Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/HHwx8rN6jB3Q_rsOG_BM60ZzFhs.roa
File: HHwx8rN6jB3Q_rsOG_BM60ZzFhs.roa (raw, json)
Hash identifier: Q5981O66BxOA7akGa8bdLid42kD3/Iv9JyNnm9J9wPI=
Subject key identifier: 1C:7C:31:F2:B3:7A:8C:1D:D0:FE:BB:0E:1B:F0:4C:EB:46:73:16:1B
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018AA7445D9DFDED2D587608B78CC46EB117
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/HHwx8rN6jB3Q_rsOG_BM60ZzFhs.roa
Signing time: Mon 18 Sep 2023 07:49:50 +0000
ROA not before: Mon 18 Sep 2023 07:49:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.218.42.0/24 maxlen: 24
45.151.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:44:5d:9d:fd:ed:2d:58:76:08:b7:8c:c4:6e:b1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Sep 18 07:49:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c7c31f2b37a8c1dd0febb0e1bf04ceb4673161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:25:00:e3:e7:a0:5a:de:5a:14:00:2b:07:32:
80:4a:5a:72:17:8f:e9:e7:92:9e:39:98:23:9b:45:
4a:4f:c7:88:72:42:96:cb:b3:6d:14:de:f0:b3:41:
3d:b2:22:e3:55:8d:d1:a8:f2:75:8b:18:0e:24:60:
f2:ab:19:7e:f6:c4:7f:eb:1a:5f:1e:e0:93:ee:3c:
0a:e5:38:2b:3d:42:a5:b7:d5:2e:ab:cb:e6:30:6b:
fc:0e:0b:b5:ac:bb:3f:0e:59:3e:30:85:54:fd:2a:
ff:54:38:ca:50:34:6d:8c:37:be:f2:ac:ad:29:44:
7f:1f:fd:15:e0:96:33:69:48:d0:67:f5:cd:7c:49:
dc:ef:e8:67:72:e4:97:61:90:12:3c:84:c7:56:88:
aa:c3:f6:a3:98:81:6c:f1:25:8c:65:3f:0a:b6:9d:
fb:7e:9f:8f:87:84:e7:af:85:52:35:f9:c5:fd:ef:
0f:47:b1:2d:5f:6c:ff:a8:94:7e:df:d3:72:d0:e6:
c0:f4:1b:d8:41:45:fc:2e:1c:47:08:7e:1e:90:0b:
d7:eb:95:82:2a:e9:9f:0e:1d:69:40:5f:a6:76:87:
08:39:c5:53:7d:cf:7d:b0:03:97:8c:dc:c2:bd:08:
c8:f1:85:db:ae:cf:ee:c6:96:83:bf:e1:b8:e6:65:
0a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7C:31:F2:B3:7A:8C:1D:D0:FE:BB:0E:1B:F0:4C:EB:46:73:16:1B
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/HHwx8rN6jB3Q_rsOG_BM60ZzFhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
88.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5c:d0:3a:c3:69:c8:f8:b8:f7:b4:64:d3:9a:50:6c:f9:f2:
d6:db:0d:07:8f:e1:cd:6a:f2:33:8f:d5:cc:f9:1b:54:33:4e:
b8:0b:41:e7:c8:d3:df:0d:25:66:63:39:f7:7e:39:8e:77:75:
d0:51:ed:23:76:c6:16:3a:5d:db:b1:f1:2d:2c:30:f5:a5:60:
43:7b:ae:ea:04:57:5d:1a:25:95:ce:85:98:c9:64:81:0d:68:
64:93:c9:ff:45:3d:4d:ba:7f:3c:bc:fd:07:82:7b:d3:cd:85:
db:54:fd:85:5b:5d:b8:57:36:31:68:23:7f:93:78:0d:b3:fd:
19:19:1a:a7:e1:45:44:71:8f:3d:96:2b:38:8c:92:00:ab:89:
8f:e5:35:6d:71:dc:64:49:18:b4:8f:bf:6d:64:ad:95:10:e9:
89:00:71:f5:fb:c1:98:b3:d5:9b:91:eb:30:ed:9c:cc:9e:60:
7a:fb:ab:ec:82:45:93:43:07:27:43:3b:43:60:aa:93:e1:bc:
58:05:94:94:b7:4b:10:71:6b:fc:29:58:6f:c0:86:a9:76:93:
76:e6:5e:60:b7:11:0a:91:df:6e:33:9d:c4:48:f1:35:6d:95:
fd:69:70:1d:c4:97:9f:48:46:02:f9:63:de:f4:5b:23:4f:ed:
22:5f:e8:16
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqnRF2d/e0tWHYIt4zEbrEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwOTE4MDc0OTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzdjMzFmMmIzN2E4YzFkZDBmZWJiMGUxYmYwNGNlYjQ2NzMxNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SUA4+egWt5aFAArBzKASlpyF4/p
55KeOZgjm0VKT8eIckKWy7NtFN7ws0E9siLjVY3RqPJ1ixgOJGDyqxl+9sR/6xpf
HuCT7jwK5TgrPUKlt9Uuq8vmMGv8Dgu1rLs/Dlk+MIVU/Sr/VDjKUDRtjDe+8qyt
KUR/H/0V4JYzaUjQZ/XNfEnc7+hncuSXYZASPITHVoiqw/ajmIFs8SWMZT8Ktp37
fp+Ph4Tnr4VSNfnF/e8PR7EtX2z/qJR+39Ny0ObA9BvYQUX8LhxHCH4ekAvX65WC
KumfDh1pQF+mdocIOcVTfc99sAOXjNzCvQjI8YXbrs/uxpaDv+G45mUKCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBx8MfKzeowd0P67DhvwTOtGcxYbMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvSEh3eDhyTjZqQjNRX3JzT0dfQk02MFp6RmhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZdGAwQA
WNoqMA0GCSqGSIb3DQEBCwUAA4IBAQAFXNA6w2nI+Lj3tGTTmlBs+fLW2w0Hj+HN
avIzj9XM+RtUM064C0HnyNPfDSVmYzn3fjmOd3XQUe0jdsYWOl3bsfEtLDD1pWBD
e67qBFddGiWVzoWYyWSBDWhkk8n/RT1Nun88vP0HgnvTzYXbVP2FW124VzYxaCN/
k3gNs/0ZGRqn4UVEcY89lis4jJIAq4mP5TVtcdxkSRi0j79tZK2VEOmJAHH1+8GY
s9Wbkesw7ZzMnmB6+6vsgkWTQwcnQztDYKqT4bxYBZSUt0sQcWv8KVhvwIapdpN2
5l5gtxEKkd9uM53ESPE1bZX9aXAdxJefSEYC+WPe9FsjT+0iX+gW
-----END CERTIFICATE-----
Generated at Thu Sep 21 21:23:28 2023 by rpki-client on console-fra.rpki-client.org