Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/hSCECqmVs1QbZ4buv_dqqlGUqKY.roa
File: hSCECqmVs1QbZ4buv_dqqlGUqKY.roa (raw, json)
Hash identifier: VMWBmrjDRsgKObbLAUmu6t6iy+QDy30NrewJJEexy7I=
Subject key identifier: 85:20:84:0A:A9:95:B3:54:1B:67:86:EE:BF:F7:6A:AA:51:94:A8:A6
Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial: 0187B369B86F10E44C2ECC394A834D1EBCA0
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/hSCECqmVs1QbZ4buv_dqqlGUqKY.roa
Signing time: Mon 24 Apr 2023 13:17:42 +0000
ROA not before: Mon 24 Apr 2023 13:17:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 80.67.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:69:b8:6f:10:e4:4c:2e:cc:39:4a:83:4d:1e:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Validity
Not Before: Apr 24 13:17:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8520840aa995b3541b6786eebff76aaa5194a8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:36:64:f4:fd:ff:94:94:b0:93:47:ab:56:
78:c8:a4:aa:aa:92:c9:3d:f7:e1:c8:7e:53:9f:95:
2b:34:06:aa:4b:4a:f3:90:eb:e5:2c:10:c3:80:49:
04:17:60:6a:0a:d7:8b:1a:0e:74:09:46:b7:79:9d:
3e:21:aa:0a:62:7f:8d:35:74:15:b2:7d:90:39:d7:
a3:3c:e3:3f:fd:07:88:ee:64:8e:42:f0:30:b3:ca:
d8:96:e2:13:29:6c:d1:bf:00:a0:41:b0:9e:21:d9:
52:bd:31:b8:aa:93:c3:1e:fb:23:5b:32:2f:55:72:
be:33:33:17:11:59:77:e1:fe:03:7b:15:37:c5:c9:
5c:ba:c3:bc:88:33:a1:c7:67:e9:14:66:39:fb:06:
96:97:32:28:60:f2:5d:30:4d:1c:3b:f6:ea:80:4b:
56:97:38:2e:4c:a3:39:17:a8:c9:04:2f:fd:90:d6:
55:b6:63:9b:b2:5b:92:f8:83:a7:cb:c9:9f:41:f5:
1f:07:7a:89:6b:af:ba:fc:ba:e9:a8:ec:d0:44:4f:
c0:8d:02:bd:96:43:8d:8a:69:a8:70:b9:3a:72:64:
f2:f8:71:21:ea:e4:20:8a:de:b3:b5:66:14:59:35:
14:54:21:b2:a1:93:00:73:bf:43:e4:b3:c4:30:75:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:20:84:0A:A9:95:B3:54:1B:67:86:EE:BF:F7:6A:AA:51:94:A8:A6
X509v3 Authority Key Identifier:
keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/hSCECqmVs1QbZ4buv_dqqlGUqKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
24:09:a6:4a:53:82:ea:73:d8:7d:bf:94:35:fb:07:7f:42:8a:
63:b3:b5:02:c4:eb:c4:3d:b1:80:30:49:36:53:13:0b:cd:00:
7b:47:f4:9f:02:d8:99:3b:c3:95:26:46:4d:df:c6:16:cc:99:
23:ea:a0:77:d4:57:86:69:09:d9:5a:84:c4:15:40:28:e4:95:
d2:76:17:82:d7:16:e3:f1:6d:be:ef:cd:6e:4d:4e:aa:d0:63:
3c:ce:5e:1f:ec:30:2a:0b:58:ac:31:d8:02:94:19:36:8b:1a:
93:98:b0:60:03:e0:01:6e:4c:61:6f:fd:0a:ef:e1:13:66:d2:
79:50:3e:75:1a:9e:95:e4:5c:36:e8:f5:d8:50:97:6e:6b:2f:
b5:65:96:fb:8e:e4:a4:ab:4e:01:1d:69:e3:74:4b:cb:23:1e:
11:e5:15:ec:94:32:9f:be:da:e6:92:37:76:ae:34:9a:04:dc:
c8:93:d1:84:61:68:00:4d:1f:41:62:92:85:9d:b6:4a:ad:f7:
d1:65:f4:6d:ac:ae:7e:9b:81:5b:bc:48:5f:b0:88:c8:d7:a1:
8c:28:3d:00:ee:74:31:cd:89:69:ea:48:e5:93:1c:32:a7:22:
32:79:8e:a6:6b:ca:b5:12:4a:16:36:74:b3:92:e3:b2:58:63:
f3:7c:ce:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYezabhvEORMLsw5SoNNHrygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MTcwMmQyYzI5MTk1ZmEwYTdkYjExZWU0NjVmMGMwNTQ1
ZDE3MDkwHhcNMjMwNDI0MTMxNzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTIwODQwYWE5OTViMzU0MWI2Nzg2ZWViZmY3NmFhYTUxOTRhOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFo2ZPT9/5SUsJNHq1Z4yKSqqpLJ
PffhyH5Tn5UrNAaqS0rzkOvlLBDDgEkEF2BqCteLGg50CUa3eZ0+IaoKYn+NNXQV
sn2QOdejPOM//QeI7mSOQvAws8rYluITKWzRvwCgQbCeIdlSvTG4qpPDHvsjWzIv
VXK+MzMXEVl34f4DexU3xclcusO8iDOhx2fpFGY5+waWlzIoYPJdME0cO/bqgEtW
lzguTKM5F6jJBC/9kNZVtmObsluS+IOny8mfQfUfB3qJa6+6/LrpqOzQRE/AjQK9
lkONimmocLk6cmTy+HEh6uQgit6ztWYUWTUUVCGyoZMAc79D5LPEMHW84wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIUghAqplbNUG2eG7r/3aqpRlKimMB8GA1UdIwQY
MBaAFAYXAtLCkZX6Cn2xHuRl8MBUXRcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgt
NGM1MWM2Nzk3YzFmLzEvaFNDRUNxbVZzMVFiWjRidXZfZHFxbEdVcUtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgtNGM1MWM2Nzk3YzFm
LzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUEOQMA0G
CSqGSIb3DQEBCwUAA4IBAQAkCaZKU4Lqc9h9v5Q1+wd/Qopjs7UCxOvEPbGAMEk2
UxMLzQB7R/SfAtiZO8OVJkZN38YWzJkj6qB31FeGaQnZWoTEFUAo5JXSdheC1xbj
8W2+781uTU6q0GM8zl4f7DAqC1isMdgClBk2ixqTmLBgA+ABbkxhb/0K7+ETZtJ5
UD51Gp6V5Fw26PXYUJduay+1ZZb7juSkq04BHWnjdEvLIx4R5RXslDKfvtrmkjd2
rjSaBNzIk9GEYWgATR9BYpKFnbZKrffRZfRtrK5+m4FbvEhfsIjI16GMKD0A7nQx
zYlp6kjlkxwypyIyeY6ma8q1EkoWNnSzkuOyWGPzfM7G
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:32 2024 by rpki-client on console-ams.rpki-client.org