Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/HZnr_4FLBSSWakcLqP-LH_kfuHQ.roa
File: HZnr_4FLBSSWakcLqP-LH_kfuHQ.roa (raw, json)
Hash identifier: wriA66BEh1h1YHhFzbEemir6XBfBHDi17/NcUGvvL/g=
Subject key identifier: 1D:99:EB:FF:81:4B:05:24:96:6A:47:0B:A8:FF:8B:1F:F9:1F:B8:74
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018C0884FA0F1AE670BFD6E5C856EB1F7762
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/HZnr_4FLBSSWakcLqP-LH_kfuHQ.roa
Signing time: Sat 25 Nov 2023 22:06:21 +0000
ROA not before: Sat 25 Nov 2023 22:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 77.87.126.0/24 maxlen: 24
45.90.116.0/22 maxlen: 24
45.90.12.0/22 maxlen: 24
37.77.151.0/24 maxlen: 24
178.212.79.0/24 maxlen: 24
109.205.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:08:84:fa:0f:1a:e6:70:bf:d6:e5:c8:56:eb:1f:77:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Nov 25 22:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d99ebff814b0524966a470ba8ff8b1ff91fb874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:35:e2:cb:85:8f:6d:7b:10:ad:6f:45:30:
17:92:40:5f:90:0a:f9:c8:72:57:d3:f4:ff:65:a6:
46:87:7d:ff:8f:e8:4b:4a:61:4f:15:87:2b:06:9d:
b5:74:96:16:c6:86:4d:31:32:13:c0:17:c6:f4:2b:
8b:7b:3c:75:d1:3c:ed:8c:b9:e9:ce:3d:46:ee:f4:
84:88:75:f1:a0:72:ec:6e:94:6e:ea:a9:5c:6d:2e:
05:e1:50:e6:26:fd:7e:5a:41:09:de:58:50:a2:02:
38:f3:4f:c0:4d:d6:06:0a:e3:0d:62:79:0c:50:27:
62:21:b9:d5:2b:d2:89:aa:8f:0f:c2:eb:ee:bd:31:
8b:e1:8a:0e:3e:83:1c:e7:0e:91:60:0a:8e:60:6f:
20:4a:6f:1d:8a:e1:c8:8b:93:2f:d8:8f:6f:f4:f9:
ef:24:f0:c3:a9:c5:5b:31:ca:31:2a:93:58:49:dd:
69:4d:58:e4:d6:f8:77:74:c2:27:c0:5f:98:34:04:
35:52:16:82:a6:52:60:58:2a:97:94:00:82:0a:a0:
1e:df:bc:03:b6:57:24:50:40:61:90:41:f6:46:ac:
49:94:1f:44:52:43:b8:7b:13:08:27:17:df:0f:19:
f1:b7:0e:81:92:90:64:a9:ee:98:52:08:84:6e:3b:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:99:EB:FF:81:4B:05:24:96:6A:47:0B:A8:FF:8B:1F:F9:1F:B8:74
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/HZnr_4FLBSSWakcLqP-LH_kfuHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.151.0/24
45.90.12.0/22
45.90.116.0/22
77.87.126.0/24
109.205.63.0/24
178.212.79.0/24
Signature Algorithm: sha256WithRSAEncryption
32:14:46:14:71:60:88:18:1c:32:18:41:0a:6f:f4:63:d9:2d:
43:a6:4d:45:0a:04:07:83:48:61:a2:33:35:29:8f:c6:0a:d7:
94:9d:89:18:87:2c:e3:7a:14:3c:51:fd:e1:9c:07:24:d8:29:
e5:f6:60:cb:08:51:74:87:4e:02:c8:b1:79:89:9a:f3:f3:10:
27:08:27:63:98:89:ad:eb:c4:c1:48:5a:83:98:d7:6e:41:0b:
a5:4b:4c:32:3b:e0:62:d2:35:6e:87:01:9d:9c:4d:a3:f8:13:
06:95:f4:72:29:cb:33:24:d4:23:18:a7:15:7e:db:e0:85:89:
65:f4:7d:40:1f:49:41:5c:f4:fd:07:24:1e:f8:34:26:9a:ee:
b6:8e:2a:4f:43:71:90:c9:40:f7:d8:6b:de:98:ef:70:24:c5:
89:5d:8c:a9:70:ee:1b:5f:e9:d4:ab:b0:6f:6e:dc:44:61:d4:
c5:52:ae:2a:8c:9c:62:32:15:29:f9:2c:2a:f0:e9:1b:e5:84:
e9:07:24:7a:2d:13:6f:2d:26:f5:fc:fa:4a:32:04:bc:97:94:
8f:66:75:20:ad:ae:c8:ab:a5:99:b0:85:5a:c4:a4:23:1e:ed:
8c:ce:9f:bc:59:b3:13:60:ec:c7:93:71:cd:a1:6f:99:85:3e:
90:a0:64:fa
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYwIhPoPGuZwv9blyFbrH3diMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjMxMTI1MjIwNjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDk5ZWJmZjgxNGIwNTI0OTY2YTQ3MGJhOGZmOGIxZmY5MWZiODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnA14suFj217EK1vRTAXkkBfkAr5
yHJX0/T/ZaZGh33/j+hLSmFPFYcrBp21dJYWxoZNMTITwBfG9CuLezx10TztjLnp
zj1G7vSEiHXxoHLsbpRu6qlcbS4F4VDmJv1+WkEJ3lhQogI480/ATdYGCuMNYnkM
UCdiIbnVK9KJqo8PwuvuvTGL4YoOPoMc5w6RYAqOYG8gSm8diuHIi5Mv2I9v9Pnv
JPDDqcVbMcoxKpNYSd1pTVjk1vh3dMInwF+YNAQ1UhaCplJgWCqXlACCCqAe37wD
tlckUEBhkEH2RqxJlB9EUkO4exMIJxffDxnxtw6BkpBkqe6YUgiEbjulxwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFB2Z6/+BSwUklmpHC6j/ix/5H7h0MB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvSFpucl80RkxCU1NXYWtjTHFQLUxIX2tmdUhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJU2XAwQC
LVoMAwQCLVp0AwQATVd+AwQAbc0/AwQAstRPMA0GCSqGSIb3DQEBCwUAA4IBAQAy
FEYUcWCIGBwyGEEKb/Rj2S1Dpk1FCgQHg0hhojM1KY/GCteUnYkYhyzjehQ8Uf3h
nAck2Cnl9mDLCFF0h04CyLF5iZrz8xAnCCdjmImt68TBSFqDmNduQQulS0wyO+Bi
0jVuhwGdnE2j+BMGlfRyKcszJNQjGKcVftvghYll9H1AH0lBXPT9ByQe+DQmmu62
jipPQ3GQyUD32GvemO9wJMWJXYypcO4bX+nUq7BvbtxEYdTFUq4qjJxiMhUp+Swq
8Okb5YTpByR6LRNvLSb1/PpKMgS8l5SPZnUgra7Iq6WZsIVaxKQjHu2Mzp+8WbMT
YOzHk3HNoW+ZhT6QoGT6
-----END CERTIFICATE-----
Generated at Wed Nov 29 13:15:02 2023 by rpki-client on console-fra.rpki-client.org