Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Hl0gErAgXfH8YFM8dUrZ9_-lxMc.roa
File: Hl0gErAgXfH8YFM8dUrZ9_-lxMc.roa (raw, json)
Hash identifier: Ony3aFOhMpoodl0HGYHyIKP7JkXQqZ1QC7CVUYjE9Jw=
Subject key identifier: 1E:5D:20:12:B0:20:5D:F1:FC:60:53:3C:75:4A:D9:F7:FF:A5:C4:C7
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0189E2EE460848232DDDDE12C5E5192A4A09
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Hl0gErAgXfH8YFM8dUrZ9_-lxMc.roa
Signing time: Fri 11 Aug 2023 04:50:13 +0000
ROA not before: Fri 11 Aug 2023 04:50:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
81.28.252.0/24 maxlen: 24
91.238.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Aug 2023 17:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e2:ee:46:08:48:23:2d:dd:de:12:c5:e5:19:2a:4a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Aug 11 04:50:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e5d2012b0205df1fc60533c754ad9f7ffa5c4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:e7:50:b2:90:77:c2:0e:81:8b:48:7b:da:
76:bc:20:21:95:ce:ac:f7:6d:ac:98:d5:f8:f4:7f:
b4:8f:09:c9:cc:e7:f0:1b:1e:69:4b:44:13:95:28:
67:96:1a:a2:ac:4e:5b:da:6c:9b:2e:f3:c3:cb:3a:
01:63:24:a4:9b:80:6b:a8:6e:3f:80:40:fe:41:01:
9a:d4:61:e4:8b:f3:6c:66:24:81:16:67:0b:d5:b5:
4e:5b:cc:ad:91:ae:32:39:8e:4f:21:1e:7c:7f:15:
a3:5a:25:df:bb:82:fc:c4:63:2e:a2:25:b0:1c:32:
c3:c3:ac:ad:30:b8:07:c4:20:4c:da:bc:eb:d9:dc:
bc:69:c1:2e:23:19:cb:88:7d:47:69:5e:02:a6:30:
db:be:1b:25:b2:d6:46:7b:55:81:17:a8:7c:6a:53:
21:50:31:c4:a2:86:e0:ce:53:7c:fb:7c:bf:3b:90:
51:48:d9:ca:57:32:3e:e1:92:9a:71:af:b1:44:aa:
48:8c:2e:1c:56:70:f7:3b:2d:66:fc:be:97:f2:ca:
e6:33:6f:70:1d:85:cd:db:5c:81:df:e4:de:37:99:
f5:fc:c6:72:1f:57:55:77:1c:6d:da:91:70:ff:e4:
3d:4c:03:3d:d0:56:a0:df:d1:44:b4:ad:51:34:2b:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5D:20:12:B0:20:5D:F1:FC:60:53:3C:75:4A:D9:F7:FF:A5:C4:C7
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Hl0gErAgXfH8YFM8dUrZ9_-lxMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
81.28.252.0/24
91.238.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:86:be:78:58:ab:70:6e:05:ef:ae:6b:3b:0f:35:65:75:3e:
cc:1e:33:fa:1f:7b:4e:01:31:f6:b8:f7:64:d8:5b:82:a9:20:
b5:13:b3:21:21:cd:f9:b1:60:f4:0e:f9:dd:47:0f:bf:1f:59:
2d:11:a3:15:61:7f:ce:c9:15:3b:58:2d:9d:65:b8:f1:83:67:
5e:8f:d9:d7:86:0e:25:3b:74:eb:9b:72:79:45:22:33:d0:0f:
1c:bc:5c:58:4b:79:74:5f:49:3b:41:b5:d9:c7:c9:bd:c1:c0:
47:dc:b0:ae:e2:fd:70:a8:94:9a:5b:03:a9:4f:24:46:86:96:
e6:47:42:90:04:96:e4:fe:b1:d9:b8:3b:e9:38:9b:ce:b5:00:
bc:c6:79:34:92:1f:4d:4a:c7:65:07:59:88:e1:69:18:8d:88:
e5:f0:3a:e3:a9:6b:b7:02:86:fd:87:55:98:90:b2:e8:de:91:
05:43:dc:ea:db:30:75:69:9c:90:25:3d:9f:40:fc:8f:5b:d7:
15:1b:c2:a9:59:e4:ee:a7:a8:71:9f:7a:9e:ef:ad:41:ee:5d:
a4:03:9e:15:45:83:ab:ca:a6:7c:3d:c1:90:7f:dd:90:99:f1:
70:d4:b8:35:3e:5f:b1:55:23:ec:b7:94:eb:95:db:c3:65:3b:
e7:10:7b:28
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYni7kYISCMt3d4SxeUZKkoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwODExMDQ1MDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTVkMjAxMmIwMjA1ZGYxZmM2MDUzM2M3NTRhZDlmN2ZmYTVjNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWLnULKQd8IOgYtIe9p2vCAhlc6s
922smNX49H+0jwnJzOfwGx5pS0QTlShnlhqirE5b2mybLvPDyzoBYySkm4BrqG4/
gED+QQGa1GHki/NsZiSBFmcL1bVOW8ytka4yOY5PIR58fxWjWiXfu4L8xGMuoiWw
HDLDw6ytMLgHxCBM2rzr2dy8acEuIxnLiH1HaV4CpjDbvhslstZGe1WBF6h8alMh
UDHEoobgzlN8+3y/O5BRSNnKVzI+4ZKaca+xRKpIjC4cVnD3Oy1m/L6X8srmM29w
HYXN21yB3+TeN5n1/MZyH1dVdxxt2pFw/+Q9TAM90Fag39FEtK1RNCvJewIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB5dIBKwIF3x/GBTPHVK2ff/pcTHMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvSGwwZ0VyQWdYZkg4WUZNOGRVclo5Xy1seE1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZY3AwQA
URz8AwQAW+5cMA0GCSqGSIb3DQEBCwUAA4IBAQCwhr54WKtwbgXvrms7DzVldT7M
HjP6H3tOATH2uPdk2FuCqSC1E7MhIc35sWD0DvndRw+/H1ktEaMVYX/OyRU7WC2d
Zbjxg2dej9nXhg4lO3Trm3J5RSIz0A8cvFxYS3l0X0k7QbXZx8m9wcBH3LCu4v1w
qJSaWwOpTyRGhpbmR0KQBJbk/rHZuDvpOJvOtQC8xnk0kh9NSsdlB1mI4WkYjYjl
8DrjqWu3Aob9h1WYkLLo3pEFQ9zq2zB1aZyQJT2fQPyPW9cVG8KpWeTup6hxn3qe
761B7l2kA54VRYOryqZ8PcGQf92QmfFw1Lg1Pl+xVSPst5TrldvDZTvnEHso
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org