Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/hSEWDCioYGP9WdvB82Y4aXAeZXY.roa
File: hSEWDCioYGP9WdvB82Y4aXAeZXY.roa (raw, json)
Hash identifier: RZ3lfqnCKrqjF+wLGazmLn32nsy38VkeWpWtrkqMQWQ=
Subject key identifier: 85:21:16:0C:28:A8:60:63:FD:59:DB:C1:F3:66:38:69:70:1E:65:76
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019104D970E3B55978AE5F6504A633FBD389
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/hSEWDCioYGP9WdvB82Y4aXAeZXY.roa
Signing time: Tue 30 Jul 2024 18:14:04 +0000
ROA not before: Tue 30 Jul 2024 18:14:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 151.145.160.0/19 maxlen: 19
170.100.204.0/24 maxlen: 24
170.100.206.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Jul 2024 19:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:d9:70:e3:b5:59:78:ae:5f:65:04:a6:33:fb:d3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jul 30 18:14:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8521160c28a86063fd59dbc1f3663869701e6576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:2f:02:53:30:90:fa:48:da:8f:12:96:e0:
cf:9a:e1:18:75:b0:1d:26:a1:89:e9:2a:62:01:ac:
67:70:48:62:5b:f0:b7:15:e3:81:56:5c:fb:9a:b8:
23:65:fe:c0:bb:eb:46:52:06:49:df:8d:e2:ab:47:
d5:e2:55:5c:98:16:65:37:08:8c:86:75:ed:61:08:
ff:0f:a4:31:65:f3:63:3e:0d:f8:d6:86:31:c7:b8:
e7:c4:2a:a7:28:15:2a:e3:ce:a8:07:61:52:37:f2:
86:dc:df:20:bd:8a:b6:2e:ad:70:3c:e9:91:97:16:
63:2f:1d:8a:c3:c0:d3:6f:79:75:04:02:4f:88:c3:
b2:82:98:21:a1:ac:62:44:f8:72:26:cb:f8:af:9e:
a3:87:05:95:2a:f0:31:a0:75:d7:21:ea:64:25:0f:
d6:28:ac:f7:7a:a9:5a:15:1b:f5:ad:17:6e:85:b2:
e2:5a:87:80:d8:7e:41:f5:1e:fd:c1:e0:ed:d9:25:
bd:58:45:32:6f:29:c6:05:07:d7:4e:b7:32:0d:ae:
65:96:10:b1:5c:11:6b:6f:08:e8:5d:cb:09:e7:e2:
d8:99:a2:b5:26:ad:8b:78:99:c5:0e:8d:a7:5c:d4:
2b:78:f7:de:af:02:f7:b0:3e:8a:4c:6e:a6:32:a7:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:21:16:0C:28:A8:60:63:FD:59:DB:C1:F3:66:38:69:70:1E:65:76
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/hSEWDCioYGP9WdvB82Y4aXAeZXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.145.160.0/19
170.100.204.0/24
170.100.206.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:96:21:6c:ad:2e:0a:0c:ea:7a:19:83:6e:e2:a1:7d:e2:f0:
c5:5a:0d:f1:99:86:3b:0d:b2:be:4f:9c:c2:de:9d:6d:86:ae:
de:4c:03:38:50:60:27:4a:36:49:25:33:43:35:97:ae:e5:38:
5d:f8:96:6c:6f:15:5d:1c:8a:cf:44:e2:1c:90:39:ca:98:f4:
bf:50:f5:89:9a:65:5f:29:eb:53:4d:0e:38:5d:33:9b:27:bc:
2e:93:f7:cc:7b:68:9b:dc:63:c3:33:b4:fc:2e:4d:6e:0f:8a:
d8:53:42:59:16:07:57:c4:dd:e1:eb:d4:4a:98:f1:ee:5d:a9:
db:5c:cd:25:71:c0:23:bd:7c:15:04:a7:dd:a6:04:c7:23:43:
9d:59:7e:a5:23:ca:44:38:d4:c5:c2:b3:65:20:7f:7d:66:56:
20:f8:4c:fe:07:b3:f1:fe:69:ba:74:7b:39:ab:1b:91:72:3e:
c0:4f:d0:67:df:a4:1f:ca:89:e0:fa:93:8f:34:47:7b:73:cd:
ee:77:09:ee:f2:73:0c:84:4d:de:7f:cd:46:5a:b2:8f:4d:92:
01:ac:01:30:b7:ce:d1:db:13:a7:86:43:9d:7e:6d:ac:d0:6c:
57:fd:52:b5:07:fe:e7:32:2c:a9:6e:f1:91:aa:63:71:b3:cd:
4d:14:c6:e9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZEE2XDjtVl4rl9lBKYz+9OJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjQwNzMwMTgxNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTIxMTYwYzI4YTg2MDYzZmQ1OWRiYzFmMzY2Mzg2OTcwMWU2NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCovAlMwkPpI2o8SluDPmuEYdbAd
JqGJ6SpiAaxncEhiW/C3FeOBVlz7mrgjZf7Au+tGUgZJ343iq0fV4lVcmBZlNwiM
hnXtYQj/D6QxZfNjPg341oYxx7jnxCqnKBUq486oB2FSN/KG3N8gvYq2Lq1wPOmR
lxZjLx2Kw8DTb3l1BAJPiMOygpghoaxiRPhyJsv4r56jhwWVKvAxoHXXIepkJQ/W
KKz3eqlaFRv1rRduhbLiWoeA2H5B9R79weDt2SW9WEUybynGBQfXTrcyDa5llhCx
XBFrbwjoXcsJ5+LYmaK1Jq2LeJnFDo2nXNQrePferwL3sD6KTG6mMqc/UQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIUhFgwoqGBj/VnbwfNmOGlwHmV2MB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvaFNFV0RDaW9ZR1A5V2R2QjgyWTRhWEFlWlhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFl5GgAwQA
qmTMAwQBqmTOMA0GCSqGSIb3DQEBCwUAA4IBAQCMliFsrS4KDOp6GYNu4qF94vDF
Wg3xmYY7DbK+T5zC3p1thq7eTAM4UGAnSjZJJTNDNZeu5Thd+JZsbxVdHIrPROIc
kDnKmPS/UPWJmmVfKetTTQ44XTObJ7wuk/fMe2ib3GPDM7T8Lk1uD4rYU0JZFgdX
xN3h69RKmPHuXanbXM0lccAjvXwVBKfdpgTHI0OdWX6lI8pEONTFwrNlIH99ZlYg
+Ez+B7Px/mm6dHs5qxuRcj7AT9Bn36Qfyong+pOPNEd7c83udwnu8nMMhE3ef81G
WrKPTZIBrAEwt87R2xOnhkOdfm2s0GxX/VK1B/7nMiypbvGRqmNxs81NFMbp
-----END CERTIFICATE-----
Generated at Tue Jul 30 20:53:00 2024 by rpki-client on console-fra.rpki-client.org