Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HkdmPmVdpGzswIKB196pJl7TB6o.roa
File: HkdmPmVdpGzswIKB196pJl7TB6o.roa (raw, json)
Hash identifier: 5hB+Bp4OEZUJSc2Oy+KYHr6SV+CYJFf2YWEMW+BPkXc=
Subject key identifier: 1E:47:66:3E:65:5D:A4:6C:EC:C0:82:81:D7:DE:A9:26:5E:D3:07:AA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01933170B64FE1D919E15962C7763CA76172
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HkdmPmVdpGzswIKB196pJl7TB6o.roa
Signing time: Fri 15 Nov 2024 20:08:10 +0000
ROA not before: Fri 15 Nov 2024 20:08:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 87.120.158.0/23 maxlen: 24
94.156.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Nov 2024 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:31:70:b6:4f:e1:d9:19:e1:59:62:c7:76:3c:a7:61:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 15 20:08:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e47663e655da46cecc08281d7dea9265ed307aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:11:6f:e2:31:2e:d9:c5:56:af:5f:38:be:
6a:3a:cb:25:20:44:6a:24:b6:4b:30:d8:d5:e3:5b:
21:a0:ab:d6:3e:76:8e:aa:1d:28:b3:c9:f6:c9:d5:
cd:18:67:bd:69:45:3d:7a:24:97:29:17:ed:5d:13:
be:ea:6f:de:0a:21:1b:f7:d8:d8:29:bb:99:6f:fe:
7f:84:90:79:34:db:cf:06:24:17:5a:40:ad:31:92:
bc:79:91:e7:3f:fe:ee:5c:99:03:32:16:b9:12:58:
cc:9e:f1:30:47:12:68:6a:0f:ae:39:17:8f:31:bd:
cf:91:39:6f:1b:5e:db:7b:75:de:90:f5:9f:88:d4:
56:12:58:99:35:95:26:6c:4a:0a:85:bf:7b:7c:c8:
fb:3f:6f:6f:a4:f7:24:ac:c6:56:42:79:bd:97:e1:
80:f6:c1:88:b6:f7:43:60:80:94:f0:dd:4f:d3:83:
1a:74:64:8b:fd:ff:b4:0a:65:f5:0e:86:07:8f:ef:
fa:19:ab:e5:84:80:a4:cf:11:6e:11:2d:ff:12:43:
b0:aa:d3:98:4f:9f:eb:ff:2d:d3:52:cb:1e:11:84:
f7:4d:79:91:b6:9f:13:c3:8c:8e:a5:74:b4:07:f0:
f3:51:c7:bb:97:3b:b6:1b:4a:08:ab:3b:5f:92:8a:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:47:66:3E:65:5D:A4:6C:EC:C0:82:81:D7:DE:A9:26:5E:D3:07:AA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HkdmPmVdpGzswIKB196pJl7TB6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.158.0/23
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e3:2e:f5:b3:95:cc:cd:bc:b4:6f:ca:ff:70:04:fc:4d:77:
de:7e:4d:0c:f4:57:ce:d2:99:45:97:86:f5:48:5d:33:4b:4f:
0a:1c:62:13:22:6e:0e:cb:25:b5:c3:75:70:1c:3f:ea:62:25:
a9:14:66:45:46:13:cf:42:fe:e3:53:b0:43:ed:bb:20:02:a6:
2e:f8:2f:1b:6b:32:3c:56:13:7b:e1:52:dc:8b:e7:49:74:cb:
21:64:a6:d5:67:d9:f0:5b:2c:2d:5d:4b:54:94:d3:4d:10:5a:
13:da:9e:9e:df:63:42:4a:bd:26:4e:2c:fc:ee:01:cb:1f:17:
22:e4:bb:9b:71:ba:f0:8b:c2:50:0c:e2:95:46:11:9a:9e:67:
cf:c3:93:1c:c9:68:0c:d8:11:8f:68:de:18:73:57:c4:40:71:
58:5d:0c:be:73:56:42:81:3f:93:ea:f0:e5:28:66:b9:a0:9e:
c3:50:72:b3:80:23:b7:50:52:bf:18:8a:9d:8f:08:e4:eb:23:
f6:c1:b3:b2:77:a7:64:d0:60:4d:d0:9d:c2:36:92:32:77:9f:
c5:31:9a:df:a5:48:1f:b0:a5:5b:de:80:27:8a:b8:85:f6:ae:
cf:43:25:32:ce:fa:d5:59:7e:de:d3:d9:8b:ae:f4:58:c8:1f:
3b:a2:ff:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZMxcLZP4dkZ4Vlix3Y8p2FyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMTE1MjAwODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTQ3NjYzZTY1NWRhNDZjZWNjMDgyODFkN2RlYTkyNjVlZDMwN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwcRb+IxLtnFVq9fOL5qOsslIERq
JLZLMNjV41shoKvWPnaOqh0os8n2ydXNGGe9aUU9eiSXKRftXRO+6m/eCiEb99jY
KbuZb/5/hJB5NNvPBiQXWkCtMZK8eZHnP/7uXJkDMha5EljMnvEwRxJoag+uOReP
Mb3PkTlvG17be3XekPWfiNRWEliZNZUmbEoKhb97fMj7P29vpPckrMZWQnm9l+GA
9sGItvdDYICU8N1P04MadGSL/f+0CmX1DoYHj+/6GavlhICkzxFuES3/EkOwqtOY
T5/r/y3TUsseEYT3TXmRtp8Tw4yOpXS0B/DzUce7lzu2G0oIqztfkoqc0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB5HZj5lXaRs7MCCgdfeqSZe0weqMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSGtkbVBtVmRwR3pzd0lLQjE5NnBKbDdUQjZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3ieAwQA
XpwOMA0GCSqGSIb3DQEBCwUAA4IBAQCM4y71s5XMzby0b8r/cAT8TXfefk0M9FfO
0plFl4b1SF0zS08KHGITIm4OyyW1w3VwHD/qYiWpFGZFRhPPQv7jU7BD7bsgAqYu
+C8bazI8VhN74VLci+dJdMshZKbVZ9nwWywtXUtUlNNNEFoT2p6e32NCSr0mTiz8
7gHLHxci5Lubcbrwi8JQDOKVRhGanmfPw5McyWgM2BGPaN4Yc1fEQHFYXQy+c1ZC
gT+T6vDlKGa5oJ7DUHKzgCO3UFK/GIqdjwjk6yP2wbOyd6dk0GBN0J3CNpIyd5/F
MZrfpUgfsKVb3oAniriF9q7PQyUyzvrVWX7e09mLrvRYyB87ov8z
-----END CERTIFICATE-----
Generated at Sat Nov 16 09:47:21 2024 by rpki-client on console-ams.rpki-client.org