Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HdIjG6qU9ekzTVU4hULtsiE3u-8.roa
File: HdIjG6qU9ekzTVU4hULtsiE3u-8.roa (raw, json)
Hash identifier: bMhdFO6+1DWKS3YHygbMGYCqyop7QOJgscBkXh78BJ4=
Subject key identifier: 1D:D2:23:1B:AA:94:F5:E9:33:4D:55:38:85:42:ED:B2:21:37:BB:EF
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01896369E77451C027A928BA1C3E2241EE97
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HdIjG6qU9ekzTVU4hULtsiE3u-8.roa
Signing time: Mon 17 Jul 2023 10:33:52 +0000
ROA not before: Mon 17 Jul 2023 10:33:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.8.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 14:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:69:e7:74:51:c0:27:a9:28:ba:1c:3e:22:41:ee:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 17 10:33:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dd2231baa94f5e9334d55388542edb22137bbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:9b:dc:9e:90:4c:5e:fc:0b:32:d3:b7:5f:
65:39:f3:02:01:0e:ff:73:62:95:2a:1a:02:e3:65:
24:25:c0:91:91:db:d7:a1:59:85:03:11:55:8b:cd:
ae:58:b4:f9:74:1f:44:71:2a:29:05:e6:d3:a1:52:
44:a3:72:6d:3e:17:b3:19:06:36:d2:ee:42:87:70:
da:f2:99:26:5c:28:55:8c:95:ce:dd:a0:2c:8a:42:
bf:92:91:91:b5:2f:94:a1:63:86:87:52:d0:e9:0e:
f1:d5:50:15:68:89:ae:5c:0b:42:5e:ab:2d:46:90:
78:bb:bf:95:f0:1c:f0:71:d6:4d:f3:13:2b:36:a6:
e7:b0:1c:3f:15:83:c8:82:f9:5d:f0:09:b6:21:9a:
32:59:6f:ef:ab:24:f6:cc:26:83:f4:49:a2:4e:78:
dd:92:c1:a3:8f:71:c7:d9:f4:3d:89:49:7b:b0:d7:
d7:76:8f:92:5c:65:f4:df:8f:9f:b9:57:2a:e9:2c:
60:f7:d0:93:63:11:09:26:0a:21:e0:2d:18:ed:a1:
cd:08:c5:7d:79:69:c8:19:a9:33:82:19:3a:87:cd:
97:49:6e:b8:9a:76:b3:86:35:31:c1:e6:1f:03:65:
3f:30:da:60:8c:c2:77:6d:fa:26:8e:fb:25:e1:ae:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D2:23:1B:AA:94:F5:E9:33:4D:55:38:85:42:ED:B2:21:37:BB:EF
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HdIjG6qU9ekzTVU4hULtsiE3u-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:2d:17:ef:ef:69:b5:c6:55:79:f6:98:2b:22:a2:a7:64:d5:
9f:63:1a:6a:7b:bd:ae:5a:51:4c:03:7f:ba:d2:ff:39:9f:3b:
bb:80:9a:07:52:08:fe:de:bb:f2:02:d0:09:e2:49:7c:3b:8c:
a5:12:ad:38:28:6f:ef:4d:72:17:78:d3:59:57:7e:c0:ed:35:
f2:a6:90:ed:b2:11:a6:64:0d:a5:8f:ae:c2:9a:dc:83:00:e8:
b2:45:ad:ff:53:03:bd:57:90:80:2d:0f:a2:9e:db:e0:1f:c8:
f6:95:7e:4e:44:40:40:80:8a:55:45:ae:d5:38:ee:f0:57:20:
31:6c:e8:3f:0a:64:7d:18:6a:5a:45:87:56:78:4b:59:39:07:
2f:b3:4a:79:4d:5a:75:ae:d8:cb:36:90:19:2c:50:bc:5f:f7:
3e:d5:0a:0f:aa:78:f2:ea:e6:bc:43:d0:99:f3:46:06:fc:81:
39:a8:9c:ac:bc:ee:bd:85:be:cf:83:b3:ef:2b:ad:ba:65:0e:
81:13:f3:e9:12:18:4c:e1:65:f4:c4:c4:65:92:79:1a:4e:a7:
55:eb:b7:58:1d:61:a2:f8:c6:c4:40:89:70:5f:58:03:eb:79:
d4:af:48:80:77:ca:fc:76:3d:66:48:99:5c:d8:a7:2b:98:9c:
32:0d:60:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYljaed0UcAnqSi6HD4iQe6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwNzE3MTAzMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGQyMjMxYmFhOTRmNWU5MzM0ZDU1Mzg4NTQyZWRiMjIxMzdiYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqveb3J6QTF78CzLTt19lOfMCAQ7/
c2KVKhoC42UkJcCRkdvXoVmFAxFVi82uWLT5dB9EcSopBebToVJEo3JtPhezGQY2
0u5Ch3Da8pkmXChVjJXO3aAsikK/kpGRtS+UoWOGh1LQ6Q7x1VAVaImuXAtCXqst
RpB4u7+V8BzwcdZN8xMrNqbnsBw/FYPIgvld8Am2IZoyWW/vqyT2zCaD9EmiTnjd
ksGjj3HH2fQ9iUl7sNfXdo+SXGX034+fuVcq6Sxg99CTYxEJJgoh4C0Y7aHNCMV9
eWnIGakzghk6h82XSW64mnazhjUxweYfA2U/MNpgjMJ3bfomjvsl4a7P8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB3SIxuqlPXpM01VOIVC7bIhN7vvMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvSGRJakc2cVU5ZWt6VFZVNGhVTHRzaUUzdS04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQi7MA0G
CSqGSIb3DQEBCwUAA4IBAQCxLRfv72m1xlV59pgrIqKnZNWfYxpqe72uWlFMA3+6
0v85nzu7gJoHUgj+3rvyAtAJ4kl8O4ylEq04KG/vTXIXeNNZV37A7TXyppDtshGm
ZA2lj67CmtyDAOiyRa3/UwO9V5CALQ+intvgH8j2lX5OREBAgIpVRa7VOO7wVyAx
bOg/CmR9GGpaRYdWeEtZOQcvs0p5TVp1rtjLNpAZLFC8X/c+1QoPqnjy6ua8Q9CZ
80YG/IE5qJysvO69hb7Pg7PvK626ZQ6BE/PpEhhM4WX0xMRlknkaTqdV67dYHWGi
+MbEQIlwX1gD63nUr0iAd8r8dj1mSJlc2KcrmJwyDWDQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:24 2024 by rpki-client on console-fra.rpki-client.org