Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/hJk8WI2q5vx3snMlwSVmUt0gPEk.roa
File: hJk8WI2q5vx3snMlwSVmUt0gPEk.roa (raw, json)
Hash identifier: 8ZoacTX1mCMdZuQVQq2irnxxMZafQOIjGz5w9Kzx1/4=
Subject key identifier: 84:99:3C:58:8D:AA:E6:FC:77:B2:73:25:C1:25:66:52:DD:20:3C:49
Certificate issuer: /CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Certificate serial: 01856FB11291F685F72F79923B99D6E49C18
Authority key identifier: 45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/hJk8WI2q5vx3snMlwSVmUt0gPEk.roa
Signing time: Sun 01 Jan 2023 23:35:53 +0000
ROA not before: Sun 01 Jan 2023 23:35:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43351
IP address blocks: 195.66.69.0/24 maxlen: 24
2001:67c:2dd8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:12:91:f6:85:f7:2f:79:92:3b:99:d6:e4:9c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Validity
Not Before: Jan 1 23:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84993c588daae6fc77b27325c1256652dd203c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:81:b6:4b:10:50:92:6b:e0:63:df:6e:ce:
fd:4c:35:3d:74:02:3b:69:fe:e9:c7:33:9f:90:a5:
17:d7:65:1e:76:47:bc:23:b2:4a:f9:ba:d5:5d:2b:
17:2b:34:74:18:a4:38:06:22:2b:40:cd:4e:0e:a8:
c3:f6:f4:1a:a2:c4:88:91:4d:72:de:fe:0d:6c:47:
39:91:84:cf:a0:93:c4:6f:78:82:60:d8:4f:e2:81:
bc:f9:0e:4f:6e:2e:f5:aa:31:7c:2e:fc:8d:77:30:
87:55:45:b4:6f:b7:e8:03:88:2b:a4:62:eb:b8:f7:
3b:01:31:0d:f8:4a:25:4a:3d:f4:6f:73:18:b3:06:
1f:52:32:72:e0:57:68:ff:02:25:32:46:20:d2:09:
b4:97:2b:a9:a3:7a:b7:2a:76:a7:0e:03:af:74:e5:
d7:bc:50:a6:2d:8f:19:9d:64:00:af:ae:da:74:36:
07:49:cf:a5:4e:3a:41:3a:03:e2:35:78:89:ad:e8:
c5:a5:a1:92:37:c3:01:d5:aa:92:5e:a4:44:5c:72:
b1:13:98:d1:b2:05:21:43:c3:13:b9:3b:44:35:96:
3d:4f:e2:63:fd:1a:49:4c:fd:24:99:14:75:d5:ee:
14:a6:c1:5b:ef:1b:0f:fa:d8:a8:a0:a0:29:01:e0:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:99:3C:58:8D:AA:E6:FC:77:B2:73:25:C1:25:66:52:DD:20:3C:49
X509v3 Authority Key Identifier:
keyid:45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/hJk8WI2q5vx3snMlwSVmUt0gPEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.69.0/24
IPv6:
2001:67c:2dd8::/48
Signature Algorithm: sha256WithRSAEncryption
60:dd:a2:80:5b:cf:39:1b:08:6d:b7:3d:22:e0:5c:7a:83:cf:
4b:54:89:f8:cf:fc:6e:02:af:0c:a7:c8:12:bc:d6:1a:dd:51:
3c:4f:ef:64:db:67:e4:61:1b:ef:11:9c:49:27:34:34:61:09:
d5:3d:0e:c9:fe:91:a1:a3:52:e1:79:f7:49:00:a3:8a:b0:a4:
ff:12:54:1d:63:b4:59:de:7f:19:13:e4:4b:cc:86:f9:a4:f5:
b3:37:9e:fd:f9:8d:96:ba:4b:9c:e6:2f:8a:47:d5:8d:34:7f:
c7:c2:87:a9:fd:19:20:18:d3:a5:c4:25:4d:01:4a:ea:9e:68:
90:91:3b:79:b5:a4:1a:10:7d:5e:23:02:49:2d:e0:cf:b6:25:
21:06:ab:69:3f:a8:90:a7:e0:e2:57:97:56:89:8b:a9:15:a2:
25:fe:cc:c6:ac:f0:96:c8:2b:91:93:26:a6:e8:e5:a1:31:64:
80:78:bd:2a:07:8c:50:f8:5f:cc:03:6f:5c:cc:cc:94:ce:55:
fd:ef:5d:d6:5b:4a:2f:ee:30:13:04:1a:50:7a:8c:53:55:29:
98:ca:7a:88:55:e9:b2:05:aa:81:f8:82:6b:b5:0e:c2:03:77:
98:90:37:ad:0c:d3:ca:5f:ab:69:fe:70:e3:fb:e4:48:58:d1:
2b:ae:f3:b1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVvsRKR9oX3L3mSO5nW5JwYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NzY3MDU0ZDE5M2EzYjhkNmMyYzAwOWY1OWNmNjQzZTE0
OWUzOWYwHhcNMjMwMTAxMjMzNTUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDk5M2M1ODhkYWFlNmZjNzdiMjczMjVjMTI1NjY1MmRkMjAzYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY6BtksQUJJr4GPfbs79TDU9dAI7
af7pxzOfkKUX12Uedke8I7JK+brVXSsXKzR0GKQ4BiIrQM1ODqjD9vQaosSIkU1y
3v4NbEc5kYTPoJPEb3iCYNhP4oG8+Q5Pbi71qjF8LvyNdzCHVUW0b7foA4grpGLr
uPc7ATEN+EolSj30b3MYswYfUjJy4Fdo/wIlMkYg0gm0lyupo3q3KnanDgOvdOXX
vFCmLY8ZnWQAr67adDYHSc+lTjpBOgPiNXiJrejFpaGSN8MB1aqSXqREXHKxE5jR
sgUhQ8MTuTtENZY9T+Jj/RpJTP0kmRR11e4UpsFb7xsP+tiooKApAeAJcQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFISZPFiNqub8d7JzJcElZlLdIDxJMB8GA1UdIwQY
MBaAFEV2cFTRk6O41sLACfWc9kPhSeOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yOGEzYTktZmQ0My00ODljLWJjYzgt
YjgwYTIzYWM3ODkzLzEvaEprOFdJMnE1dngzc25NbHdTVm1VdDBnUEVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yOGEzYTktZmQ0My00ODljLWJjYzgtYjgwYTIzYWM3ODkz
LzEvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw0JFMA8E
AgACMAkDBwAgAQZ8LdgwDQYJKoZIhvcNAQELBQADggEBAGDdooBbzzkbCG23PSLg
XHqDz0tUifjP/G4CrwynyBK81hrdUTxP72TbZ+RhG+8RnEknNDRhCdU9Dsn+kaGj
UuF590kAo4qwpP8SVB1jtFnefxkT5EvMhvmk9bM3nv35jZa6S5zmL4pH1Y00f8fC
h6n9GSAY06XEJU0BSuqeaJCRO3m1pBoQfV4jAkkt4M+2JSEGq2k/qJCn4OJXl1aJ
i6kVoiX+zMas8JbIK5GTJqbo5aExZIB4vSoHjFD4X8wDb1zMzJTOVf3vXdZbSi/u
MBMEGlB6jFNVKZjKeohV6bIFqoH4gmu1DsIDd5iQN60M08pfq2n+cOP75EhY0Suu
87E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:23 2024 by rpki-client on console-fra.rpki-client.org