Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/HoPCYg_rwjRJWAfVp8yqMMbQCYk.roa
File: HoPCYg_rwjRJWAfVp8yqMMbQCYk.roa (raw, json)
Hash identifier: 9B63/P6iVdJ1fq26HbBSdxanPRoT2EYdLNCYYNF/TTQ=
Subject key identifier: 1E:83:C2:62:0F:EB:C2:34:49:58:07:D5:A7:CC:AA:30:C6:D0:09:89
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0188D844FDCCF912E2D9D3EDE33239B5F9B3
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/HoPCYg_rwjRJWAfVp8yqMMbQCYk.roa
Signing time: Tue 20 Jun 2023 10:06:20 +0000
ROA not before: Tue 20 Jun 2023 10:06:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.140.167.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:44:fd:cc:f9:12:e2:d9:d3:ed:e3:32:39:b5:f9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jun 20 10:06:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e83c2620febc234495807d5a7ccaa30c6d00989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8a:01:fa:39:d6:6f:c6:57:01:b0:2d:3a:53:
76:80:4a:6c:dd:3a:ff:86:f1:f6:5d:79:08:94:ae:
e9:88:3e:64:ea:d3:54:66:b3:56:0f:de:05:ac:16:
e5:4f:93:6e:c6:f9:9e:db:29:9f:9c:39:3f:c2:6f:
a3:97:8a:7b:ae:94:c2:97:60:e1:c7:1e:c3:65:ee:
e6:8f:c9:1b:d2:5f:91:b9:3a:d2:10:6e:1d:58:d0:
95:12:9a:93:45:a0:0a:23:b6:2b:4a:fd:54:09:9a:
9a:45:f6:6c:10:4c:d2:8a:68:88:a7:79:34:80:f0:
f4:41:7d:7f:a3:00:4f:81:c8:bb:0e:b9:87:6a:60:
52:44:73:97:9d:ac:c3:86:5c:c0:d8:80:ed:5f:9a:
2a:46:c5:3a:c2:a0:07:61:a1:18:68:f1:1c:8f:a7:
99:9a:28:6a:9c:d5:4c:d1:c3:b3:fb:4d:7b:dd:fd:
8f:97:e2:4f:db:11:4f:e4:6b:89:ce:f4:18:dd:e9:
55:24:8a:af:53:ba:51:c5:b9:f3:96:46:82:e8:7c:
f5:b1:ca:b4:33:c4:73:d1:5a:2d:8b:b9:e1:74:f8:
db:02:7a:57:41:ee:ba:7b:b9:41:23:37:d6:2a:0a:
ce:b4:03:60:1f:26:37:0a:bb:aa:fc:65:b5:ca:3e:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:83:C2:62:0F:EB:C2:34:49:58:07:D5:A7:CC:AA:30:C6:D0:09:89
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/HoPCYg_rwjRJWAfVp8yqMMbQCYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.167.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6b:2b:b0:52:40:30:fc:c8:74:39:9e:81:4f:89:c3:0d:a2:
b2:ad:1b:11:0d:22:c4:56:29:6f:db:c9:a5:14:5a:a9:f6:ab:
29:b6:19:a8:92:cc:0f:e8:48:b9:eb:2d:b7:37:fe:4a:4f:45:
ce:56:bb:6a:14:0c:a9:fb:0c:4a:cc:5c:fe:62:85:9e:cd:b5:
f2:ea:c3:53:56:eb:64:67:52:8d:03:c8:6c:c8:57:a4:6e:f5:
23:60:7d:14:ea:ec:25:64:f9:f8:24:bd:7c:40:24:77:f5:3b:
72:4f:2e:e7:6c:cc:b3:d6:00:e1:86:dc:c1:0d:d1:72:8e:9b:
a1:1b:dc:31:5e:55:41:61:43:52:50:d4:d0:c0:5b:bd:1a:e1:
2b:62:6d:ab:0a:bf:16:fb:c7:38:06:4b:7e:9f:a1:db:25:d8:
2d:ef:26:b2:ab:3c:43:e6:7a:e4:ee:2a:94:b6:53:f7:a0:d1:
27:b7:17:0f:90:c6:8b:bd:a9:89:eb:88:9f:20:bb:6d:16:fa:
09:d2:a6:f5:50:48:37:59:30:eb:f8:23:ea:18:68:eb:23:e2:
a7:d5:db:72:af:1d:c8:eb:83:98:ba:9f:0c:ac:f3:f0:71:70:
00:eb:14:d2:f5:35:44:b2:90:22:73:98:bf:7c:88:37:b6:2a:
7e:7b:38:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjYRP3M+RLi2dPt4zI5tfmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjMwNjIwMTAwNjIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTgzYzI2MjBmZWJjMjM0NDk1ODA3ZDVhN2NjYWEzMGM2ZDAwOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIoB+jnWb8ZXAbAtOlN2gEps3Tr/
hvH2XXkIlK7piD5k6tNUZrNWD94FrBblT5Nuxvme2ymfnDk/wm+jl4p7rpTCl2Dh
xx7DZe7mj8kb0l+RuTrSEG4dWNCVEpqTRaAKI7YrSv1UCZqaRfZsEEzSimiIp3k0
gPD0QX1/owBPgci7DrmHamBSRHOXnazDhlzA2IDtX5oqRsU6wqAHYaEYaPEcj6eZ
mihqnNVM0cOz+0173f2Pl+JP2xFP5GuJzvQY3elVJIqvU7pRxbnzlkaC6Hz1scq0
M8Rz0Voti7nhdPjbAnpXQe66e7lBIzfWKgrOtANgHyY3Cruq/GW1yj4VNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB6DwmIP68I0SVgH1afMqjDG0AmJMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvSG9QQ1lnX3J3alJKV0FmVnA4eXFNTWJRQ1lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYynMA0G
CSqGSIb3DQEBCwUAA4IBAQAiayuwUkAw/Mh0OZ6BT4nDDaKyrRsRDSLEVilv28ml
FFqp9qspthmokswP6Ei56y23N/5KT0XOVrtqFAyp+wxKzFz+YoWezbXy6sNTVutk
Z1KNA8hsyFekbvUjYH0U6uwlZPn4JL18QCR39TtyTy7nbMyz1gDhhtzBDdFyjpuh
G9wxXlVBYUNSUNTQwFu9GuErYm2rCr8W+8c4Bkt+n6HbJdgt7yayqzxD5nrk7iqU
tlP3oNEntxcPkMaLvamJ64ifILttFvoJ0qb1UEg3WTDr+CPqGGjrI+Kn1dtyrx3I
64OYup8MrPPwcXAA6xTS9TVEspAic5i/fIg3tip+ezhd
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:11 2023 by rpki-client on console-ams.rpki-client.org