Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/HkXc-_bvKIDMiEcl3sTT-BZ5jLE.roa
File: HkXc-_bvKIDMiEcl3sTT-BZ5jLE.roa (raw, json)
Hash identifier: 9Yzeslrvd3yRCIS8iPi7cod3HtvBVB2+9KjK+CHU2iA=
Subject key identifier: 1E:45:DC:FB:F6:EF:28:80:CC:88:47:25:DE:C4:D3:F8:16:79:8C:B1
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 01904BA490D23BC1D529A00CF0960ABB655A
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/HkXc-_bvKIDMiEcl3sTT-BZ5jLE.roa
Signing time: Mon 24 Jun 2024 19:06:34 +0000
ROA not before: Mon 24 Jun 2024 19:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 2a0e:4580::/29 maxlen: 29
2a11:1380::/29 maxlen: 29
2a11:15c0::/29 maxlen: 29
2a11:34c0::/29 maxlen: 29
2a12:2740::/29 maxlen: 29
2a12:3740::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 16 Aug 2024 14:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4b:a4:90:d2:3b:c1:d5:29:a0:0c:f0:96:0a:bb:65:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Jun 24 19:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e45dcfbf6ef2880cc884725dec4d3f816798cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:ac:2e:39:f2:ce:eb:6c:c3:3d:c6:2e:20:
f9:fb:51:5e:aa:52:b4:a9:de:b9:a5:7b:69:d5:68:
1a:99:25:b7:95:1e:df:cd:e1:29:c1:66:95:c0:be:
eb:67:d3:02:da:94:dc:d9:8e:fd:c4:ab:c7:b2:5e:
6c:88:42:25:12:81:84:69:68:44:0e:5a:d0:68:cf:
14:fd:12:4e:e2:1a:9d:ef:67:87:88:3e:f7:ba:8c:
61:9f:2b:6c:9d:af:ab:af:bf:ef:e4:b5:eb:f8:7e:
b3:f7:4a:cf:1b:ce:38:24:0b:91:f0:f2:05:44:90:
ff:76:8c:53:38:04:69:4b:1d:f1:a2:93:7a:e4:17:
0b:1b:d7:42:01:1d:aa:1f:5e:24:fd:13:1e:e4:48:
33:03:34:cc:bf:20:15:5d:49:f1:fd:6b:63:8f:1d:
4f:39:76:a4:01:e8:b7:08:9e:b4:45:f0:d7:2f:09:
60:79:fc:5e:2e:94:b3:f0:c3:b3:eb:37:7d:18:8e:
cd:69:2b:8a:bf:f0:3d:12:d4:d1:5e:84:61:53:5d:
6d:24:3b:7d:4f:67:46:8b:7a:19:cb:b0:cf:a5:2c:
b3:9f:fd:41:fc:9c:d5:66:64:58:9d:72:4b:ca:8f:
5c:a5:24:05:1e:80:a8:ab:fb:c0:c9:bd:59:dc:f7:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:45:DC:FB:F6:EF:28:80:CC:88:47:25:DE:C4:D3:F8:16:79:8C:B1
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/HkXc-_bvKIDMiEcl3sTT-BZ5jLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4580::/29
2a11:1380::/29
2a11:15c0::/29
2a11:34c0::/29
2a12:2740::/29
2a12:3740::/29
Signature Algorithm: sha256WithRSAEncryption
0f:cb:de:4e:f4:ef:f4:76:b7:07:85:d9:99:8e:34:ce:a3:97:
84:83:b5:40:58:59:1e:6e:d1:67:6b:29:ec:1c:42:9e:10:7c:
a2:6d:e9:17:fc:d6:fd:ba:58:84:a0:9d:79:15:3c:b7:e9:46:
5b:3a:fe:53:25:52:9d:3e:15:af:eb:73:7b:9d:a9:a9:ed:7a:
b3:e7:18:12:fe:4c:93:71:89:71:8c:fa:cb:b7:ec:01:9d:b3:
43:99:87:f7:40:15:60:07:13:96:86:35:74:b7:aa:91:82:44:
ff:0b:96:b1:ab:69:09:3b:69:fe:b3:b9:15:e9:68:e5:d8:80:
b3:c1:71:15:37:bb:d0:d1:31:9c:83:12:d0:6d:61:f0:d1:63:
bc:04:5f:68:a2:ff:11:f1:44:cd:48:04:e8:f9:7e:47:81:1f:
0a:f9:e2:22:a5:1e:7b:1c:5b:56:43:f8:4b:89:9a:d5:4f:32:
64:e4:c8:b7:78:be:f4:db:91:e4:45:f5:7f:85:dc:03:fb:63:
bc:e5:79:3c:5c:3b:08:8d:2b:8a:56:e3:bf:09:a6:a3:df:e5:
63:e6:53:b9:98:39:e6:b1:4d:0d:92:ee:55:15:cc:a1:e4:8e:
7c:32:44:73:7c:f6:98:72:0a:b4:af:c4:08:15:ce:0c:70:56:
a9:fa:48:60
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZBLpJDSO8HVKaAM8JYKu2VaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMGIwNTI1MTM3ODk5NGNmYTgwODhkMjNiNmVlZWQ0ZTll
NmFiMDgwHhcNMjQwNjI0MTkwNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTQ1ZGNmYmY2ZWYyODgwY2M4ODQ3MjVkZWM0ZDNmODE2Nzk4Y2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLqsLjnyzutswz3GLiD5+1FeqlK0
qd65pXtp1WgamSW3lR7fzeEpwWaVwL7rZ9MC2pTc2Y79xKvHsl5siEIlEoGEaWhE
DlrQaM8U/RJO4hqd72eHiD73uoxhnytsna+rr7/v5LXr+H6z90rPG844JAuR8PIF
RJD/doxTOARpSx3xopN65BcLG9dCAR2qH14k/RMe5EgzAzTMvyAVXUnx/Wtjjx1P
OXakAei3CJ60RfDXLwlgefxeLpSz8MOz6zd9GI7NaSuKv/A9EtTRXoRhU11tJDt9
T2dGi3oZy7DPpSyzn/1B/JzVZmRYnXJLyo9cpSQFHoCoq/vAyb1Z3PegrQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFB5F3Pv27yiAzIhHJd7E0/gWeYyxMB8GA1UdIwQY
MBaAFDELBSUTeJlM+oCI0jtu7tTp5qsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVFzRkpSTjRtVXo2Z0lqU08yN3UxT25tcXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NzE0ODYtYmVlMy00MjRhLWIzNDEt
N2NmZGYyZGY2NjMyLzEvSGtYYy1fYnZLSURNaUVjbDNzVFQtQlo1akxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC83NzE0ODYtYmVlMy00MjRhLWIzNDEtN2NmZGYyZGY2NjMy
LzEvTVFzRkpSTjRtVXo2Z0lqU08yN3UxT25tcXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUDKg5FgAMF
AyoRE4ADBQMqERXAAwUDKhE0wAMFAyoSJ0ADBQMqEjdAMA0GCSqGSIb3DQEBCwUA
A4IBAQAPy95O9O/0drcHhdmZjjTOo5eEg7VAWFkebtFnaynsHEKeEHyibekX/Nb9
uliEoJ15FTy36UZbOv5TJVKdPhWv63N7namp7Xqz5xgS/kyTcYlxjPrLt+wBnbND
mYf3QBVgBxOWhjV0t6qRgkT/C5axq2kJO2n+s7kV6Wjl2ICzwXEVN7vQ0TGcgxLQ
bWHw0WO8BF9oov8R8UTNSATo+X5HgR8K+eIipR57HFtWQ/hLiZrVTzJk5Mi3eL70
25HkRfV/hdwD+2O85Xk8XDsIjSuKVuO/Caaj3+Vj5lO5mDnmsU0Nku5VFcyh5I58
MkRzfPaYcgq0r8QIFc4McFap+khg
-----END CERTIFICATE-----
Generated at Fri Aug 16 18:53:13 2024 by rpki-client on console-ams.rpki-client.org