Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/rhz-Bl2WyhPqrF4uAllSUpQ0ly4.roa
File: rhz-Bl2WyhPqrF4uAllSUpQ0ly4.roa (raw, json)
Hash identifier: sAlXrBT6JEETZzrtTLRVOOtendEJ8xX18vnI6WovzLU=
Subject key identifier: AE:1C:FE:06:5D:96:CA:13:EA:AC:5E:2E:02:59:52:52:94:34:97:2E
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 018751C54236D39AAD68BA8AAC73E36F546A
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/rhz-Bl2WyhPqrF4uAllSUpQ0ly4.roa
Signing time: Wed 05 Apr 2023 14:14:54 +0000
ROA not before: Wed 05 Apr 2023 14:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 128.139.0.0/17 maxlen: 17
128.139.7.0/24 maxlen: 24
128.139.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Thu 06 Apr 2023 12:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:c5:42:36:d3:9a:ad:68:ba:8a:ac:73:e3:6f:54:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Apr 5 14:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae1cfe065d96ca13eaac5e2e025952529434972e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d5:83:3c:66:1c:81:11:ae:e5:b1:f7:a6:b2:
bd:9e:6f:66:4e:42:59:f5:93:dc:e3:e8:e3:13:0a:
39:22:e3:a2:a1:5f:dc:b5:1a:52:3c:c3:e8:83:5e:
bc:e7:44:fc:19:79:af:b8:03:fd:65:2b:4f:48:78:
7a:fa:f7:6f:a7:dc:ac:85:e8:1e:15:a2:d3:79:a2:
2f:07:b1:4a:c5:f9:ee:f2:67:ec:2d:d3:7d:01:6c:
71:bf:49:a6:6f:d8:53:8a:fa:2e:54:35:c3:67:a0:
12:72:64:05:d8:b8:8a:2a:53:38:29:6b:4d:4a:a8:
c8:dd:50:1c:e1:ac:10:86:52:90:5d:c9:8c:4b:59:
65:f6:fb:26:d4:40:0e:28:83:72:56:e2:6f:74:f9:
f9:0e:85:f7:07:c5:8e:a2:c0:76:f6:3a:cd:b8:2b:
82:75:7e:56:30:de:4c:39:32:ee:e0:cc:b1:f8:90:
c8:28:c4:67:7a:63:d0:43:d2:3a:c1:fc:5d:f6:bb:
c7:50:d9:d4:e1:01:21:98:61:89:0f:d9:20:49:98:
c9:c0:ee:7b:eb:a3:90:8f:0c:f5:2a:71:2a:64:c5:
51:65:c3:16:9e:8d:46:9f:a5:b3:16:47:07:09:ee:
09:74:d2:63:30:07:45:c2:95:86:04:31:72:1d:8f:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1C:FE:06:5D:96:CA:13:EA:AC:5E:2E:02:59:52:52:94:34:97:2E
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/rhz-Bl2WyhPqrF4uAllSUpQ0ly4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:68:48:5f:6a:d5:f0:38:67:84:f4:31:73:03:62:a8:52:8c:
1f:85:35:d2:24:b4:e0:48:c2:98:55:45:a0:a5:50:d8:d3:30:
ef:87:6e:eb:6a:22:e6:fb:9f:19:9c:2d:60:8c:b4:32:09:19:
51:75:f7:4d:89:39:57:10:88:0d:be:17:5c:fa:e7:cf:66:84:
93:f3:99:03:8d:48:0e:46:86:3c:b2:5b:4e:24:22:33:07:6f:
c1:b5:b0:b3:91:7a:f3:fe:4c:09:a0:2d:79:6c:dc:ec:4f:1c:
66:73:78:db:ba:ff:5b:2c:24:8f:a1:f7:b3:f5:71:d2:91:b5:
57:c3:6c:c9:1e:cc:21:77:0e:77:fe:8f:0a:87:c3:e6:a6:b9:
c8:a7:14:cd:5f:04:f0:00:31:d9:aa:13:dc:35:9f:d0:9e:92:
fd:7e:76:3b:5a:69:5b:fa:9d:be:e1:31:ad:f7:0f:32:68:af:
26:ae:ec:c9:73:6e:52:07:58:bf:b4:5a:cf:63:87:89:f9:d8:
6b:4c:0b:23:81:af:ed:c3:79:a8:f4:2a:13:f6:4b:79:5f:bd:
d4:45:c6:41:2f:af:88:5f:67:d7:3b:47:3a:54:aa:c5:49:e1:
86:f7:7f:98:ab:5f:30:8c:7a:35:bc:4a:71:e4:29:2b:60:04:
ce:e0:ef:1d
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYdRxUI205qtaLqKrHPjb1RqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz
OGJhMDYwHhcNMjMwNDA1MTQxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTFjZmUwNjVkOTZjYTEzZWFhYzVlMmUwMjU5NTI1Mjk0MzQ5NzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdWDPGYcgRGu5bH3prK9nm9mTkJZ
9ZPc4+jjEwo5IuOioV/ctRpSPMPog16850T8GXmvuAP9ZStPSHh6+vdvp9yshege
FaLTeaIvB7FKxfnu8mfsLdN9AWxxv0mmb9hTivouVDXDZ6AScmQF2LiKKlM4KWtN
SqjI3VAc4awQhlKQXcmMS1ll9vsm1EAOKINyVuJvdPn5DoX3B8WOosB29jrNuCuC
dX5WMN5MOTLu4Myx+JDIKMRnemPQQ9I6wfxd9rvHUNnU4QEhmGGJD9kgSZjJwO57
66OQjwz1KnEqZMVRZcMWno1Gn6WzFkcHCe4JdNJjMAdFwpWGBDFyHY92gQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFK4c/gZdlsoT6qxeLgJZUlKUNJcuMB8GA1UdIwQY
MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt
OWQwYzYyMDczNWYxLzEvcmh6LUJsMld5aFBxckY0dUFsbFNVcFEwbHk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx
LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgIswDQYJ
KoZIhvcNAQELBQADggEBAHpoSF9q1fA4Z4T0MXMDYqhSjB+FNdIktOBIwphVRaCl
UNjTMO+HbutqIub7nxmcLWCMtDIJGVF1902JOVcQiA2+F1z6589mhJPzmQONSA5G
hjyyW04kIjMHb8G1sLORevP+TAmgLXls3OxPHGZzeNu6/1ssJI+h97P1cdKRtVfD
bMkezCF3Dnf+jwqHw+amucinFM1fBPAAMdmqE9w1n9Cekv1+djtaaVv6nb7hMa33
DzJoryau7MlzblIHWL+0Ws9jh4n52GtMCyOBr+3Deaj0KhP2S3lfvdRFxkEvr4hf
Z9c7RzpUqsVJ4Yb3f5irXzCMejW8SnHkKStgBM7g7x0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:11 2024 by rpki-client on console-ams.rpki-client.org