Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/hamgf_kUIK3d6QjiWZyHuAtYhHc.roa
File: hamgf_kUIK3d6QjiWZyHuAtYhHc.roa (raw, json)
Hash identifier: Uen3sPuf5jwmQ/ri/hNmoBjySGmONXQyHT5Cc9nDOcA=
Subject key identifier: 85:A9:A0:7F:F9:14:20:AD:DD:E9:08:E2:59:9C:87:B8:0B:58:84:77
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018C7877A7E2B975840928693CDAF4350B59
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/hamgf_kUIK3d6QjiWZyHuAtYhHc.roa
Signing time: Sun 17 Dec 2023 15:49:16 +0000
ROA not before: Sun 17 Dec 2023 15:49:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197730
IP address blocks: 45.136.184.0/22 maxlen: 24
45.136.185.0/24 maxlen: 24
45.136.186.0/24 maxlen: 24
45.136.187.0/24 maxlen: 24
45.130.181.0/24 maxlen: 24
45.130.183.0/24 maxlen: 24
62.106.75.0/24 maxlen: 24
45.130.182.0/24 maxlen: 24
45.130.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:78:77:a7:e2:b9:75:84:09:28:69:3c:da:f4:35:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 17 15:49:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85a9a07ff91420addde908e2599c87b80b588477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:2c:2b:4f:eb:1f:5c:7c:66:26:87:ff:d7:
cb:d4:5a:64:59:8d:80:d3:ee:03:ef:b6:21:58:dc:
ba:0e:51:e5:a0:8b:d5:5a:a2:68:8a:b8:e2:ee:72:
66:e7:a0:d6:57:1a:78:d4:23:67:d7:67:07:1f:b4:
6f:43:9d:53:b0:9d:db:1b:99:e2:37:40:f7:63:bb:
a0:51:3f:94:94:17:ee:64:e2:9f:e3:3f:4e:82:58:
d0:eb:64:85:8e:aa:e2:0a:73:d5:91:00:a6:c6:18:
bf:bc:61:81:25:58:e1:11:6b:09:59:4e:1d:6b:da:
17:90:4b:ec:a4:08:a3:73:0a:d7:f9:8d:7f:e3:28:
3a:54:e4:3c:8f:8d:cb:eb:d5:9a:34:7f:de:6c:e1:
5e:ce:c2:07:38:47:9a:ac:5a:0b:f3:ae:0b:fd:fa:
a6:6f:32:98:dc:bc:da:27:b4:38:2f:c9:b1:80:40:
7d:bb:97:60:d9:d2:4a:12:dd:dd:3e:41:44:ca:d7:
de:f3:98:ba:c3:dc:02:74:c9:8c:07:27:c3:a9:1c:
e3:a8:e3:ee:2d:22:38:77:57:c2:44:69:df:ab:d8:
05:e4:68:14:41:6e:c7:1a:26:7b:15:d8:45:a0:a8:
49:77:f1:e9:3a:39:0c:b5:d4:93:c6:a1:b6:9f:6a:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A9:A0:7F:F9:14:20:AD:DD:E9:08:E2:59:9C:87:B8:0B:58:84:77
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/hamgf_kUIK3d6QjiWZyHuAtYhHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.180.0/22
45.136.184.0/22
62.106.75.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d6:b8:59:e4:56:fc:0b:9c:d9:65:f5:67:43:9a:a4:d9:98:
2a:c6:75:93:61:29:2e:70:a7:34:74:f5:0c:67:15:cb:16:67:
c8:3c:ce:92:1f:14:99:68:d0:ab:fc:21:ca:ec:d2:db:8d:6c:
38:9d:64:7b:ff:ee:88:9f:33:40:f4:62:fa:06:e8:e5:be:fe:
e0:63:24:f3:66:96:4f:6c:61:55:de:4d:6c:69:13:35:f3:23:
42:2f:9a:7c:33:ee:1d:75:15:f3:f0:bd:2e:ae:b0:ea:2d:dc:
7b:f0:e8:18:32:e0:07:5d:65:5a:c1:b1:a5:c4:a4:27:91:6f:
28:68:3f:66:f6:d1:fa:f8:f5:28:83:e4:cd:e1:1d:92:50:0b:
30:60:bc:9c:31:73:2e:59:e4:e5:bc:f9:70:41:65:f8:91:00:
91:71:63:5e:6d:ee:ce:07:19:c2:ac:a7:01:9f:e3:24:b2:70:
7b:93:b9:65:e9:3c:75:67:9a:25:55:78:83:77:0b:1b:c8:e7:
63:c6:0f:b7:e6:b0:89:25:70:49:65:cb:71:98:15:cd:c9:b2:
ce:70:02:3b:75:33:6f:28:4d:f4:82:30:43:66:36:8e:c6:ca:
f6:da:4c:9c:be:c9:a3:b6:ce:5b:c0:b5:95:d4:00:c7:47:f0:
b6:33:18:8f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYx4d6fiuXWECShpPNr0NQtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjMxMjE3MTU0OTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWE5YTA3ZmY5MTQyMGFkZGRlOTA4ZTI1OTljODdiODBiNTg4NDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEosK0/rH1x8ZiaH/9fL1FpkWY2A
0+4D77YhWNy6DlHloIvVWqJoirji7nJm56DWVxp41CNn12cHH7RvQ51TsJ3bG5ni
N0D3Y7ugUT+UlBfuZOKf4z9OgljQ62SFjqriCnPVkQCmxhi/vGGBJVjhEWsJWU4d
a9oXkEvspAijcwrX+Y1/4yg6VOQ8j43L69WaNH/ebOFezsIHOEearFoL864L/fqm
bzKY3LzaJ7Q4L8mxgEB9u5dg2dJKEt3dPkFEytfe85i6w9wCdMmMByfDqRzjqOPu
LSI4d1fCRGnfq9gF5GgUQW7HGiZ7FdhFoKhJd/HpOjkMtdSTxqG2n2ogRQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIWpoH/5FCCt3ekI4lmch7gLWIR3MB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvaGFtZ2Zfa1VJSzNkNlFqaVdaeUh1QXRZaEhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYK0AwQC
LYi4AwQAPmpLMA0GCSqGSIb3DQEBCwUAA4IBAQBa1rhZ5Fb8C5zZZfVnQ5qk2Zgq
xnWTYSkucKc0dPUMZxXLFmfIPM6SHxSZaNCr/CHK7NLbjWw4nWR7/+6InzNA9GL6
Bujlvv7gYyTzZpZPbGFV3k1saRM18yNCL5p8M+4ddRXz8L0urrDqLdx78OgYMuAH
XWVawbGlxKQnkW8oaD9m9tH6+PUog+TN4R2SUAswYLycMXMuWeTlvPlwQWX4kQCR
cWNebe7OBxnCrKcBn+MksnB7k7ll6Tx1Z5olVXiDdwsbyOdjxg+35rCJJXBJZctx
mBXNybLOcAI7dTNvKE30gjBDZjaOxsr22kycvsmjts5bwLWV1ADHR/C2MxiP
-----END CERTIFICATE-----
Generated at Fri Dec 22 01:45:18 2023 by rpki-client on console-fra.rpki-client.org