Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HQhNTIaJJqzu4WJjKxBqlu091ig.roa
File: HQhNTIaJJqzu4WJjKxBqlu091ig.roa (raw, json)
Hash identifier: 1Giv82dBj/WrrDNj/qayfVXFa8ZKqHTDqNkh3ZRZQ+k=
Subject key identifier: 1D:08:4D:4C:86:89:26:AC:EE:E1:62:63:2B:10:6A:96:ED:3D:D6:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CED19351DA171E56B620B470755345973
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HQhNTIaJJqzu4WJjKxBqlu091ig.roa
Signing time: Tue 09 Jan 2024 07:21:41 +0000
ROA not before: Tue 09 Jan 2024 07:21:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 2.58.95.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 14:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:19:35:1d:a1:71:e5:6b:62:0b:47:07:55:34:59:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 9 07:21:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d084d4c868926aceee162632b106a96ed3dd628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e5:0e:18:71:4e:f2:e7:ac:91:c8:d6:c4:30:
a4:8e:86:41:1d:42:bb:05:14:66:fe:1c:45:1d:d3:
c9:72:69:4e:b7:c4:e6:b4:08:d5:96:51:de:6e:83:
80:ea:64:14:97:c6:9c:94:ce:58:fc:2a:3b:0f:ae:
e3:44:52:a9:22:c4:14:e4:94:1c:73:06:fc:40:2e:
36:17:8f:76:b9:65:81:0d:fc:b9:d6:da:12:1f:db:
d8:5a:09:bf:29:95:8a:3b:03:e1:e1:3a:b1:44:b1:
b7:ce:ed:7b:b9:53:d0:70:ad:ba:9a:d8:f9:97:a0:
54:5f:fa:9c:85:97:2f:96:38:e9:3e:69:0e:2c:ac:
87:70:46:ed:18:f7:e9:52:29:cd:19:be:3d:c6:b8:
ca:f1:4f:b2:7e:6b:1c:27:c7:eb:d7:b4:9f:55:70:
22:b3:5b:a1:78:f5:a8:cc:12:0e:dd:a2:5f:dd:30:
cc:2e:08:61:91:dc:67:a9:5c:1d:c2:63:b0:7b:65:
72:74:51:a0:ee:fc:3a:d2:fd:09:08:a4:ab:54:a4:
ce:38:82:54:ad:53:64:1b:35:07:27:62:8d:25:0c:
f9:ce:06:f7:a9:91:dc:00:35:37:5a:5f:c2:cc:90:
1d:da:7c:bc:cc:69:38:7d:dc:4c:cd:92:db:8e:d1:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:08:4D:4C:86:89:26:AC:EE:E1:62:63:2B:10:6A:96:ED:3D:D6:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HQhNTIaJJqzu4WJjKxBqlu091ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
45.128.232.0/24
84.54.51.0/24
87.121.58.0/24
87.121.69.0/24
94.103.124.0/23
141.98.4.0/24
147.78.102.0/24
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2f:1e:e5:7c:bd:f4:28:9b:57:2f:ae:2f:1f:62:cc:67:f5:
30:cd:f2:1d:c9:8f:69:79:45:fc:2f:34:c3:3d:8c:bd:67:bd:
a0:05:2d:46:a6:4f:ce:1c:9d:dd:d5:db:8c:4e:b7:28:7d:db:
08:c5:f9:6c:d5:d2:9b:7c:7c:6f:8f:75:e8:67:c1:e2:c6:20:
be:3d:05:3e:66:26:a6:5d:5d:3f:f4:fe:c0:a3:57:50:11:f5:
a3:bb:42:3e:83:09:28:a8:b9:c9:78:21:cc:bb:f2:aa:a9:ee:
df:ed:da:fb:a8:d6:7f:08:c9:b2:3b:e1:9b:f4:53:20:7b:99:
f1:02:15:ab:fd:6a:fc:79:47:d3:8d:18:23:f0:61:4c:55:f7:
9c:87:05:fb:bf:34:2f:11:e2:09:3c:84:92:d4:c7:99:46:c5:
62:b0:ad:04:b1:00:e7:31:1c:13:93:95:e1:6d:5e:39:95:38:
75:a0:24:2d:07:64:75:97:46:15:0a:13:94:ea:b6:57:0e:02:
7a:44:0e:bc:a0:45:80:6c:1c:f8:0f:ad:2e:8a:b2:30:e6:7b:
72:10:2e:bf:75:ce:4e:4a:d3:89:55:4d:7b:5c:0c:59:f6:c5:
53:e4:de:0a:9a:dd:f0:9f:e1:42:b6:4e:28:2a:86:95:4b:a3:
d1:ea:17:ff
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYztGTUdoXHla2ILRwdVNFlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTA5MDcyMTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDA4NGQ0Yzg2ODkyNmFjZWVlMTYyNjMyYjEwNmE5NmVkM2RkNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOUOGHFO8ueskcjWxDCkjoZBHUK7
BRRm/hxFHdPJcmlOt8TmtAjVllHeboOA6mQUl8aclM5Y/Co7D67jRFKpIsQU5JQc
cwb8QC42F492uWWBDfy51toSH9vYWgm/KZWKOwPh4TqxRLG3zu17uVPQcK26mtj5
l6BUX/qchZcvljjpPmkOLKyHcEbtGPfpUinNGb49xrjK8U+yfmscJ8fr17SfVXAi
s1uhePWozBIO3aJf3TDMLghhkdxnqVwdwmOwe2VydFGg7vw60v0JCKSrVKTOOIJU
rVNkGzUHJ2KNJQz5zgb3qZHcADU3Wl/CzJAd2ny8zGk4fdxMzZLbjtHUCwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFB0ITUyGiSas7uFiYysQapbtPdYoMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSFFoTlRJYUpKcXp1NFdKakt4QnFsdTA5MWlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAAjpfAwQA
LYDoAwQAVDYzAwQAV3k6AwQAV3lFAwQBXmd8AwQAjWIEAwQAk05mAwQAwSMSMA0G
CSqGSIb3DQEBCwUAA4IBAQAtLx7lfL30KJtXL64vH2LMZ/UwzfIdyY9peUX8LzTD
PYy9Z72gBS1Gpk/OHJ3d1duMTrcofdsIxfls1dKbfHxvj3XoZ8HixiC+PQU+Ziam
XV0/9P7Ao1dQEfWju0I+gwkoqLnJeCHMu/Kqqe7f7dr7qNZ/CMmyO+Gb9FMge5nx
AhWr/Wr8eUfTjRgj8GFMVfechwX7vzQvEeIJPISS1MeZRsVisK0EsQDnMRwTk5Xh
bV45lTh1oCQtB2R1l0YVChOU6rZXDgJ6RA68oEWAbBz4D60uirIw5ntyEC6/dc5O
StOJVU17XAxZ9sVT5N4Kmt3wn+FCtk4oKoaVS6PR6hf/
-----END CERTIFICATE-----
Generated at Fri Jan 19 18:27:57 2024 by rpki-client on console-ams.rpki-client.org