Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/Hsle-M6x-51uc5cyv3F-3yutMps.roa
File: Hsle-M6x-51uc5cyv3F-3yutMps.roa (raw, json)
Hash identifier: EUt9XoYLlAzpQ53s7iZDKl2RacrYrVUezF4i3Qga7Nk=
Subject key identifier: 1E:C9:5E:F8:CE:B1:FB:9D:6E:73:97:32:BF:71:7E:DF:2B:AD:32:9B
Certificate issuer: /CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Certificate serial: 018CC5DC04CF127C84A0DF4B3E05E6D7C779
Authority key identifier: FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/Hsle-M6x-51uc5cyv3F-3yutMps.roa
Signing time: Mon 01 Jan 2024 16:29:39 +0000
ROA not before: Mon 01 Jan 2024 16:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211772
IP address blocks: 217.28.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:04:cf:12:7c:84:a0:df:4b:3e:05:e6:d7:c7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Validity
Not Before: Jan 1 16:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ec95ef8ceb1fb9d6e739732bf717edf2bad329b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:4a:de:8c:8f:64:e8:6f:a7:9f:5e:0f:ce:
c4:fc:fb:c1:c6:47:d7:87:7b:9b:f4:bf:fe:36:5f:
8b:f7:4b:29:71:fc:13:98:86:4d:db:80:66:e0:60:
b0:85:14:27:92:6c:38:f3:91:b9:89:82:97:76:99:
46:58:b6:60:a2:fb:33:fb:51:23:e5:f2:35:be:52:
54:58:38:98:20:c5:79:7d:54:67:ad:19:99:4f:e1:
47:fd:00:3a:2b:a0:29:0e:48:8e:91:34:bf:92:38:
38:4d:73:bd:d2:ac:0a:56:7b:a6:81:d7:33:ce:91:
6a:0a:75:f6:3b:b7:6d:b5:93:6b:64:0e:89:f9:ab:
b1:24:25:b9:9a:5c:b1:9f:1c:d4:b1:ad:5d:32:e9:
23:09:d6:4d:2c:79:c6:16:f4:e2:cd:67:d1:e5:2c:
7c:8f:81:c3:ee:cc:79:b5:81:59:a0:b4:0f:ea:5a:
42:76:47:93:61:bf:02:e2:3f:55:a3:2c:58:70:21:
1c:cc:6c:04:70:7e:c3:29:e2:d3:89:30:1c:72:c7:
c7:6a:10:54:bd:e8:e6:bf:eb:fb:20:2b:ba:0d:f5:
f7:07:ab:ab:2e:aa:e1:0a:a9:32:fa:ff:2e:91:89:
4a:82:cf:f2:5e:ef:fb:1c:ff:de:a2:ab:ac:a6:b8:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C9:5E:F8:CE:B1:FB:9D:6E:73:97:32:BF:71:7E:DF:2B:AD:32:9B
X509v3 Authority Key Identifier:
keyid:FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/Hsle-M6x-51uc5cyv3F-3yutMps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:dc:b9:2a:bb:bf:c4:ce:ae:17:a6:38:65:8e:57:61:50:82:
3b:93:5d:32:f4:e1:52:fd:54:b1:cb:8b:64:0c:dc:ea:cf:40:
52:d6:74:9e:8d:0b:79:9d:8d:37:d1:24:f1:81:8b:67:f0:0a:
36:31:56:eb:c0:c2:4c:0c:7c:8a:fc:61:a9:d5:cd:5d:2b:6e:
cd:00:52:42:9e:31:70:84:b5:2b:2f:00:71:ce:e5:b1:f9:4c:
72:b0:eb:fa:85:7a:f5:7b:df:73:3d:e2:14:af:fd:19:6a:9b:
aa:84:03:0c:5f:54:e1:6a:38:0f:11:40:a8:02:27:26:74:8b:
19:53:f3:de:20:8c:ab:b8:da:57:c6:ac:32:95:45:ef:cb:7d:
bc:61:15:ca:2a:00:42:3e:78:a0:a1:c4:df:09:df:22:21:42:
31:2d:e5:f3:93:20:81:3e:e0:6f:4c:c4:99:f2:19:ba:e8:b1:
eb:fa:96:a8:ca:57:be:85:88:f0:b8:6f:63:c1:29:12:06:31:
01:a9:b1:7e:55:38:d1:8b:df:d8:26:ea:bd:a5:ee:d1:82:be:
d9:30:27:55:2d:fc:a6:cd:8d:fa:2e:d8:64:53:6e:77:f2:7a:
55:9d:51:bb:d4:16:95:0c:87:85:b0:99:59:52:8e:2b:fb:cb:
e8:a7:80:0d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzF3ATPEnyEoN9LPgXm18d5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMjljZjIzZmM5Y2U2ZTJiOGMzOTMyM2QyNzBjZTUyZTg5
Mzg3MDIwHhcNMjQwMTAxMTYyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWM5NWVmOGNlYjFmYjlkNmU3Mzk3MzJiZjcxN2VkZjJiYWQzMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZxK3oyPZOhvp59eD87E/PvBxkfX
h3ub9L/+Nl+L90spcfwTmIZN24Bm4GCwhRQnkmw485G5iYKXdplGWLZgovsz+1Ej
5fI1vlJUWDiYIMV5fVRnrRmZT+FH/QA6K6ApDkiOkTS/kjg4TXO90qwKVnumgdcz
zpFqCnX2O7dttZNrZA6J+auxJCW5mlyxnxzUsa1dMukjCdZNLHnGFvTizWfR5Sx8
j4HD7sx5tYFZoLQP6lpCdkeTYb8C4j9VoyxYcCEczGwEcH7DKeLTiTAccsfHahBU
vejmv+v7ICu6DfX3B6urLqrhCqky+v8ukYlKgs/yXu/7HP/eoqusprhPqQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFB7JXvjOsfudbnOXMr9xft8rrTKbMB8GA1UdIwQY
MBaAFPspzyP8nObiuMOTI9JwzlLok4cCMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15blBJX3ljNXVLNHc1TWowbkRPVXVpVGh3SS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvOWZkMDAzLTA2ZjctNDVkOC1hNWRk
LTA3NmJmMDJkY2RkOS8xL0hzbGUtTTZ4LTUxdWM1Y3l2M0YtM3l1dE1wcy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjAvOWZkMDAzLTA2ZjctNDVkOC1hNWRkLTA3NmJmMDJkY2Rk
OS8xLzEteW5QSV95YzV1SzR3NU1qMG5ET1V1aVRod0kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADZHIIw
DQYJKoZIhvcNAQELBQADggEBAB7cuSq7v8TOrhemOGWOV2FQgjuTXTL04VL9VLHL
i2QM3OrPQFLWdJ6NC3mdjTfRJPGBi2fwCjYxVuvAwkwMfIr8YanVzV0rbs0AUkKe
MXCEtSsvAHHO5bH5THKw6/qFevV733M94hSv/Rlqm6qEAwxfVOFqOA8RQKgCJyZ0
ixlT894gjKu42lfGrDKVRe/LfbxhFcoqAEI+eKChxN8J3yIhQjEt5fOTIIE+4G9M
xJnyGbrosev6lqjKV76FiPC4b2PBKRIGMQGpsX5VONGL39gm6r2l7tGCvtkwJ1Ut
/KbNjfou2GRTbnfyelWdUbvUFpUMh4WwmVlSjiv7y+ingA0=
-----END CERTIFICATE-----
Generated at Fri Jan 5 21:23:38 2024 by rpki-client on console-fra.rpki-client.org