Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Hqyfw9MJHt8EekKmcGFQZ3c895Q.roa
File: Hqyfw9MJHt8EekKmcGFQZ3c895Q.roa (raw, json)
Hash identifier: 59tyZrqN0H9b8r470ivGBXOBTlxCEohxBpcj0H9r+xc=
Subject key identifier: 1E:AC:9F:C3:D3:09:1E:DF:04:7A:42:A6:70:61:50:67:77:3C:F7:94
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD52AA47641FBF889B5DFDF92D28067
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Hqyfw9MJHt8EekKmcGFQZ3c895Q.roa
Signing time: Mon 02 Jan 2023 00:15:19 +0000
ROA not before: Mon 02 Jan 2023 00:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50614
IP address blocks: 188.210.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:2a:a4:76:41:fb:f8:89:b5:df:df:92:d2:80:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eac9fc3d3091edf047a42a670615067773cf794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dc:ed:e0:bf:67:0a:a1:7d:7a:d1:c0:c1:6f:
15:4b:19:45:9a:b8:97:98:a6:c3:be:a7:6a:a9:68:
88:c0:48:26:7e:0c:e4:ec:37:63:7b:a6:4e:18:fb:
1b:74:99:aa:15:e6:cb:72:7f:bf:30:22:ba:73:e0:
38:60:93:e3:b1:e6:e9:8f:dd:d3:59:ca:ed:64:f8:
e5:60:40:91:5c:44:34:cd:1c:0f:5d:2b:28:e1:13:
94:93:29:d7:97:cc:08:02:9e:e6:8d:86:f0:d8:05:
bd:09:53:c7:3c:ab:db:55:b9:0b:09:80:16:07:e6:
1c:de:8f:48:75:a8:13:15:ee:c4:43:ad:e4:07:a3:
e4:5b:3b:c5:ac:1a:fc:cc:d6:99:98:50:20:23:3d:
2a:82:3f:fb:55:a6:4a:fe:d9:d0:dc:d9:f1:c0:b2:
d5:13:e7:61:73:20:5d:04:1b:6a:95:dc:6f:22:c5:
d4:a1:d3:58:2a:6c:7e:a1:a8:9b:8d:0a:22:e0:93:
f0:35:54:ea:51:2c:46:07:4b:bc:4b:0e:49:8b:52:
2f:93:79:4f:e0:a6:e1:2b:a3:2b:0a:66:53:12:82:
7e:67:df:97:8d:0e:94:29:27:ba:3c:19:ee:cc:bc:
38:27:8f:6e:ec:5c:51:bc:1d:f3:a6:26:a8:55:69:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AC:9F:C3:D3:09:1E:DF:04:7A:42:A6:70:61:50:67:77:3C:F7:94
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Hqyfw9MJHt8EekKmcGFQZ3c895Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.210.91.0/24
Signature Algorithm: sha256WithRSAEncryption
07:20:60:f5:f7:a4:6b:52:e6:53:b5:aa:49:fc:f9:0a:ae:14:
61:40:5d:5e:a3:2e:bc:23:4f:f2:11:18:60:b1:6f:0e:91:b3:
5b:a6:0a:33:52:3d:d8:44:c7:8c:8b:b0:7e:8f:bc:fc:bd:41:
05:e5:9c:de:c8:5e:8f:91:37:c5:c1:55:d8:a0:f5:37:55:b3:
f0:08:83:f1:c6:4b:85:9c:1c:17:98:4e:e6:3d:22:12:cc:07:
fb:ec:1e:47:5f:a2:23:81:60:ff:36:99:72:a4:77:4d:6b:a3:
8c:69:3a:75:22:e6:4f:60:b3:10:75:be:f7:6f:de:b5:e9:51:
f5:ad:3b:2d:d1:80:3a:14:25:3e:9c:df:d6:9a:5e:56:00:16:
62:19:35:1e:86:26:15:13:9c:0d:ab:1e:7f:bb:c2:cd:2a:a3:
b8:fa:2e:1e:7e:e5:1f:16:7f:b2:eb:91:44:5b:93:e1:57:7f:
3f:47:b6:4f:a5:50:bd:05:d3:15:d5:9c:b0:28:54:a0:8a:b7:
45:04:c3:bf:c3:8f:25:d4:61:5b:a1:a0:a3:6a:b3:59:7d:de:
92:9c:c0:4f:0e:d0:6c:91:be:0c:f0:6d:08:73:0f:c9:da:fb:
87:05:37:0a:0b:ae:02:b8:1f:4d:ce:3a:8d:76:c1:66:53:32:
66:37:e9:d7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVv1SqkdkH7+Im139+S0oBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWFjOWZjM2QzMDkxZWRmMDQ3YTQyYTY3MDYxNTA2Nzc3M2NmNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdzt4L9nCqF9etHAwW8VSxlFmriX
mKbDvqdqqWiIwEgmfgzk7Ddje6ZOGPsbdJmqFebLcn+/MCK6c+A4YJPjsebpj93T
WcrtZPjlYECRXEQ0zRwPXSso4ROUkynXl8wIAp7mjYbw2AW9CVPHPKvbVbkLCYAW
B+Yc3o9IdagTFe7EQ63kB6PkWzvFrBr8zNaZmFAgIz0qgj/7VaZK/tnQ3NnxwLLV
E+dhcyBdBBtqldxvIsXUodNYKmx+oaibjQoi4JPwNVTqUSxGB0u8Sw5Ji1Ivk3lP
4KbhK6MrCmZTEoJ+Z9+XjQ6UKSe6PBnuzLw4J49u7FxRvB3zpiaoVWk69wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFB6sn8PTCR7fBHpCpnBhUGd3PPeUMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL0hxeWZ3OU1KSHQ4RWVrS21jR0ZRWjNjODk1US5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC80lsw
DQYJKoZIhvcNAQELBQADggEBAAcgYPX3pGtS5lO1qkn8+QquFGFAXV6jLrwjT/IR
GGCxbw6Rs1umCjNSPdhEx4yLsH6PvPy9QQXlnN7IXo+RN8XBVdig9TdVs/AIg/HG
S4WcHBeYTuY9IhLMB/vsHkdfoiOBYP82mXKkd01ro4xpOnUi5k9gsxB1vvdv3rXp
UfWtOy3RgDoUJT6c39aaXlYAFmIZNR6GJhUTnA2rHn+7ws0qo7j6Lh5+5R8Wf7Lr
kURbk+FXfz9Htk+lUL0F0xXVnLAoVKCKt0UEw7/DjyXUYVuhoKNqs1l93pKcwE8O
0GyRvgzwbQhzD8na+4cFNwoLrgK4H03OOo12wWZTMmY36dc=
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org