Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/HZmt7LS3eeZy7rOR6_1J4pZ0irY.roa
File: HZmt7LS3eeZy7rOR6_1J4pZ0irY.roa (raw, json)
Hash identifier: Z0gMWRKdy58tK0i+mJe+J7EYZ6vpTrqVx3Q3BmVPyL4=
Subject key identifier: 1D:99:AD:EC:B4:B7:79:E6:72:EE:B3:91:EB:FD:49:E2:96:74:8A:B6
Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial: 01856E01ED5D71FA4501034FF39D29DF2C10
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/HZmt7LS3eeZy7rOR6_1J4pZ0irY.roa
Signing time: Sun 01 Jan 2023 15:44:58 +0000
ROA not before: Sun 01 Jan 2023 15:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39584
IP address blocks: 193.200.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:ed:5d:71:fa:45:01:03:4f:f3:9d:29:df:2c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Validity
Not Before: Jan 1 15:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d99adecb4b779e672eeb391ebfd49e296748ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:d6:0a:36:ce:cd:9a:9f:26:95:ef:55:a4:
06:55:21:89:ea:07:e2:33:41:a6:c3:c0:ce:4d:d4:
45:b3:a3:46:a3:85:01:fc:03:a4:aa:09:06:fe:f8:
ac:f8:4f:c3:54:8c:8e:36:fc:55:d5:43:96:81:0d:
86:31:73:32:7e:0c:85:92:ad:09:70:76:87:66:bb:
99:66:54:31:46:66:6e:d8:5d:52:2b:17:ed:b7:35:
43:e1:86:d8:d3:a6:8e:e6:03:b7:45:ca:94:a3:62:
82:fc:84:3e:87:1a:a8:6d:93:dd:9e:25:3f:a5:2d:
4c:53:56:9f:73:de:1b:db:5d:84:be:90:54:91:7c:
62:5e:7c:5d:b0:19:e0:b0:93:bf:cd:55:f6:0f:28:
dc:f3:b6:99:67:00:12:73:56:80:7e:93:73:96:ac:
a7:ec:ce:ef:de:b0:07:37:d4:ea:83:4f:a7:54:cb:
0a:a6:a5:a6:91:3c:b3:8c:5e:e3:d5:03:49:84:7e:
69:4a:67:dc:c4:05:a3:a8:21:9a:2c:ec:36:46:82:
73:15:6f:ba:47:69:9c:36:ef:34:16:bb:b8:37:8e:
d6:76:28:95:b1:07:ff:1a:5c:95:c5:20:9c:7c:8c:
72:64:f2:41:38:a7:5c:fc:f2:db:58:2d:fe:93:69:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:99:AD:EC:B4:B7:79:E6:72:EE:B3:91:EB:FD:49:E2:96:74:8A:B6
X509v3 Authority Key Identifier:
keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/HZmt7LS3eeZy7rOR6_1J4pZ0irY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:40:6f:6c:79:93:03:7f:be:3c:a1:b9:72:f5:05:90:ae:6a:
ac:08:23:f7:3f:aa:ed:b3:ba:d7:28:32:4f:89:b6:16:dc:81:
76:5a:a7:ad:cc:c9:d0:f1:84:7d:6e:e7:d4:5f:ad:1d:da:35:
c3:c8:f9:58:49:a5:19:6d:04:ec:a1:cf:4e:8a:83:3d:86:9e:
9a:90:fb:43:e3:87:e3:f4:c6:09:20:de:3f:9b:cd:c8:72:85:
13:5b:b7:c0:c4:e1:a1:a6:92:52:33:45:b6:ff:51:29:f0:ee:
c9:52:f5:dc:af:9a:5a:a2:d9:85:be:96:31:d4:2e:63:4e:02:
23:72:23:03:0f:b3:bf:5e:67:78:ca:dd:c1:6e:58:8e:18:f5:
e7:99:cb:c3:81:60:47:b7:45:be:ff:d5:6f:0a:c2:cd:30:b2:
27:1d:3a:0b:96:db:f0:fe:2b:48:f9:36:87:7d:e2:cd:72:36:
c9:a8:6e:85:9d:85:4c:e3:89:4f:fb:5b:6e:b5:87:c2:ce:37:
10:af:d7:39:f3:2c:99:76:8b:a8:49:d8:34:40:d8:53:1a:91:
10:bc:bb:1d:90:1c:7f:a1:47:51:a5:5f:b0:08:bc:d1:ef:d1:
fe:e3:c4:85:b4:a7:f0:40:b9:f6:e7:88:e0:51:ad:2b:05:13:
3f:8a:90:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuAe1dcfpFAQNP850p3ywQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMGM3YWM1NmIxMWUxMDRhYmIxNjdiYjFhYjM3OTJiM2Zh
N2MzZDMwHhcNMjMwMTAxMTU0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDk5YWRlY2I0Yjc3OWU2NzJlZWIzOTFlYmZkNDllMjk2NzQ4YWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBbWCjbOzZqfJpXvVaQGVSGJ6gfi
M0Gmw8DOTdRFs6NGo4UB/AOkqgkG/vis+E/DVIyONvxV1UOWgQ2GMXMyfgyFkq0J
cHaHZruZZlQxRmZu2F1SKxfttzVD4YbY06aO5gO3RcqUo2KC/IQ+hxqobZPdniU/
pS1MU1afc94b212EvpBUkXxiXnxdsBngsJO/zVX2Dyjc87aZZwASc1aAfpNzlqyn
7M7v3rAHN9Tqg0+nVMsKpqWmkTyzjF7j1QNJhH5pSmfcxAWjqCGaLOw2RoJzFW+6
R2mcNu80Fru4N47WdiiVsQf/GlyVxSCcfIxyZPJBOKdc/PLbWC3+k2kSaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB2Zrey0t3nmcu6zkev9SeKWdIq2MB8GA1UdIwQY
MBaAFOAMesVrEeEEq7FnuxqzeSs/p8PTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYt
NGZkMGUxYjljMTJmLzEvSFptdDdMUzNlZVp5N3JPUjZfMUo0cFowaXJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYtNGZkMGUxYjljMTJm
LzEvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwciwMA0G
CSqGSIb3DQEBCwUAA4IBAQA7QG9seZMDf748obly9QWQrmqsCCP3P6rts7rXKDJP
ibYW3IF2WqetzMnQ8YR9bufUX60d2jXDyPlYSaUZbQTsoc9OioM9hp6akPtD44fj
9MYJIN4/m83IcoUTW7fAxOGhppJSM0W2/1Ep8O7JUvXcr5paotmFvpYx1C5jTgIj
ciMDD7O/Xmd4yt3BbliOGPXnmcvDgWBHt0W+/9VvCsLNMLInHToLltvw/itI+TaH
feLNcjbJqG6FnYVM44lP+1tutYfCzjcQr9c58yyZdouoSdg0QNhTGpEQvLsdkBx/
oUdRpV+wCLzR79H+48SFtKfwQLn254jgUa0rBRM/ipAc
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:45 2024 by rpki-client on console-ams.rpki-client.org