Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/hHKZEZvMjVwMo_njcE17LTA8Ne8.roa
File: hHKZEZvMjVwMo_njcE17LTA8Ne8.roa (raw, json)
Hash identifier: jCk/0AuOzLsv4C13uKpuFH2PW2AS1fYhSsRxccDDKPM=
Subject key identifier: 84:72:99:11:9B:CC:8D:5C:0C:A3:F9:E3:70:4D:7B:2D:30:3C:35:EF
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 01856EA6A00F349FC8152C7CFDEDF5EAB810
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/hHKZEZvMjVwMo_njcE17LTA8Ne8.roa
Signing time: Sun 01 Jan 2023 18:44:51 +0000
ROA not before: Sun 01 Jan 2023 18:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21263
IP address blocks: 45.10.98.0/23 maxlen: 24
5.104.144.0/21 maxlen: 24
2a01:76c0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:a0:0f:34:9f:c8:15:2c:7c:fd:ed:f5:ea:b8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: Jan 1 18:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=847299119bcc8d5c0ca3f9e3704d7b2d303c35ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:05:fd:1e:ad:b2:bb:f9:cf:11:41:02:eb:
c4:db:50:93:28:a5:26:a4:19:30:b8:c7:40:ed:b5:
a1:cf:70:26:b8:8e:40:30:bd:e9:f8:1a:36:34:d4:
64:98:54:3f:b6:99:13:d6:e9:38:8f:e5:c4:67:59:
45:39:2e:db:04:f0:e6:e0:79:14:80:2c:be:dc:a9:
87:76:0b:95:78:f8:dc:ec:ff:2b:3c:32:af:4d:df:
7a:1d:e7:a8:65:33:f4:49:df:f3:19:dd:8a:86:d1:
23:ae:a9:b8:a6:12:22:6a:af:d7:94:4c:b8:62:32:
bb:56:68:96:fa:02:5b:b6:e1:f5:8e:0c:b5:d8:c5:
f0:ab:a2:72:0c:50:c6:c0:86:93:59:ff:1c:18:ad:
cd:ac:89:f5:72:2c:36:4a:7d:81:cb:df:98:b1:89:
23:f4:5e:26:1f:19:35:c0:0a:86:fd:4c:89:fe:3e:
42:da:33:f1:a5:aa:fe:99:8a:a7:fe:4b:db:f6:2b:
7f:61:4e:57:35:2b:9f:0e:d2:cf:2e:a0:cd:cc:fc:
3d:76:f3:d4:79:7c:c8:70:8c:8a:f3:a1:f9:23:f9:
ee:db:70:6b:50:45:bc:03:2c:03:d8:21:92:5f:0c:
89:47:10:f8:c8:9d:93:e5:d2:4c:eb:dd:7d:3d:d0:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:72:99:11:9B:CC:8D:5C:0C:A3:F9:E3:70:4D:7B:2D:30:3C:35:EF
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/hHKZEZvMjVwMo_njcE17LTA8Ne8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.144.0/21
45.10.98.0/23
IPv6:
2a01:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:4c:0d:8c:ae:98:3d:ce:cf:1b:b3:35:9a:78:8c:66:04:5e:
a4:1c:94:0e:da:53:82:15:ac:f0:5e:2e:bb:55:08:14:8b:f0:
bf:f4:fc:0d:60:4f:14:10:5e:ae:9e:b8:f9:8e:f1:fd:fd:91:
5c:04:f6:14:e8:4e:a5:2e:12:13:36:c1:cd:df:41:08:2f:b2:
6e:cc:6a:46:7e:13:20:35:43:92:b9:8b:8c:46:6f:5f:a7:47:
47:b9:26:0d:73:23:e8:cb:2e:a2:93:0b:5a:11:46:ea:33:f8:
02:77:60:8e:f2:11:da:b6:81:76:2a:cf:97:e3:32:3b:f8:03:
01:c1:9d:6b:67:ea:06:7c:88:25:14:00:9a:8d:4f:40:32:ef:
12:bc:e4:7a:46:04:50:58:0c:c8:37:2c:07:ce:91:c1:37:bd:
71:71:7c:11:9a:10:39:d3:8c:20:45:b9:18:ad:a8:46:81:81:
91:b6:da:f9:93:ad:81:07:fc:48:ca:3c:a8:13:dd:49:ea:1c:
6a:0c:8b:a4:76:46:12:ac:7a:02:b5:6a:dd:d3:51:30:43:33:
f6:3b:0b:05:75:b8:f1:dd:d6:ea:c1:7a:e7:8e:21:cb:1f:86:
9d:61:e7:3a:b5:6c:30:43:25:a5:0a:cd:52:55:a8:d5:3e:7d:
10:de:99:28
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVupqAPNJ/IFSx8/e316rgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDU5ZjEyMWZjN2VmYTBjMTBiN2RkNjE0ZDk1YTg3NTZk
NTM2MDYwHhcNMjMwMTAxMTg0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDcyOTkxMTliY2M4ZDVjMGNhM2Y5ZTM3MDRkN2IyZDMwM2MzNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfUF/R6tsrv5zxFBAuvE21CTKKUm
pBkwuMdA7bWhz3AmuI5AML3p+Bo2NNRkmFQ/tpkT1uk4j+XEZ1lFOS7bBPDm4HkU
gCy+3KmHdguVePjc7P8rPDKvTd96HeeoZTP0Sd/zGd2KhtEjrqm4phIiaq/XlEy4
YjK7VmiW+gJbtuH1jgy12MXwq6JyDFDGwIaTWf8cGK3NrIn1ciw2Sn2By9+YsYkj
9F4mHxk1wAqG/UyJ/j5C2jPxpar+mYqn/kvb9it/YU5XNSufDtLPLqDNzPw9dvPU
eXzIcIyK86H5I/nu23BrUEW8AywD2CGSXwyJRxD4yJ2T5dJM6919PdCUAwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIRymRGbzI1cDKP543BNey0wPDXvMB8GA1UdIwQY
MBaAFPDVnxIfx++gwQt91hTZWodW1TYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjct
NmVlZmU1YjMzNWFhLzEvaEhLWkVadk1qVndNb19uamNFMTdMVEE4TmU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjctNmVlZmU1YjMzNWFh
LzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBWiQAwQB
LQpiMA0EAgACMAcDBQMqAXbAMA0GCSqGSIb3DQEBCwUAA4IBAQAfTA2Mrpg9zs8b
szWaeIxmBF6kHJQO2lOCFazwXi67VQgUi/C/9PwNYE8UEF6unrj5jvH9/ZFcBPYU
6E6lLhITNsHN30EIL7JuzGpGfhMgNUOSuYuMRm9fp0dHuSYNcyPoyy6ikwtaEUbq
M/gCd2CO8hHatoF2Ks+X4zI7+AMBwZ1rZ+oGfIglFACajU9AMu8SvOR6RgRQWAzI
NywHzpHBN71xcXwRmhA504wgRbkYrahGgYGRttr5k62BB/xIyjyoE91J6hxqDIuk
dkYSrHoCtWrd01EwQzP2OwsFdbjx3dbqwXrnjiHLH4adYec6tWwwQyWlCs1SVajV
Pn0Q3pko
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:57 2024 by rpki-client on console-fra.rpki-client.org