Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/HlBFpSGpwjaajAzgoiPcaMJLGNw.roa
File: HlBFpSGpwjaajAzgoiPcaMJLGNw.roa (raw, json)
Hash identifier: 5qrSzhjcDYNOM+NNlB9LVyNrhGTGu2zNy3JCBrEGB0Y=
Subject key identifier: 1E:50:45:A5:21:A9:C2:36:9A:8C:0C:E0:A2:23:DC:68:C2:4B:18:DC
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0185719E68623916440C81F6A2729BDD514A
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/HlBFpSGpwjaajAzgoiPcaMJLGNw.roa
Signing time: Mon 02 Jan 2023 08:34:44 +0000
ROA not before: Mon 02 Jan 2023 08:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34358
IP address blocks: 45.156.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:68:62:39:16:44:0c:81:f6:a2:72:9b:dd:51:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 2 08:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e5045a521a9c2369a8c0ce0a223dc68c24b18dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:6b:60:6c:0d:ce:73:f0:db:7f:db:37:bd:
a5:a3:4c:2c:e5:a1:12:9e:4e:7a:42:5e:ce:f2:4b:
34:3c:63:dc:b0:63:ec:f9:2d:4c:e4:b8:86:6f:90:
2e:92:e6:d3:88:b4:eb:2e:30:b5:74:37:28:0c:d0:
f1:f4:b2:1b:89:44:fb:83:9e:5f:e3:e6:85:48:a2:
a6:ce:d8:3b:6b:70:29:32:77:44:ae:38:c8:a3:c3:
e6:b1:d0:8b:36:52:ef:a3:14:98:82:e0:65:25:ba:
ef:eb:43:fd:4b:d7:37:d2:36:cd:2c:2c:47:22:ed:
2b:bf:9b:3c:9d:a4:5d:d0:0e:95:d1:66:28:e8:5a:
15:7b:93:51:cf:5c:70:8d:f4:47:73:53:0c:ca:6f:
28:9e:a7:ce:68:1d:8d:15:9e:76:43:a1:76:5e:62:
bb:e8:3a:34:30:43:37:96:87:05:b0:27:e7:1d:c3:
f4:3a:8c:bc:af:2b:95:14:bc:ff:3c:25:ef:12:4f:
08:a9:91:9d:4b:fc:0f:3b:50:d6:3d:b2:8d:32:17:
ec:0e:3b:f5:0e:d4:6a:82:a9:6d:08:59:d4:a6:00:
55:18:eb:e8:30:81:84:39:a0:a4:de:2c:87:78:5b:
c6:ef:71:46:d2:db:40:92:e4:cd:69:df:b3:11:89:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:50:45:A5:21:A9:C2:36:9A:8C:0C:E0:A2:23:DC:68:C2:4B:18:DC
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/HlBFpSGpwjaajAzgoiPcaMJLGNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.236.0/22
Signature Algorithm: sha256WithRSAEncryption
75:9d:e8:90:6d:d8:7a:1b:d0:0f:94:7c:8a:19:00:3b:3f:d6:
a7:f8:9b:a0:56:ba:47:19:f2:63:0e:c6:bb:e6:ae:60:52:a2:
1f:c7:7f:ee:c0:29:91:1a:bf:08:81:d8:1f:3f:88:9f:da:57:
37:f9:7c:4b:75:99:0e:02:d1:f4:55:5f:c3:5b:39:31:57:56:
5b:a0:02:58:9c:75:8a:d8:f5:8f:cd:b9:8c:64:aa:07:eb:2e:
6d:90:09:a1:f5:6d:8d:f3:b4:63:3d:19:24:2a:e2:2d:79:e1:
de:97:84:d9:8f:11:b3:d4:73:c8:e6:1c:1e:e6:57:0f:5c:5f:
a6:59:70:2b:5b:d9:3e:fc:c6:d8:74:42:a7:52:67:0a:9f:0e:
13:f9:34:04:85:43:07:a0:30:0f:9d:d1:97:48:60:0b:cb:41:
fb:7e:a1:e4:46:30:81:21:1a:e5:c1:87:94:ce:ad:b4:13:9f:
ce:c4:24:78:5f:10:88:cf:c9:f1:50:4c:30:21:d4:02:e9:45:
bd:05:05:c0:1b:01:93:ea:a0:e9:25:e4:80:64:7d:c2:b4:07:
08:8f:f7:d6:b9:f6:2b:db:5d:a8:58:bf:fa:75:7c:1e:82:b5:
26:f2:38:ef:ca:bc:42:aa:d4:7e:69:37:9c:b8:e3:47:49:41:
56:a3:54:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxnmhiORZEDIH2onKb3VFKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4
MWEyOWYwHhcNMjMwMTAyMDgzNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTUwNDVhNTIxYTljMjM2OWE4YzBjZTBhMjIzZGM2OGMyNGIxOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpJrYGwNznPw23/bN72lo0ws5aES
nk56Ql7O8ks0PGPcsGPs+S1M5LiGb5AukubTiLTrLjC1dDcoDNDx9LIbiUT7g55f
4+aFSKKmztg7a3ApMndErjjIo8PmsdCLNlLvoxSYguBlJbrv60P9S9c30jbNLCxH
Iu0rv5s8naRd0A6V0WYo6FoVe5NRz1xwjfRHc1MMym8onqfOaB2NFZ52Q6F2XmK7
6Do0MEM3locFsCfnHcP0Ooy8ryuVFLz/PCXvEk8IqZGdS/wPO1DWPbKNMhfsDjv1
DtRqgqltCFnUpgBVGOvoMIGEOaCk3iyHeFvG73FG0ttAkuTNad+zEYl0XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB5QRaUhqcI2mowM4KIj3GjCSxjcMB8GA1UdIwQY
MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt
Mzc1NzUzOWMyYWM5LzEvSGxCRnBTR3B3amFhakF6Z29pUGNhTUpMR053LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5
LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZzsMA0G
CSqGSIb3DQEBCwUAA4IBAQB1neiQbdh6G9APlHyKGQA7P9an+JugVrpHGfJjDsa7
5q5gUqIfx3/uwCmRGr8IgdgfP4if2lc3+XxLdZkOAtH0VV/DWzkxV1ZboAJYnHWK
2PWPzbmMZKoH6y5tkAmh9W2N87RjPRkkKuIteeHel4TZjxGz1HPI5hwe5lcPXF+m
WXArW9k+/MbYdEKnUmcKnw4T+TQEhUMHoDAPndGXSGALy0H7fqHkRjCBIRrlwYeU
zq20E5/OxCR4XxCIz8nxUEwwIdQC6UW9BQXAGwGT6qDpJeSAZH3CtAcIj/fWufYr
212oWL/6dXwegrUm8jjvyrxCqtR+aTecuONHSUFWo1S8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:50 2024 by rpki-client on console-ams.rpki-client.org