Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/kHbhooux3tXZXLZQ7KZxU95IZSA.roa
File: kHbhooux3tXZXLZQ7KZxU95IZSA.roa (raw, json)
Hash identifier: vWb4ge73LkImM//0Sap6LeQhi4sIBdAwMdkwBD5idAM=
Subject key identifier: 90:76:E1:A2:8B:B1:DE:D5:D9:5C:B6:50:EC:A6:71:53:DE:48:65:20
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 018BFE3BEB0C9B627C182478ABB024ABFCF6
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/kHbhooux3tXZXLZQ7KZxU95IZSA.roa
Signing time: Thu 23 Nov 2023 22:10:21 +0000
ROA not before: Thu 23 Nov 2023 22:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 45.150.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:3b:eb:0c:9b:62:7c:18:24:78:ab:b0:24:ab:fc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Nov 23 22:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9076e1a28bb1ded5d95cb650eca67153de486520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:48:4c:ab:1c:e6:38:1d:6c:db:7e:d3:40:
68:e7:26:c4:5e:55:f4:7b:0b:61:dc:26:fa:af:2a:
8f:e6:89:ff:1f:57:4d:8b:3d:2e:29:01:72:ad:e7:
cc:22:10:0d:89:e3:e0:5e:34:31:7f:eb:51:22:77:
d0:37:ef:15:0f:b5:b3:65:7a:82:1c:cc:1e:d9:6c:
92:fb:67:5b:5b:5a:f6:49:fe:18:cc:a8:ef:a2:0d:
bd:c5:d1:dc:47:15:c9:cd:9d:45:3f:a6:51:e4:3a:
0f:1e:ee:40:59:30:43:98:0a:79:c5:52:03:ea:59:
ec:87:8c:77:6a:a2:be:ab:5e:bc:74:ff:77:47:fd:
e5:c9:44:74:c4:95:27:ea:3f:9d:ec:b9:bf:5d:32:
df:4e:dc:c8:95:7d:02:bd:a0:8c:25:81:53:68:99:
6a:57:31:e2:42:77:d7:f4:5f:59:0a:61:a9:dd:e2:
58:15:fd:f8:02:c4:bd:5e:5a:14:8a:41:65:ec:f6:
d2:2a:ef:59:f8:3b:d3:b7:52:45:fb:06:31:1d:52:
4d:bf:f8:5b:b7:80:a8:e9:37:f6:cc:d6:ad:34:9a:
30:68:89:43:a4:8e:86:20:25:f8:d5:bd:28:d1:95:
42:1a:c0:0c:46:58:cf:80:f6:10:99:51:47:b6:b0:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:76:E1:A2:8B:B1:DE:D5:D9:5C:B6:50:EC:A6:71:53:DE:48:65:20
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/kHbhooux3tXZXLZQ7KZxU95IZSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.6.0/24
Signature Algorithm: sha256WithRSAEncryption
19:76:ee:a3:e4:e4:fc:1a:31:69:51:3f:93:c9:02:3a:17:0a:
c0:0f:5a:61:74:00:7c:a9:e1:45:1a:71:1a:42:8c:e4:e4:b9:
47:11:7f:5a:90:aa:3a:14:fb:16:1f:96:ae:ac:dd:28:7a:0e:
84:c3:5a:8a:44:36:bf:d4:1e:50:eb:ea:1a:64:99:63:09:e2:
7a:b1:c6:06:4e:9c:00:96:2c:24:3d:be:fb:0c:93:f4:c5:5e:
86:35:f4:82:af:ea:01:dc:9e:94:78:b7:61:76:20:ee:9e:c4:
be:8c:ca:c9:b7:e0:79:71:10:67:6c:2d:ff:b5:28:03:4f:57:
d5:88:3f:5f:18:3c:d6:82:7f:92:90:b0:67:a2:ab:12:18:8e:
13:3d:58:11:21:ba:a7:f6:6e:a7:b8:05:3e:b7:e1:67:ba:35:
d3:72:1d:fb:ae:09:50:6d:bb:a7:3e:4d:ee:f0:66:d0:cc:ec:
31:27:ab:07:2b:7d:9e:f4:35:30:c6:fe:d8:4c:65:c2:5e:01:
02:85:d2:9d:0e:fe:41:9a:1f:67:f9:21:4d:0c:f9:37:3c:3d:
d2:1c:3b:1d:a3:b8:6f:e3:f8:c9:81:77:3e:8e:f1:fc:e2:22:
3b:9d:09:7c:5d:d2:74:fd:fe:8b:cb:43:68:ac:83:c3:50:69:
d8:fc:9b:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYv+O+sMm2J8GCR4q7Akq/z2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZDBjNWIzZmE2YzI4ODg2MGNjYjZkOTAyMDBjYmI4ZTU3
ZGI3ZjcwHhcNMjMxMTIzMjIxMDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDc2ZTFhMjhiYjFkZWQ1ZDk1Y2I2NTBlY2E2NzE1M2RlNDg2NTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1FITKsc5jgdbNt+00Bo5ybEXlX0
ewth3Cb6ryqP5on/H1dNiz0uKQFyrefMIhANiePgXjQxf+tRInfQN+8VD7WzZXqC
HMwe2WyS+2dbW1r2Sf4YzKjvog29xdHcRxXJzZ1FP6ZR5DoPHu5AWTBDmAp5xVID
6lnsh4x3aqK+q168dP93R/3lyUR0xJUn6j+d7Lm/XTLfTtzIlX0CvaCMJYFTaJlq
VzHiQnfX9F9ZCmGp3eJYFf34AsS9XloUikFl7PbSKu9Z+DvTt1JF+wYxHVJNv/hb
t4Co6Tf2zNatNJowaIlDpI6GICX41b0o0ZVCGsAMRljPgPYQmVFHtrAa8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJB24aKLsd7V2Vy2UOymcVPeSGUgMB8GA1UdIwQY
MBaAFGvQxbP6bCiIYMy22QIAy7jlfbf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTlERnNfcHNLSWhnekxiWkFnREx1T1Y5dF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iNGY1ODQtZjI1Ni00Y2FiLWFkYmIt
YzQ2MjBmYWIxZjE5LzEva0hiaG9vdXgzdFhaWExaUTdLWnhVOTVJWlNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iNGY1ODQtZjI1Ni00Y2FiLWFkYmItYzQ2MjBmYWIxZjE5
LzEvYTlERnNfcHNLSWhnekxiWkFnREx1T1Y5dF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZYGMA0G
CSqGSIb3DQEBCwUAA4IBAQAZdu6j5OT8GjFpUT+TyQI6FwrAD1phdAB8qeFFGnEa
Qozk5LlHEX9akKo6FPsWH5aurN0oeg6Ew1qKRDa/1B5Q6+oaZJljCeJ6scYGTpwA
liwkPb77DJP0xV6GNfSCr+oB3J6UeLdhdiDunsS+jMrJt+B5cRBnbC3/tSgDT1fV
iD9fGDzWgn+SkLBnoqsSGI4TPVgRIbqn9m6nuAU+t+FnujXTch37rglQbbunPk3u
8GbQzOwxJ6sHK32e9DUwxv7YTGXCXgEChdKdDv5Bmh9n+SFNDPk3PD3SHDsdo7hv
4/jJgXc+jvH84iI7nQl8XdJ0/f6Ly0NorIPDUGnY/Jvy
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:09 2024 by rpki-client on console-fra.rpki-client.org