08:c9:06:3a:3e:f8:a8:
4b:0a:08:cd:76:56:ef:99:65:25:ea:4f:69:39:63:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:56:47:FD:94:0C:BD:56:D6:79:BE:C8:7F:C9:D1:08:50:DC:EC:AE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HFZH_ZQMvVbWeb7If8nRCFDc7K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.17.0/24
194.87.25.0/24
194.87.33.0/24
194.87.118.0/24
194.87.138.0/24
194.87.182.0/24
195.58.53.0/24
195.133.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a2:16:1e:43:8a:0a:65:87:8f:6d:1f:21:54:7c:e1:bc:65:
11:34:f6:c3:67:c6:a0:4f:d4:0d:3b:fb:20:4b:36:6e:31:fd:
28:42:73:ec:82:1c:d4:d6:b7:91:22:13:90:4a:17:0b:a4:ff:
b9:6a:b3:cb:6d:5b:15:0c:e1:9d:6a:1c:e6:ea:2d:6f:f0:7e:
ea:56:ea:b3:df:36:50:13:cf:73:80:15:03:01:97:30:f8:a2:
2d:2f:ca:70:a1:3d:82:ce:d4:3a:3a:d0:2c:4b:60:8f:fd:32:
c0:79:7f:f8:84:7f:67:d6:a7:5c:76:84:0b:68:40:9a:35:69:
e9:da:6b:43:05:88:c3:67:6c:49:5b:bd:b3:8e:10:e3:84:58:
81:dc:14:19:4c:f8:65:26:f2:3c:c6:73:a9:82:92:aa:d3:fc:
ac:0e:22:67:fe:af:6b:d0:51:ca:29:de:ac:aa:2d:5f:67:53:
27:10:99:8d:39:e2:cf:7a:b3:2e:d7:96:43:b2:b1:a6:8a:be:
97:44:6c:a1:95:25:49:0c:0b:af:82:19:bb:04:63:8d:de:4e:
3a:a1:6f:b4:7a:82:84:dd:7d:40:20:82:38:ac:ef:a8:0a:c1:
74:33:02:ed:36:e3:3e:ef:7a:4b:cb:45:9d:23:0f:a7:f7:55:
1e:9a:a1:ad
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYivsmyn5pgW/izmd7kKNLc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNjEyMTMwMTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzU2NDdmZDk0MGNiZDU2ZDY3OWJlYzg3ZmM5ZDEwODUwZGNlY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirnw9WP16U37DmNn7kmx57mjGbo6
d2fcg3tNc9AkSzBwS8TS0SNFXRlw0lC52z4ik4jiPkjgdMx/E7LXe7R9YrryZqA6
wQaNLu8pQKJvAt3fWiOSHUy2TZkJmFR9WxfaO/Z0MAZraF1YDlJR6apeAWkK5BV9
Vq5ChL28uuVWC5qqgbnvy7GOxH949hBUsxG/OVvc8oBUxgbV5yM+DdK2cIAwVETR
mmnPZ0DL65+EWTSzv9tqb7F2HrIyLJ1ExrbgL6dGGZ1x70PxGr8W1gKsdiH0Aulx
7aVdzqkLqRmtHUuEsgaqeFEu5gjJBjo++KhLCgjNdlbvmWUl6k9pOWPzZQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFBxWR/2UDL1W1nm+yH/J0QhQ3OyuMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSEZaSF9aUU12VmJXZWI3SWY4blJDRkRjN0s0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAwXwRAwQA
wlcZAwQAwlchAwQAwld2AwQAwleKAwQAwle2AwQAwzo1AwQAw4VQMA0GCSqGSIb3
DQEBCwUAA4IBAQBLohYeQ4oKZYePbR8hVHzhvGURNPbDZ8agT9QNO/sgSzZuMf0o
QnPsghzU1reRIhOQShcLpP+5arPLbVsVDOGdahzm6i1v8H7qVuqz3zZQE89zgBUD
AZcw+KItL8pwoT2CztQ6OtAsS2CP/TLAeX/4hH9n1qdcdoQLaECaNWnp2mtDBYjD
Z2xJW72zjhDjhFiB3BQZTPhlJvI8xnOpgpKq0/ysDiJn/q9r0FHKKd6sqi1fZ1Mn
EJmNOeLPerMu15ZDsrGmir6XRGyhlSVJDAuvghm7BGON3k46oW+0eoKE3X1AIII4
rO+oCsF0MwLtNuM+73pLy0WdIw+n91UemqGt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:00 2023 by rpki-client on console-fra.rpki-client.org