Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/8c143d-e2a3-4314-9a51-a0b9751efa47/1/Hmds6X3BfBRf5rJzqk9QWFQyfo4.roa
File: Hmds6X3BfBRf5rJzqk9QWFQyfo4.roa (raw, json)
Hash identifier: 0Ccj5L/ofD2Ag00vEGQXfFw4U4zcT5dZsVzccvjsvvM=
Subject key identifier: 1E:67:6C:E9:7D:C1:7C:14:5F:E6:B2:73:AA:4F:50:58:54:32:7E:8E
Certificate issuer: /CN=48096ad33beb3e9504ad51a4e79034f7d1847633
Certificate serial: 01856DDD7513F6CF74538F7A33CE71FF7B5B
Authority key identifier: 48:09:6A:D3:3B:EB:3E:95:04:AD:51:A4:E7:90:34:F7:D1:84:76:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAlq0zvrPpUErVGk55A099GEdjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/8c143d-e2a3-4314-9a51-a0b9751efa47/1/Hmds6X3BfBRf5rJzqk9QWFQyfo4.roa
Signing time: Sun 01 Jan 2023 15:05:07 +0000
ROA not before: Sun 01 Jan 2023 15:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42493
IP address blocks: 2.59.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:75:13:f6:cf:74:53:8f:7a:33:ce:71:ff:7b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48096ad33beb3e9504ad51a4e79034f7d1847633
Validity
Not Before: Jan 1 15:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e676ce97dc17c145fe6b273aa4f505854327e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:fa:2e:b5:03:7b:7c:e6:1b:d7:e1:62:16:
f8:3d:ef:50:05:78:79:36:be:cc:06:f2:1d:74:38:
e6:c8:58:a2:72:c6:4b:43:52:1a:d0:8a:fd:d3:f8:
71:17:0e:8e:40:95:48:2f:fb:f1:65:60:ee:31:c2:
68:6d:22:ee:d4:e3:09:70:3c:5e:70:3b:95:cb:d3:
34:e6:8f:8c:83:56:e2:07:dc:17:2b:a0:89:00:e0:
07:ea:b6:1b:95:f8:cf:0f:42:d6:27:24:e8:7c:14:
c0:2c:57:da:c2:41:4f:a3:aa:c9:4b:aa:a3:3c:bb:
0d:b5:0d:90:ba:ca:2a:0a:3e:a1:ae:76:27:49:f9:
f6:60:f7:21:47:f2:3e:1d:ea:b4:08:bc:da:da:ef:
f1:83:c1:a8:04:77:33:5a:7d:22:e7:40:e9:95:79:
ec:50:fa:f2:9e:6c:20:c0:e9:66:6f:36:62:02:26:
b5:cd:cd:bc:1e:82:86:b5:44:7a:ec:ef:fa:65:d0:
cc:ee:31:96:0f:6c:af:fb:8e:9f:df:51:29:2d:06:
e7:ed:05:6e:c3:e5:6c:59:fd:54:9e:d6:19:b4:2e:
1b:53:8c:5b:e0:3c:a6:cf:4a:30:50:17:0c:58:ca:
02:9f:87:83:38:31:13:71:74:d9:1d:b6:d1:e9:83:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:67:6C:E9:7D:C1:7C:14:5F:E6:B2:73:AA:4F:50:58:54:32:7E:8E
X509v3 Authority Key Identifier:
keyid:48:09:6A:D3:3B:EB:3E:95:04:AD:51:A4:E7:90:34:F7:D1:84:76:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAlq0zvrPpUErVGk55A099GEdjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/8c143d-e2a3-4314-9a51-a0b9751efa47/1/Hmds6X3BfBRf5rJzqk9QWFQyfo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/8c143d-e2a3-4314-9a51-a0b9751efa47/1/SAlq0zvrPpUErVGk55A099GEdjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:00:cf:ff:91:31:1b:f9:7a:92:56:db:2d:1f:9d:d9:be:47:
3b:36:21:67:6f:23:f9:a0:1e:71:df:c4:e0:64:01:10:07:9d:
fa:25:68:b2:5a:2f:3e:b6:b7:0c:dd:a6:93:ba:ce:01:7d:57:
d6:9a:53:92:ce:76:47:c4:79:08:8d:4c:33:53:a3:d6:93:ae:
27:b5:91:6a:0f:95:75:7e:b1:45:86:7c:3e:ae:a8:35:41:0e:
0a:a4:e6:48:f4:f8:b6:bc:f3:95:8b:30:8d:25:b9:16:f0:b3:
67:b6:86:c5:b0:71:97:f5:54:3a:52:af:1e:ba:1c:42:32:96:
92:15:20:7c:c7:1a:6e:c3:f9:c9:c6:11:f8:c9:89:64:ff:d5:
23:32:b5:9a:63:b4:10:59:19:52:d2:98:13:d8:81:73:60:6e:
c4:6f:8e:54:bd:ed:75:56:e1:b1:46:88:cd:de:71:21:ad:a3:
ec:4b:77:b9:28:bc:f0:68:6f:5d:79:a7:5a:7e:27:d9:ba:43:
2d:f6:44:10:73:76:2d:f5:8c:2f:46:ef:c6:a6:d6:91:a3:5f:
57:f6:c3:dd:08:fe:2b:4e:61:fb:dc:c2:e0:6b:5e:28:eb:98:
61:25:89:63:e3:c6:f4:28:fb:e8:4b:ac:53:b7:ea:c4:96:f7:
03:c2:ff:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt3XUT9s90U496M85x/3tbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDk2YWQzM2JlYjNlOTUwNGFkNTFhNGU3OTAzNGY3ZDE4
NDc2MzMwHhcNMjMwMTAxMTUwNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTY3NmNlOTdkYzE3YzE0NWZlNmIyNzNhYTRmNTA1ODU0MzI3ZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyb6LrUDe3zmG9fhYhb4Pe9QBXh5
Nr7MBvIddDjmyFiicsZLQ1Ia0Ir90/hxFw6OQJVIL/vxZWDuMcJobSLu1OMJcDxe
cDuVy9M05o+Mg1biB9wXK6CJAOAH6rYblfjPD0LWJyTofBTALFfawkFPo6rJS6qj
PLsNtQ2QusoqCj6hrnYnSfn2YPchR/I+Heq0CLza2u/xg8GoBHczWn0i50DplXns
UPrynmwgwOlmbzZiAia1zc28HoKGtUR67O/6ZdDM7jGWD2yv+46f31EpLQbn7QVu
w+VsWf1UntYZtC4bU4xb4Dymz0owUBcMWMoCn4eDODETcXTZHbbR6YOJTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB5nbOl9wXwUX+ayc6pPUFhUMn6OMB8GA1UdIwQY
MBaAFEgJatM76z6VBK1RpOeQNPfRhHYzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FscTB6dnJQcFVFclZHazU1QTA5OUdFZGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC84YzE0M2QtZTJhMy00MzE0LTlhNTEt
YTBiOTc1MWVmYTQ3LzEvSG1kczZYM0JmQlJmNXJKenFrOVFXRlF5Zm80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC84YzE0M2QtZTJhMy00MzE0LTlhNTEtYTBiOTc1MWVmYTQ3
LzEvU0FscTB6dnJQcFVFclZHazU1QTA5OUdFZGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjt8MA0G
CSqGSIb3DQEBCwUAA4IBAQAvAM//kTEb+XqSVtstH53Zvkc7NiFnbyP5oB5x38Tg
ZAEQB536JWiyWi8+trcM3aaTus4BfVfWmlOSznZHxHkIjUwzU6PWk64ntZFqD5V1
frFFhnw+rqg1QQ4KpOZI9Pi2vPOVizCNJbkW8LNntobFsHGX9VQ6Uq8euhxCMpaS
FSB8xxpuw/nJxhH4yYlk/9UjMrWaY7QQWRlS0pgT2IFzYG7Eb45Uve11VuGxRojN
3nEhraPsS3e5KLzwaG9deadafifZukMt9kQQc3Yt9YwvRu/GptaRo19X9sPdCP4r
TmH73MLga14o65hhJYlj48b0KPvoS6xTt+rElvcDwv/v
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:07 2024 by rpki-client on console-fra.rpki-client.org