Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HnvEliT4Gbam2-ZAmkqdMVyWfaQ.roa
File: HnvEliT4Gbam2-ZAmkqdMVyWfaQ.roa (raw, json)
Hash identifier: TrRpKBHD2nbRfhAEtG2vILMm4ikRFhDna/SVED7tfYA=
Subject key identifier: 1E:7B:C4:96:24:F8:19:B6:A6:DB:E6:40:9A:4A:9D:31:5C:96:7D:A4
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 018E08A3FBF39064E7345816A54C54814082
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HnvEliT4Gbam2-ZAmkqdMVyWfaQ.roa
Signing time: Mon 04 Mar 2024 08:45:48 +0000
ROA not before: Mon 04 Mar 2024 08:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57910
IP address blocks: 46.18.72.0/21 maxlen: 24
185.11.236.0/22 maxlen: 24
185.226.236.0/22 maxlen: 24
194.56.236.0/22 maxlen: 24
194.127.158.0/23 maxlen: 24
194.127.162.0/23 maxlen: 24
2a00:b5c0::/32 maxlen: 32
2a02:2110::/32 maxlen: 32
2a0c:7a00::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 07 Mar 2024 11:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:a3:fb:f3:90:64:e7:34:58:16:a5:4c:54:81:40:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Mar 4 08:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e7bc49624f819b6a6dbe6409a4a9d315c967da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:ed:b3:6c:54:e3:b0:5a:90:3c:f5:c9:4a:
84:aa:b3:8b:0c:46:80:3e:48:8d:95:6b:ba:18:09:
77:82:0d:28:ce:2f:6a:59:a7:05:fe:0d:a7:9d:f4:
a5:8a:b4:20:ff:02:c7:bf:bb:a8:c8:d0:d3:e7:e8:
70:03:5b:0d:65:9d:e2:31:97:bf:84:b7:62:09:1d:
2f:18:67:7d:cb:3e:d5:a3:87:6c:70:0e:cc:31:c7:
63:f8:a5:fa:9d:0d:0b:47:d8:ec:05:63:c9:4e:8d:
7c:e9:ae:aa:a9:68:6c:7f:05:2a:9b:22:5f:05:5c:
6a:72:ef:4e:62:7c:21:76:a7:16:ce:5b:20:73:c9:
38:62:45:63:91:77:82:92:0a:2f:05:17:37:06:f2:
8a:69:70:14:20:ed:9c:31:52:48:0c:83:eb:24:b9:
58:d4:6b:c7:3b:aa:dd:7a:d7:e5:de:b2:77:00:48:
58:f4:c1:3b:77:51:5e:39:e0:e4:88:8e:da:7f:fa:
2d:5d:8f:a0:ca:b0:e1:d3:45:c2:84:a0:b4:46:c1:
19:c3:53:e4:67:bf:a4:cb:c3:11:07:22:65:1b:2b:
6d:c4:4c:17:df:3c:17:49:20:d3:4d:6f:2d:31:72:
f5:d3:a2:32:2f:3c:7b:81:d2:77:83:e2:aa:e9:d2:
d6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:C4:96:24:F8:19:B6:A6:DB:E6:40:9A:4A:9D:31:5C:96:7D:A4
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HnvEliT4Gbam2-ZAmkqdMVyWfaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.72.0/21
185.11.236.0/22
185.226.236.0/22
194.56.236.0/22
194.127.158.0/23
194.127.162.0/23
IPv6:
2a00:b5c0::/32
2a02:2110::/32
2a0c:7a00::/29
Signature Algorithm: sha256WithRSAEncryption
27:c9:b2:60:eb:23:da:58:51:12:f3:6f:fa:9e:04:72:8e:3a:
ca:34:b8:6b:45:46:73:7e:b2:53:1b:9e:ff:a6:11:e7:dc:b5:
a9:cd:a8:8b:35:1a:15:6b:fb:2a:17:59:69:e8:64:34:d0:0c:
41:33:f1:56:89:b5:51:4e:4f:f9:bc:d4:7a:69:20:62:db:bb:
26:3a:7e:5b:f5:bd:01:6b:fa:86:29:28:49:46:43:79:e2:c9:
c0:82:93:41:36:4a:43:47:10:62:c4:26:fe:09:7b:13:c9:5f:
15:4c:f1:ba:09:66:78:e1:17:e5:4e:93:f7:ed:fe:84:98:2c:
c9:a8:24:c5:07:f6:59:e2:3b:c3:ee:f5:a0:48:87:db:b2:36:
d9:10:d9:14:23:34:19:f8:84:d1:50:86:73:e0:19:f8:1c:65:
c2:b0:9b:b8:da:f9:59:28:c7:76:84:ae:ad:ab:20:73:55:14:
13:48:a9:f9:55:8c:17:de:7f:71:27:bb:e0:e7:01:53:14:ae:
e9:87:f7:65:e2:98:7d:db:bc:a4:a1:2a:63:da:c5:7c:d8:20:
bc:db:bc:3e:b4:bf:3d:61:07:e0:c3:79:07:ac:a0:61:35:4c:
f8:12:4b:0d:be:73:09:c8:6e:c6:05:99:99:bb:9a:aa:c8:08:
a6:a1:6a:b8
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAY4Io/vzkGTnNFgWpUxUgUCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWFhZjNkMDY4M2RjOGEwZDU4YzY0MzgyNmUxNjZkM2My
OGNjYTkwHhcNMjQwMzA0MDg0NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTdiYzQ5NjI0ZjgxOWI2YTZkYmU2NDA5YTRhOWQzMTVjOTY3ZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMDts2xU47BakDz1yUqEqrOLDEaA
PkiNlWu6GAl3gg0ozi9qWacF/g2nnfSlirQg/wLHv7uoyNDT5+hwA1sNZZ3iMZe/
hLdiCR0vGGd9yz7Vo4dscA7MMcdj+KX6nQ0LR9jsBWPJTo186a6qqWhsfwUqmyJf
BVxqcu9OYnwhdqcWzlsgc8k4YkVjkXeCkgovBRc3BvKKaXAUIO2cMVJIDIPrJLlY
1GvHO6rdetfl3rJ3AEhY9ME7d1FeOeDkiI7af/otXY+gyrDh00XChKC0RsEZw1Pk
Z7+ky8MRByJlGyttxEwX3zwXSSDTTW8tMXL106IyLzx7gdJ3g+Kq6dLWsQIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFB57xJYk+Bm2ptvmQJpKnTFcln2kMB8GA1UdIwQY
MBaAFB5arz0Gg9yKDVjGQ4JuFm08KMypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxxdlBRYUQzSW9OV01aRGdtNFdiVHdvektrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84M2RmNWItZDE1My00Y2I2LWJhZjMt
NGNkMzhiNzU4ZDVjLzEvSG52RWxpVDRHYmFtMi1aQW1rcWRNVnlXZmFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84M2RmNWItZDE1My00Y2I2LWJhZjMtNGNkMzhiNzU4ZDVj
LzEvSGxxdlBRYUQzSW9OV01aRGdtNFdiVHdvektrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAqBAIAATAkAwQDLhJIAwQC
uQvsAwQCueLsAwQCwjjsAwQBwn+eAwQBwn+iMBsEAgACMBUDBQAqALXAAwUAKgIh
EAMFAyoMegAwDQYJKoZIhvcNAQELBQADggEBACfJsmDrI9pYURLzb/qeBHKOOso0
uGtFRnN+slMbnv+mEefctanNqIs1GhVr+yoXWWnoZDTQDEEz8VaJtVFOT/m81Hpp
IGLbuyY6flv1vQFr+oYpKElGQ3niycCCk0E2SkNHEGLEJv4JexPJXxVM8boJZnjh
F+VOk/ft/oSYLMmoJMUH9lniO8Pu9aBIh9uyNtkQ2RQjNBn4hNFQhnPgGfgcZcKw
m7ja+Vkox3aErq2rIHNVFBNIqflVjBfef3Enu+DnAVMUrumH92XimH3bvKShKmPa
xXzYILzbvD60vz1hB+DDeQesoGE1TPgSSw2+cwnIbsYFmZm7mqrICKaharg=
-----END CERTIFICATE-----
Generated at Thu Mar 7 17:08:10 2024 by rpki-client on console-ams.rpki-client.org