Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/HAuq3NSrqu1cR3attUrtDWzGPeo.roa
File: HAuq3NSrqu1cR3attUrtDWzGPeo.roa (raw, json)
Hash identifier: hpyK6w12gcnGHqluM0oyxu46+yGFcSncAmL/v/FoTUU=
Subject key identifier: 1C:0B:AA:DC:D4:AB:AA:ED:5C:47:76:AD:B5:4A:ED:0D:6C:C6:3D:EA
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018D4BDBEA1D725044CA281366DB0D3E400B
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/HAuq3NSrqu1cR3attUrtDWzGPeo.roa
Signing time: Sat 27 Jan 2024 16:58:39 +0000
ROA not before: Sat 27 Jan 2024 16:58:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52147
IP address blocks: 185.100.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 07:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4b:db:ea:1d:72:50:44:ca:28:13:66:db:0d:3e:40:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 27 16:58:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c0baadcd4abaaed5c4776adb54aed0d6cc63dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:1b:db:1c:65:bb:0e:9f:a5:3f:ba:8d:f0:
88:19:bc:b3:05:c5:5a:ca:ed:33:7e:89:80:2e:06:
ea:0a:f5:35:11:32:61:3a:31:c4:91:4b:cd:f9:26:
ee:61:f7:78:b1:c5:8d:5b:5a:fd:c6:60:17:de:64:
50:ca:26:3e:c1:bb:32:b6:3f:5c:61:7a:ce:d7:73:
a6:2f:eb:bb:6b:a2:d1:b3:1d:d5:1d:67:9b:b7:3c:
89:a4:6a:da:d8:aa:8d:e3:44:7c:43:46:0c:2d:6f:
39:c1:d7:7e:3b:42:90:27:86:27:98:3d:44:77:16:
0d:01:0d:fe:be:26:33:0d:b5:93:1c:84:a1:ad:5f:
fd:28:97:d7:af:8f:7e:aa:ad:ed:99:07:e0:13:17:
62:14:e5:8c:bb:43:fb:05:07:b8:85:3a:9d:01:eb:
e2:18:98:15:ac:c6:4d:1c:32:1a:f5:66:e4:1d:a6:
c5:9f:a0:50:f0:4f:16:4c:db:9c:78:55:ca:5b:9e:
78:80:c4:89:aa:97:07:41:80:81:b3:c8:ae:16:00:
a3:1c:01:b9:e0:e2:45:fb:ce:0f:f9:5e:52:0a:2d:
88:dc:96:b2:57:c3:95:b8:cf:ce:18:34:d6:d2:7f:
bf:99:a4:f3:78:99:2d:22:1e:8b:b1:d7:26:1a:9c:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0B:AA:DC:D4:AB:AA:ED:5C:47:76:AD:B5:4A:ED:0D:6C:C6:3D:EA
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/HAuq3NSrqu1cR3attUrtDWzGPeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.168.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d3:a1:b6:e1:0b:e7:1f:27:1b:c0:80:fd:be:e2:c3:9a:2a:
11:42:a4:80:2d:8c:a7:81:b2:50:05:63:0c:29:e1:a5:c8:1e:
55:df:cb:9a:08:95:46:42:8b:96:d2:ad:31:6e:7e:0f:74:04:
b5:6f:5c:f5:6c:0d:00:7d:5b:d0:8e:c9:75:bd:b8:31:43:68:
a2:83:18:9c:43:03:05:7c:98:32:3d:40:11:dd:2a:50:b8:8d:
3a:0a:c0:fb:87:69:fe:27:bf:a6:e0:1e:19:23:63:77:a7:c0:
98:f8:c3:b5:05:e7:3a:2e:00:3d:71:2c:eb:41:c0:36:b4:0b:
b6:84:4b:40:aa:d3:78:82:69:a4:3f:0d:26:64:39:66:75:e2:
a0:9a:83:66:18:e0:91:48:47:31:d9:d4:02:d9:e3:6d:14:e3:
a1:17:bc:44:a7:37:4e:eb:c6:68:6c:58:fe:2d:05:6f:85:a4:
be:5a:3a:2b:56:86:60:f3:1b:a8:fb:05:dd:dc:13:ad:cb:f9:
34:a7:dd:1a:5f:99:f7:6d:58:34:2b:28:94:95:73:38:6a:c2:
de:75:aa:13:7d:39:a5:95:a7:21:c9:ce:bb:be:a5:48:54:c1:
9c:e2:d6:30:a4:20:5c:d1:85:65:1e:e8:d9:cc:d9:a5:82:14:
42:d6:32:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1L2+odclBEyigTZtsNPkALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjQwMTI3MTY1ODM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzBiYWFkY2Q0YWJhYWVkNWM0Nzc2YWRiNTRhZWQwZDZjYzYzZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPQb2xxluw6fpT+6jfCIGbyzBcVa
yu0zfomALgbqCvU1ETJhOjHEkUvN+SbuYfd4scWNW1r9xmAX3mRQyiY+wbsytj9c
YXrO13OmL+u7a6LRsx3VHWebtzyJpGra2KqN40R8Q0YMLW85wdd+O0KQJ4YnmD1E
dxYNAQ3+viYzDbWTHIShrV/9KJfXr49+qq3tmQfgExdiFOWMu0P7BQe4hTqdAevi
GJgVrMZNHDIa9WbkHabFn6BQ8E8WTNuceFXKW554gMSJqpcHQYCBs8iuFgCjHAG5
4OJF+84P+V5SCi2I3JayV8OVuM/OGDTW0n+/maTzeJktIh6LsdcmGpyy4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwLqtzUq6rtXEd2rbVK7Q1sxj3qMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvSEF1cTNOU3JxdTFjUjNhdHRVcnREV3pHUGVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWSoMA0G
CSqGSIb3DQEBCwUAA4IBAQBo06G24QvnHycbwID9vuLDmioRQqSALYyngbJQBWMM
KeGlyB5V38uaCJVGQouW0q0xbn4PdAS1b1z1bA0AfVvQjsl1vbgxQ2iigxicQwMF
fJgyPUAR3SpQuI06CsD7h2n+J7+m4B4ZI2N3p8CY+MO1Bec6LgA9cSzrQcA2tAu2
hEtAqtN4gmmkPw0mZDlmdeKgmoNmGOCRSEcx2dQC2eNtFOOhF7xEpzdO68ZobFj+
LQVvhaS+WjorVoZg8xuo+wXd3BOty/k0p90aX5n3bVg0KyiUlXM4asLedaoTfTml
lachyc67vqVIVMGc4tYwpCBc0YVlHujZzNmlghRC1jJA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:40 2024 by rpki-client on console-ams.rpki-client.org