Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/HKUP1hyWHK0XdMfFlHrzrkt2n3Q.roa
File: HKUP1hyWHK0XdMfFlHrzrkt2n3Q.roa (raw, json)
Hash identifier: 9Cr4yELyuzRR16aAzOMkWBLRmIYaq1uVzT3vUhNCfzI=
Subject key identifier: 1C:A5:0F:D6:1C:96:1C:AD:17:74:C7:C5:94:7A:F3:AE:4B:76:9F:74
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 018C5EDAB165D668FFFC4D5534E6A5EC5F7F
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/HKUP1hyWHK0XdMfFlHrzrkt2n3Q.roa
Signing time: Tue 12 Dec 2023 16:27:19 +0000
ROA not before: Tue 12 Dec 2023 16:27:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14670
IP address blocks: 192.250.225.0/24 maxlen: 24
65.181.111.0/24 maxlen: 24
199.103.58.0/24 maxlen: 24
192.243.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:da:b1:65:d6:68:ff:fc:4d:55:34:e6:a5:ec:5f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Dec 12 16:27:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ca50fd61c961cad1774c7c5947af3ae4b769f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:09:80:14:0d:c8:5d:24:3f:7b:24:a5:fe:
1a:78:7d:ae:62:b7:82:74:38:46:3c:cc:45:da:28:
f0:89:4c:67:f5:c8:25:86:00:c7:b1:86:ef:46:96:
ba:da:ce:bb:c6:c5:53:8c:b2:03:20:31:18:50:90:
88:19:61:7a:74:bf:2e:6b:f3:15:70:fa:75:5d:3e:
22:df:d9:6b:0e:5b:cc:f5:92:f9:e8:c1:70:95:98:
c3:0b:ea:87:6b:e5:ea:eb:bf:41:01:a1:1e:77:1b:
bf:ba:5c:8e:9f:fc:35:1a:af:8f:d0:fb:ca:f8:a4:
9c:32:4b:8d:6e:6b:09:06:8f:94:3d:56:2e:96:f2:
61:aa:14:97:f3:32:6e:ed:85:5c:18:31:46:38:64:
d7:73:5a:47:6d:b9:d4:94:b7:a1:dd:41:05:5e:64:
6f:e1:6e:7c:54:a8:b4:cf:ab:bf:02:14:bc:5a:b8:
82:ec:c6:a7:1c:c7:5f:e4:69:ce:47:25:58:6b:04:
a1:ae:9e:38:04:12:9c:4b:7e:f2:ae:96:b7:23:51:
0a:78:1b:db:29:a8:10:3f:61:32:49:04:70:a4:fa:
43:8d:94:9a:ee:76:76:40:d5:35:54:c0:d0:f7:b1:
e5:5f:c6:4c:df:f4:d4:85:cc:02:e1:8a:e7:98:1e:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A5:0F:D6:1C:96:1C:AD:17:74:C7:C5:94:7A:F3:AE:4B:76:9F:74
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/HKUP1hyWHK0XdMfFlHrzrkt2n3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.181.111.0/24
192.243.110.0/24
192.250.225.0/24
199.103.58.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1c:19:47:b0:13:a7:24:be:00:30:b0:5c:2e:88:5b:e6:b6:
24:fe:72:ec:fe:5a:b1:0a:39:e4:18:77:b0:37:52:09:2e:3f:
f9:42:09:e2:a1:5b:26:a2:48:f4:a6:1a:a4:76:90:a9:23:bd:
bd:10:9a:ec:96:63:88:fc:aa:62:40:9e:07:e2:52:57:f1:60:
9b:61:21:03:2c:2c:3a:78:11:3c:ef:49:bb:c2:4f:f2:48:12:
1f:61:06:26:6e:84:a0:cd:41:18:17:6f:97:2f:d0:28:c1:3e:
de:fe:22:cb:a8:74:df:28:2c:88:2e:72:a4:8b:6a:be:5a:17:
36:69:d3:ea:87:53:a3:e2:28:1c:af:53:46:c6:0c:01:be:55:
34:1a:42:e3:a3:9d:61:17:4b:51:60:53:6a:31:ae:05:e0:77:
47:33:19:5a:1e:47:1e:ea:ae:17:09:fe:5f:61:c3:73:d5:d3:
31:4c:0d:f7:6c:2f:6f:52:10:20:7a:bc:95:03:3a:f0:59:18:
1f:5a:71:11:50:83:89:38:28:31:4d:a7:8c:c9:34:54:c9:9d:
a0:73:39:ac:a6:79:24:d8:96:73:3a:ef:c2:7a:29:75:4b:70:
1b:c0:5c:7e:18:10:cd:43:93:fc:59:9c:83:49:73:6c:27:a4:
55:13:fd:c4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYxe2rFl1mj//E1VNOal7F9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjMxMjEyMTYyNzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2E1MGZkNjFjOTYxY2FkMTc3NGM3YzU5NDdhZjNhZTRiNzY5Zjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4UJgBQNyF0kP3skpf4aeH2uYreC
dDhGPMxF2ijwiUxn9cglhgDHsYbvRpa62s67xsVTjLIDIDEYUJCIGWF6dL8ua/MV
cPp1XT4i39lrDlvM9ZL56MFwlZjDC+qHa+Xq679BAaEedxu/ulyOn/w1Gq+P0PvK
+KScMkuNbmsJBo+UPVYulvJhqhSX8zJu7YVcGDFGOGTXc1pHbbnUlLeh3UEFXmRv
4W58VKi0z6u/AhS8WriC7ManHMdf5GnORyVYawShrp44BBKcS37yrpa3I1EKeBvb
KagQP2EySQRwpPpDjZSa7nZ2QNU1VMDQ97HlX8ZM3/TUhcwC4YrnmB4SLQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBylD9YclhytF3THxZR6865Ldp90MB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvSEtVUDFoeVdISzBYZE1mRmxIcnpya3QybjNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQbVvAwQA
wPNuAwQAwPrhAwQAx2c6MA0GCSqGSIb3DQEBCwUAA4IBAQBAHBlHsBOnJL4AMLBc
Lohb5rYk/nLs/lqxCjnkGHewN1IJLj/5QgnioVsmokj0phqkdpCpI729EJrslmOI
/KpiQJ4H4lJX8WCbYSEDLCw6eBE870m7wk/ySBIfYQYmboSgzUEYF2+XL9AowT7e
/iLLqHTfKCyILnKki2q+Whc2adPqh1Oj4igcr1NGxgwBvlU0GkLjo51hF0tRYFNq
Ma4F4HdHMxlaHkce6q4XCf5fYcNz1dMxTA33bC9vUhAgeryVAzrwWRgfWnERUIOJ
OCgxTaeMyTRUyZ2gczmspnkk2JZzOu/Ceil1S3AbwFx+GBDNQ5P8WZyDSXNsJ6RV
E/3E
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:27 2024 by rpki-client on console-ams.rpki-client.org