Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/hq-3ZGpvE9bK85wr9Lk4xS2DWRc.roa
File: hq-3ZGpvE9bK85wr9Lk4xS2DWRc.roa (raw, json)
Hash identifier: dsOcEJUntQMYcG7ChODbJO67m2TDzMmA+2u6h6v4Xpg=
Subject key identifier: 86:AF:B7:64:6A:6F:13:D6:CA:F3:9C:2B:F4:B9:38:C5:2D:83:59:17
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 018CC56DE9BE7FC47F08FF1A51540E751855
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/hq-3ZGpvE9bK85wr9Lk4xS2DWRc.roa
Signing time: Mon 01 Jan 2024 14:29:23 +0000
ROA not before: Mon 01 Jan 2024 14:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31631
IP address blocks: 45.150.140.0/22 maxlen: 22
80.252.120.0/22 maxlen: 22
193.178.112.0/23 maxlen: 23
185.108.168.0/22 maxlen: 22
103.110.208.0/22 maxlen: 22
193.178.54.0/23 maxlen: 23
185.205.172.0/22 maxlen: 22
2a06:e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 19 Feb 2024 10:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e9:be:7f:c4:7f:08:ff:1a:51:54:0e:75:18:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Jan 1 14:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86afb7646a6f13d6caf39c2bf4b938c52d835917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:29:f6:56:41:71:64:6d:ac:c6:2c:e6:c7:
ae:c0:3b:d6:4b:97:40:31:2e:75:e7:ed:c1:aa:f7:
07:5b:df:6a:50:64:0c:68:a2:90:0f:74:ca:a3:93:
9b:61:d5:05:bc:8a:5c:83:2d:06:9f:4c:d5:5d:2c:
1a:a0:f0:db:34:d6:8e:da:76:20:c9:37:84:2c:58:
47:db:92:4b:48:17:97:de:7d:7e:a1:25:f9:f9:90:
10:dd:a5:e3:59:5a:bd:a8:c7:e1:75:c6:75:4b:1b:
9a:e7:67:04:7c:37:65:bf:fc:b9:15:87:50:36:eb:
b6:1e:18:4d:cb:f5:31:99:ff:96:d0:02:22:eb:cf:
8a:70:f0:e1:97:a8:bd:cc:6d:bc:af:9a:16:1f:de:
18:8b:e2:2c:4c:f3:49:5d:8b:79:c2:43:83:1f:56:
3d:3f:f1:b4:d7:33:b0:d7:67:28:96:3e:1d:52:2a:
5d:62:5d:77:4f:34:4c:c9:28:a8:70:29:77:6b:89:
3a:e4:07:bf:b4:6c:db:4d:88:6d:33:ba:12:6a:b0:
b7:87:2b:76:3f:e7:bd:85:98:12:0d:a5:ff:c8:d1:
b5:d6:61:74:23:80:07:0a:d6:1f:13:88:95:b1:e6:
f4:fe:99:36:c4:02:25:7f:cd:05:7d:5a:54:ba:a1:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AF:B7:64:6A:6F:13:D6:CA:F3:9C:2B:F4:B9:38:C5:2D:83:59:17
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/hq-3ZGpvE9bK85wr9Lk4xS2DWRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.140.0/22
80.252.120.0/22
103.110.208.0/22
185.108.168.0/22
185.205.172.0/22
193.178.54.0/23
193.178.112.0/23
IPv6:
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
e1:a0:bf:95:65:5c:d1:c4:c9:ee:13:e7:52:63:d4:fe:91:c6:
fe:5c:f8:5e:f4:2c:5d:11:bb:9f:8e:a0:80:78:31:71:92:23:
b7:30:a2:14:2c:db:d2:59:ed:7a:8b:d9:48:42:77:00:f4:48:
82:0c:52:ff:ef:db:f7:89:ba:71:67:65:9b:5e:52:d5:7d:8f:
91:85:6d:a1:ee:6e:0f:bc:75:64:21:12:12:5b:6d:34:e4:66:
b2:fd:dc:e7:df:dc:64:a1:11:83:5b:0c:fd:e4:73:24:a5:62:
c7:78:1b:03:29:00:85:ac:e5:84:e6:f3:3c:db:77:89:9c:8e:
f3:4c:9b:7b:27:58:9c:ae:48:87:61:ba:84:df:d7:27:7c:63:
cc:e0:32:90:d0:53:6b:ed:17:e0:18:ca:00:ed:5d:a4:c2:0c:
51:f5:70:19:e4:20:30:16:5e:eb:ea:2c:35:4d:69:e5:a2:00:
00:68:48:48:63:9a:b0:88:62:dc:c4:b7:5d:5c:87:4e:b2:49:
18:22:90:c9:3f:f7:d6:df:08:c2:60:a2:ab:a2:86:37:6b:0b:
94:da:84:17:66:68:22:2b:a9:07:10:7a:4a:ff:76:b2:55:f3:
c9:12:94:e3:0d:87:11:6c:00:27:60:06:52:6e:6d:62:1d:8d:
b4:18:4c:85
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYzFbem+f8R/CP8aUVQOdRhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2
YWU4NzMwHhcNMjQwMTAxMTQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmFmYjc2NDZhNmYxM2Q2Y2FmMzljMmJmNGI5MzhjNTJkODM1OTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAYp9lZBcWRtrMYs5seuwDvWS5dA
MS515+3BqvcHW99qUGQMaKKQD3TKo5ObYdUFvIpcgy0Gn0zVXSwaoPDbNNaO2nYg
yTeELFhH25JLSBeX3n1+oSX5+ZAQ3aXjWVq9qMfhdcZ1Sxua52cEfDdlv/y5FYdQ
Nuu2HhhNy/Uxmf+W0AIi68+KcPDhl6i9zG28r5oWH94Yi+IsTPNJXYt5wkODH1Y9
P/G01zOw12colj4dUipdYl13TzRMySiocCl3a4k65Ae/tGzbTYhtM7oSarC3hyt2
P+e9hZgSDaX/yNG11mF0I4AHCtYfE4iVseb0/pk2xAIlf80FfVpUuqFTTQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFIavt2RqbxPWyvOcK/S5OMUtg1kXMB8GA1UdIwQY
MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt
NDlhNjU0NTc4NmU2LzEvaHEtM1pHcHZFOWJLODV3cjlMazR4UzJEV1JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2
LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCLZaMAwQC
UPx4AwQCZ27QAwQCuWyoAwQCuc2sAwQBwbI2AwQBwbJwMA0EAgACMAcDBQMqBg5A
MA0GCSqGSIb3DQEBCwUAA4IBAQDhoL+VZVzRxMnuE+dSY9T+kcb+XPhe9CxdEbuf
jqCAeDFxkiO3MKIULNvSWe16i9lIQncA9EiCDFL/79v3ibpxZ2WbXlLVfY+RhW2h
7m4PvHVkIRISW2005Gay/dzn39xkoRGDWwz95HMkpWLHeBsDKQCFrOWE5vM823eJ
nI7zTJt7J1icrkiHYbqE39cnfGPM4DKQ0FNr7RfgGMoA7V2kwgxR9XAZ5CAwFl7r
6iw1TWnlogAAaEhIY5qwiGLcxLddXIdOskkYIpDJP/fW3wjCYKKrooY3awuU2oQX
ZmgiK6kHEHpK/3ayVfPJEpTjDYcRbAAnYAZSbm1iHY20GEyF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:23 2024 by rpki-client on console-fra.rpki-client.org