Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/hk_IShcC3uXswqhajWJ_j7nhof4.roa
File: hk_IShcC3uXswqhajWJ_j7nhof4.roa (raw, json)
Hash identifier: IezORpWsd5UIBzov9CViWQednwH4GbWW6eXH7ptIHlg=
Subject key identifier: 86:4F:C8:4A:17:02:DE:E5:EC:C2:A8:5A:8D:62:7F:8F:B9:E1:A1:FE
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018820EAA7A780B9249F4EA364506BDD6336
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/hk_IShcC3uXswqhajWJ_j7nhof4.roa
Signing time: Mon 15 May 2023 19:37:09 +0000
ROA not before: Mon 15 May 2023 19:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.242.0/23 maxlen: 23
85.208.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 20:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:ea:a7:a7:80:b9:24:9f:4e:a3:64:50:6b:dd:63:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: May 15 19:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=864fc84a1702dee5ecc2a85a8d627f8fb9e1a1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:c2:98:28:2a:79:49:cf:74:1a:83:25:3e:
b0:17:d3:2b:b9:b1:61:67:77:45:eb:5a:29:97:d9:
7c:e9:b3:3b:34:ff:d9:2e:95:6c:1c:29:ab:07:1a:
f5:bc:67:e6:7b:cf:d7:28:2f:a1:c2:a4:3a:d8:00:
8d:02:8f:e6:87:a1:eb:f2:e6:5c:12:37:ff:fe:bb:
aa:17:7d:68:f4:0b:1f:51:16:c0:cb:ce:7d:6b:5f:
a9:0f:7e:48:56:3f:a8:9a:d4:31:00:39:39:33:c2:
22:01:6c:ba:40:1f:0d:78:61:5c:72:55:28:46:93:
92:ae:f1:f2:70:e8:8e:0b:7b:4c:72:29:54:2e:35:
86:0d:71:20:56:a8:0e:be:8f:46:b1:99:0f:6b:f9:
ac:8d:a7:ea:24:cd:10:fe:31:bc:b2:18:f6:39:20:
a7:d4:e6:b4:a1:27:71:7a:94:28:10:cf:bf:2f:6e:
af:fb:23:9b:d1:94:6a:f0:cc:6b:01:4e:94:05:bd:
ee:51:ff:21:1e:cc:26:73:57:b9:12:26:e5:c1:86:
2c:25:f8:3f:07:0e:f2:3f:1b:f6:87:ba:47:c4:c5:
7b:84:29:c9:00:45:4f:86:7a:3a:86:0f:96:c7:5c:
f2:34:88:3e:70:fe:a5:38:55:9a:88:a7:55:3a:47:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4F:C8:4A:17:02:DE:E5:EC:C2:A8:5A:8D:62:7F:8F:B9:E1:A1:FE
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/hk_IShcC3uXswqhajWJ_j7nhof4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/23
85.208.44.0/24
Signature Algorithm: sha256WithRSAEncryption
43:50:ea:d3:c8:04:67:52:a1:d1:86:14:69:6b:0b:89:38:12:
da:80:8b:a2:53:2d:93:c8:ab:85:c8:08:89:3d:37:ea:d5:d2:
38:90:79:db:0f:04:71:c4:6f:2e:53:48:3c:b5:17:25:78:5f:
f4:36:62:34:9c:40:0f:f9:5c:8d:a0:cb:e5:e7:e6:f1:93:fa:
05:ee:4e:d4:98:6f:7d:9d:c1:10:5b:9e:9b:72:99:56:45:9f:
59:5b:7d:99:dc:8e:9f:59:a6:da:f3:49:68:39:4e:fe:45:40:
4f:5c:c4:34:aa:ba:d4:ec:a4:2f:86:6c:35:85:fc:11:a7:27:
c6:39:1c:b8:17:57:92:71:9b:93:eb:42:92:b8:e0:69:a9:69:
71:b2:df:9b:1e:fc:5d:0a:48:3d:92:4c:90:f8:36:c4:23:8e:
76:2b:16:f2:78:ab:c1:33:0d:39:1b:14:ed:79:a7:50:9a:1c:
0b:23:a0:e7:64:98:d8:f3:43:87:79:82:f8:26:3b:7f:51:f8:
f3:1c:18:34:d8:e0:c3:65:cb:99:ae:b8:35:22:22:13:23:01:
c5:c1:ea:f9:ed:75:7a:9e:cb:d3:41:7e:63:14:51:e5:fc:95:
77:6d:18:7b:b3:83:db:70:63:fd:20:d9:83:f4:10:93:0a:58:
07:ad:1c:5a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYgg6qengLkkn06jZFBr3WM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy
NzJiYTYwHhcNMjMwNTE1MTkzNzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjRmYzg0YTE3MDJkZWU1ZWNjMmE4NWE4ZDYyN2Y4ZmI5ZTFhMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPjCmCgqeUnPdBqDJT6wF9MrubFh
Z3dF61opl9l86bM7NP/ZLpVsHCmrBxr1vGfme8/XKC+hwqQ62ACNAo/mh6Hr8uZc
Ejf//ruqF31o9AsfURbAy859a1+pD35IVj+omtQxADk5M8IiAWy6QB8NeGFcclUo
RpOSrvHycOiOC3tMcilULjWGDXEgVqgOvo9GsZkPa/msjafqJM0Q/jG8shj2OSCn
1Oa0oSdxepQoEM+/L26v+yOb0ZRq8MxrAU6UBb3uUf8hHswmc1e5EiblwYYsJfg/
Bw7yPxv2h7pHxMV7hCnJAEVPhno6hg+Wx1zyNIg+cP6lOFWaiKdVOkf5oQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIZPyEoXAt7l7MKoWo1if4+54aH+MB8GA1UdIwQY
MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt
MDc3OWY0OGVjZWEwLzEvaGtfSVNoY0MzdVhzd3FoYWpXSl9qN25ob2Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw
LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVTyAwQA
VdAsMA0GCSqGSIb3DQEBCwUAA4IBAQBDUOrTyARnUqHRhhRpawuJOBLagIuiUy2T
yKuFyAiJPTfq1dI4kHnbDwRxxG8uU0g8tRcleF/0NmI0nEAP+VyNoMvl5+bxk/oF
7k7UmG99ncEQW56bcplWRZ9ZW32Z3I6fWaba80loOU7+RUBPXMQ0qrrU7KQvhmw1
hfwRpyfGORy4F1eScZuT60KSuOBpqWlxst+bHvxdCkg9kkyQ+DbEI452KxbyeKvB
Mw05GxTteadQmhwLI6DnZJjY80OHeYL4Jjt/UfjzHBg02ODDZcuZrrg1IiITIwHF
wer57XV6nsvTQX5jFFHl/JV3bRh7s4PbcGP9INmD9BCTClgHrRxa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:24 2024 by rpki-client on console-fra.rpki-client.org