Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/HALRskuyQCqcr2x_Djc-xK72ZQg.roa
File: HALRskuyQCqcr2x_Djc-xK72ZQg.roa (raw, json)
Hash identifier: Qcb8KHlyQVtWK3Ncr/8Ev6FwSF3GJ3Kf/Y1dbldV38M=
Subject key identifier: 1C:02:D1:B2:4B:B2:40:2A:9C:AF:6C:7F:0E:37:3E:C4:AE:F6:65:08
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018876B721A3B2F87E99FE07307F490C959A
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/HALRskuyQCqcr2x_Djc-xK72ZQg.roa
Signing time: Thu 01 Jun 2023 11:28:13 +0000
ROA not before: Thu 01 Jun 2023 11:28:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.247.0/24 maxlen: 24
213.137.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 21:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:b7:21:a3:b2:f8:7e:99:fe:07:30:7f:49:0c:95:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jun 1 11:28:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c02d1b24bb2402a9caf6c7f0e373ec4aef66508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:b5:e7:16:52:ce:b5:c3:6b:2f:e9:93:0e:
ae:d2:38:c6:45:a2:4b:ce:78:5d:da:1a:ef:35:7a:
0f:eb:ee:d3:f6:d6:97:2e:2d:73:20:52:a9:85:95:
92:33:70:12:df:f2:6c:14:39:f9:93:57:f4:31:29:
38:df:eb:73:84:c0:28:9f:05:98:fe:71:e7:18:e3:
58:53:5d:2b:05:89:b5:8f:9d:6b:16:51:f7:7f:b3:
ab:47:b7:86:87:ce:16:a5:eb:79:ef:76:d1:dd:fd:
25:79:bf:b8:ba:33:7f:5d:f2:0f:4e:1b:7f:7c:ee:
05:ed:1c:ea:6b:3d:95:fc:0e:27:fe:78:f7:09:53:
04:d7:e5:86:eb:5a:1b:a8:db:54:71:5b:0d:06:0e:
94:d9:77:2f:54:e3:cf:05:9a:a5:ba:d8:93:95:d6:
be:55:e7:65:71:43:87:34:0c:c9:02:60:9c:3e:6f:
88:31:12:42:90:06:96:9b:93:0c:04:b9:1f:b8:5c:
af:33:6f:3f:ba:7b:ab:09:2a:cb:87:44:a1:80:0f:
d2:97:7f:fc:f0:de:32:da:e5:2f:64:03:02:56:58:
3d:ca:97:43:7b:a4:a6:bd:ae:ef:b5:f6:4f:77:a5:
1c:bd:9d:71:54:95:7e:78:a8:b6:b1:9d:29:15:f2:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:02:D1:B2:4B:B2:40:2A:9C:AF:6C:7F:0E:37:3E:C4:AE:F6:65:08
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/HALRskuyQCqcr2x_Djc-xK72ZQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.247.0/24
213.137.82.0/24
Signature Algorithm: sha256WithRSAEncryption
58:32:8e:bb:f9:12:34:f0:16:57:5f:6e:40:c2:f8:26:e6:32:
3c:4e:c5:53:de:5d:86:d9:36:e4:e1:3b:10:26:f2:c0:70:2d:
a7:36:39:c2:bb:8b:77:34:4f:df:e1:07:27:a7:dc:f6:7c:32:
b1:cb:f8:6d:81:2c:5e:ab:ad:8f:9e:20:ea:d2:55:82:6d:04:
8c:dd:d4:e6:ae:99:7c:24:d1:ae:d3:10:90:32:94:21:b2:e4:
ee:0a:b7:2c:41:c9:c7:55:ee:d4:9f:cc:dc:f4:e1:e5:02:dd:
01:15:0f:1b:62:49:af:4d:41:dc:41:8f:8c:35:44:3e:a5:a3:
b7:69:93:2c:22:38:1b:ed:eb:51:2d:60:66:45:22:03:bc:7a:
df:83:50:12:ea:6a:15:a2:35:d8:1f:3f:a3:e6:19:1b:8e:d0:
1e:96:05:e6:5f:c2:7c:76:71:b8:e7:08:a5:dc:77:63:44:b2:
46:7d:9d:fe:27:5d:fe:6b:c8:5c:f9:7c:04:53:62:5e:87:d3:
2e:b0:4a:ac:42:32:00:24:2e:75:20:ab:4c:af:c6:79:51:76:
57:71:7e:ed:eb:70:8d:8b:b0:02:6e:c4:ee:fa:ab:c7:76:08:
6a:c5:ff:38:af:89:d7:d3:63:9c:49:0a:57:71:60:7f:1a:3d:
1e:f9:d8:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYh2tyGjsvh+mf4HMH9JDJWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjMwNjAxMTEyODEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzAyZDFiMjRiYjI0MDJhOWNhZjZjN2YwZTM3M2VjNGFlZjY2NTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5q15xZSzrXDay/pkw6u0jjGRaJL
znhd2hrvNXoP6+7T9taXLi1zIFKphZWSM3AS3/JsFDn5k1f0MSk43+tzhMAonwWY
/nHnGONYU10rBYm1j51rFlH3f7OrR7eGh84Wpet573bR3f0leb+4ujN/XfIPTht/
fO4F7Rzqaz2V/A4n/nj3CVME1+WG61obqNtUcVsNBg6U2XcvVOPPBZqlutiTlda+
VedlcUOHNAzJAmCcPm+IMRJCkAaWm5MMBLkfuFyvM28/unurCSrLh0ShgA/Sl3/8
8N4y2uUvZAMCVlg9ypdDe6Smva7vtfZPd6UcvZ1xVJV+eKi2sZ0pFfLaoQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBwC0bJLskAqnK9sfw43PsSu9mUIMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvSEFMUnNrdXlRQ3FjcjJ4X0RqYy14SzcyWlFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjeL3AwQA
1YlSMA0GCSqGSIb3DQEBCwUAA4IBAQBYMo67+RI08BZXX25Awvgm5jI8TsVT3l2G
2Tbk4TsQJvLAcC2nNjnCu4t3NE/f4Qcnp9z2fDKxy/htgSxeq62PniDq0lWCbQSM
3dTmrpl8JNGu0xCQMpQhsuTuCrcsQcnHVe7Un8zc9OHlAt0BFQ8bYkmvTUHcQY+M
NUQ+paO3aZMsIjgb7etRLWBmRSIDvHrfg1AS6moVojXYHz+j5hkbjtAelgXmX8J8
dnG45wil3HdjRLJGfZ3+J13+a8hc+XwEU2Jeh9MusEqsQjIAJC51IKtMr8Z5UXZX
cX7t63CNi7ACbsTu+qvHdghqxf84r4nX02OcSQpXcWB/Gj0e+dg6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:38 2024 by rpki-client on console-ams.rpki-client.org