Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HWK0R40VF7uFSqsj4_SZwW4f6-k.roa
File: HWK0R40VF7uFSqsj4_SZwW4f6-k.roa (raw, json)
Hash identifier: cK70txHht/tMrquTjmCsVuw7cWcONHRwg82gvKC0krA=
Subject key identifier: 1D:62:B4:47:8D:15:17:BB:85:4A:AB:23:E3:F4:99:C1:6E:1F:EB:E9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DFA99A07F8BBD18035D99848B65F23873
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HWK0R40VF7uFSqsj4_SZwW4f6-k.roa
Signing time: Fri 01 Mar 2024 15:19:48 +0000
ROA not before: Fri 01 Mar 2024 15:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 195.133.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 16:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:99:a0:7f:8b:bd:18:03:5d:99:84:8b:65:f2:38:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 1 15:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d62b4478d1517bb854aab23e3f499c16e1febe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:3e:bf:93:20:59:ad:b8:e1:25:cf:d5:d0:
e3:e7:4a:61:f4:81:f1:cd:9c:1d:d8:f4:ea:67:01:
e1:5a:cc:7d:00:c2:0f:a7:b0:94:1a:c5:c5:57:27:
e1:cb:34:85:9e:6b:69:68:bf:ea:27:d2:f2:59:b6:
6f:a3:28:c3:81:89:96:74:b8:c8:30:47:2b:48:f7:
87:38:c5:3f:dc:da:1b:e6:54:2b:cc:cb:b5:55:20:
62:ae:aa:4f:a1:7f:93:f5:fd:da:ff:33:12:b4:75:
84:5a:63:bf:89:ed:34:93:87:e0:b1:6a:74:40:7d:
79:c4:a9:8c:2a:83:d2:3c:88:5f:55:4d:6c:b6:7a:
25:ec:95:a0:6e:b7:19:19:a6:f6:8c:f8:f9:51:5a:
bf:62:09:f2:57:43:86:7c:c7:0b:5d:2e:ce:5b:e0:
6d:e7:c2:53:db:b3:f7:77:2a:05:65:dd:cd:5d:2f:
86:f5:0f:1f:a1:e3:fd:1c:49:71:04:58:41:a7:8c:
63:53:c6:a3:9d:67:de:85:56:6c:9d:2f:83:67:fe:
c8:52:fb:e5:ec:e4:33:34:0d:0d:e2:e6:79:5d:c6:
9b:de:ec:78:7b:d0:59:d0:6e:f5:fa:8b:cb:ce:d5:
14:84:e2:0a:2d:e6:55:f5:26:92:e5:aa:37:01:cd:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:62:B4:47:8D:15:17:BB:85:4A:AB:23:E3:F4:99:C1:6E:1F:EB:E9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HWK0R40VF7uFSqsj4_SZwW4f6-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.2.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a6:b5:92:3a:8b:94:78:b1:29:14:19:81:cb:0a:d4:91:af:
82:8b:70:24:2e:a9:81:87:bf:97:f1:18:ba:57:fc:c3:26:8a:
45:ec:c6:be:c0:3a:dc:97:d2:4f:ca:75:50:38:9d:97:d9:7a:
1c:8f:cc:32:05:84:4a:88:b4:b0:8c:d7:e1:56:a7:04:d8:00:
fb:c6:e7:10:01:da:c6:18:8f:97:fe:61:48:98:de:8d:c3:d8:
ee:81:89:10:b8:fc:d4:48:5f:a5:09:3b:8c:35:e8:98:f8:64:
57:05:8f:8a:00:d6:aa:d4:f8:e9:46:9e:fa:04:8c:1a:14:82:
93:14:26:3c:7d:03:2b:85:59:95:4b:c2:87:cc:6d:14:c1:1d:
f2:c6:12:55:44:ff:48:23:cf:26:0f:86:34:bd:7a:11:f9:47:
84:af:bd:ed:a6:74:3b:8d:8e:dc:b4:65:48:24:4b:5c:c2:08:
c4:ed:b8:40:59:dc:38:a1:7a:f0:e0:2a:0f:c1:15:e8:52:d7:
e5:90:e0:88:44:bf:41:ba:e5:ef:0a:5a:74:a5:e3:2f:37:fc:
76:01:31:76:0c:19:b7:db:89:31:94:5e:fc:5a:b3:49:98:02:
55:f5:ff:f3:fc:ff:94:18:45:4c:d8:21:6d:ab:c2:e2:fe:a1:
3a:62:45:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY36maB/i70YA12ZhItl8jhzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMzAxMTUxOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDYyYjQ0NzhkMTUxN2JiODU0YWFiMjNlM2Y0OTljMTZlMWZlYmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG8+v5MgWa244SXP1dDj50ph9IHx
zZwd2PTqZwHhWsx9AMIPp7CUGsXFVyfhyzSFnmtpaL/qJ9LyWbZvoyjDgYmWdLjI
MEcrSPeHOMU/3Nob5lQrzMu1VSBirqpPoX+T9f3a/zMStHWEWmO/ie00k4fgsWp0
QH15xKmMKoPSPIhfVU1stnol7JWgbrcZGab2jPj5UVq/YgnyV0OGfMcLXS7OW+Bt
58JT27P3dyoFZd3NXS+G9Q8foeP9HElxBFhBp4xjU8ajnWfehVZsnS+DZ/7IUvvl
7OQzNA0N4uZ5Xcab3ux4e9BZ0G71+ovLztUUhOIKLeZV9SaS5ao3Ac1TfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB1itEeNFRe7hUqrI+P0mcFuH+vpMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSFdLMFI0MFZGN3VGU3FzajRfU1p3VzRmNi1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4UCMA0G
CSqGSIb3DQEBCwUAA4IBAQAHprWSOouUeLEpFBmBywrUka+Ci3AkLqmBh7+X8Ri6
V/zDJopF7Ma+wDrcl9JPynVQOJ2X2Xocj8wyBYRKiLSwjNfhVqcE2AD7xucQAdrG
GI+X/mFImN6Nw9jugYkQuPzUSF+lCTuMNeiY+GRXBY+KANaq1PjpRp76BIwaFIKT
FCY8fQMrhVmVS8KHzG0UwR3yxhJVRP9II88mD4Y0vXoR+UeEr73tpnQ7jY7ctGVI
JEtcwgjE7bhAWdw4oXrw4CoPwRXoUtflkOCIRL9BuuXvClp0peMvN/x2ATF2DBm3
24kxlF78WrNJmAJV9f/z/P+UGEVM2CFtq8Li/qE6YkVa
-----END CERTIFICATE-----
Generated at Fri Mar 1 19:29:17 2024 by rpki-client on console-ams.rpki-client.org