Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HqNjtg8XxIDZDJoo54Gp7ZpuuRE.roa
File: HqNjtg8XxIDZDJoo54Gp7ZpuuRE.roa (raw, json)
Hash identifier: 2guEpHubwA5lj+TfY4GNBcDCbZGI+UPMLmd/L5O649k=
Subject key identifier: 1E:A3:63:B6:0F:17:C4:80:D9:0C:9A:28:E7:81:A9:ED:9A:6E:B9:11
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018F1A2CAE2C445AA72814668BFAC79934A9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HqNjtg8XxIDZDJoo54Gp7ZpuuRE.roa
Signing time: Fri 26 Apr 2024 11:31:26 +0000
ROA not before: Fri 26 Apr 2024 11:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18978
IP address blocks: 5.180.22.0/23 maxlen: 23
5.180.24.0/22 maxlen: 22
5.180.28.0/22 maxlen: 24
5.180.40.0/22 maxlen: 24
5.180.44.0/22 maxlen: 24
5.180.52.0/22 maxlen: 24
5.180.144.0/22 maxlen: 24
5.253.28.0/22 maxlen: 24
45.66.156.0/22 maxlen: 24
45.66.164.0/22 maxlen: 24
45.128.60.0/22 maxlen: 24
45.136.112.0/22 maxlen: 24
45.136.116.0/22 maxlen: 24
45.136.128.0/22 maxlen: 24
45.136.148.0/22 maxlen: 24
85.208.108.0/22 maxlen: 24
85.208.116.0/22 maxlen: 24
85.209.152.0/22 maxlen: 24
85.209.192.0/22 maxlen: 24
88.218.92.0/22 maxlen: 24
141.98.188.0/22 maxlen: 24
194.36.36.0/22 maxlen: 24
194.55.188.0/23 maxlen: 24
194.59.220.0/23 maxlen: 24
194.59.244.0/23 maxlen: 24
194.76.146.0/23 maxlen: 24
194.124.244.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 15:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1a:2c:ae:2c:44:5a:a7:28:14:66:8b:fa:c7:99:34:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 26 11:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ea363b60f17c480d90c9a28e781a9ed9a6eb911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:a8:a4:0d:bf:d5:54:d7:45:11:5c:37:c2:
dd:ee:27:da:88:59:82:b3:93:63:97:69:4c:38:f9:
c9:4d:20:0c:fc:9e:a1:eb:e3:0b:bc:1f:b8:3f:42:
00:79:af:45:3b:77:c4:5e:64:d5:f4:7a:71:8f:b2:
52:d7:b1:f0:93:c0:69:26:ed:17:5f:4e:2c:bc:4a:
d5:3a:ff:79:4c:85:52:cc:74:e0:4c:30:c7:f5:67:
6c:12:84:4b:45:60:88:fe:aa:32:ea:03:79:02:3d:
ff:7b:2d:e4:94:c4:09:7a:e2:47:e8:d2:01:66:93:
28:c2:1f:32:38:86:97:36:38:f5:2b:62:e8:a8:d4:
8e:53:b7:da:b2:37:af:dc:11:c4:83:bd:2c:a6:4c:
e2:4d:0e:e7:67:0f:81:28:c1:5a:ea:c3:34:76:a3:
57:7c:ce:5c:e8:35:39:8d:89:68:77:e6:2e:7b:b5:
6d:73:ea:90:fe:4e:41:d9:b4:4a:05:b6:fd:f6:97:
b5:a0:7a:28:42:fd:9c:55:88:75:1d:28:02:34:cc:
a4:85:fe:82:55:14:09:8f:44:1b:3c:28:25:c4:c3:
02:e7:bb:e9:0d:fe:46:6a:f4:d1:92:2f:76:fa:f7:
b6:2e:56:51:94:84:f8:94:4a:1d:da:ac:cb:58:b5:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A3:63:B6:0F:17:C4:80:D9:0C:9A:28:E7:81:A9:ED:9A:6E:B9:11
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HqNjtg8XxIDZDJoo54Gp7ZpuuRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.22.0-5.180.31.255
5.180.40.0/21
5.180.52.0/22
5.180.144.0/22
5.253.28.0/22
45.66.156.0/22
45.66.164.0/22
45.128.60.0/22
45.136.112.0/21
45.136.128.0/22
45.136.148.0/22
85.208.108.0/22
85.208.116.0/22
85.209.152.0/22
85.209.192.0/22
88.218.92.0/22
141.98.188.0/22
194.36.36.0/22
194.55.188.0/23
194.59.220.0/23
194.59.244.0/23
194.76.146.0/23
194.124.244.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:47:be:3a:95:8c:ba:62:54:8b:37:b4:80:fc:9d:e8:98:76:
7e:7c:5c:a9:4f:25:a2:9c:5f:3a:73:dd:7e:f1:d4:37:8e:5e:
d8:23:e1:a3:2f:cb:5c:ba:b5:74:dc:5f:20:46:c6:af:26:0a:
35:6d:49:b5:3d:fa:4f:1c:f1:ad:b0:49:20:c3:2d:b7:a7:53:
e4:3f:06:5b:d2:6f:f2:18:c5:91:4d:0f:2e:de:d4:f4:54:e9:
87:b6:2b:f5:e1:08:7e:9c:3e:51:3a:21:fd:7c:06:e2:e5:87:
9e:d9:a9:6c:44:01:37:1e:14:55:92:19:56:cf:f1:fa:ea:72:
79:e2:35:9e:f0:a3:4c:10:7c:94:45:a0:5b:0d:b1:44:2f:02:
70:c6:69:4e:a0:7e:15:c3:6d:c3:67:8b:c9:17:72:2b:1e:46:
2d:82:f2:c3:21:f6:50:57:37:1e:52:61:b3:71:a9:b6:23:b7:
87:5d:c7:4c:fb:5b:92:7e:1c:4a:2b:c0:03:88:e7:a1:f1:8e:
e6:5b:72:8d:01:8c:47:82:6b:e8:f9:53:dd:31:b7:d3:ee:98:
07:94:06:6e:d2:26:28:86:7e:cf:3b:3a:79:41:f1:b6:35:6e:
5d:55:84:91:80:f8:b2:a3:d7:0c:5e:f1:2a:91:64:2f:0b:3d:
eb:6f:36:b5
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAY8aLK4sRFqnKBRmi/rHmTSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjQwNDI2MTEzMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWEzNjNiNjBmMTdjNDgwZDkwYzlhMjhlNzgxYTllZDlhNmViOTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjWopA2/1VTXRRFcN8Ld7ifaiFmC
s5Njl2lMOPnJTSAM/J6h6+MLvB+4P0IAea9FO3fEXmTV9Hpxj7JS17Hwk8BpJu0X
X04svErVOv95TIVSzHTgTDDH9WdsEoRLRWCI/qoy6gN5Aj3/ey3klMQJeuJH6NIB
ZpMowh8yOIaXNjj1K2LoqNSOU7fasjev3BHEg70spkziTQ7nZw+BKMFa6sM0dqNX
fM5c6DU5jYlod+Yue7Vtc+qQ/k5B2bRKBbb99pe1oHooQv2cVYh1HSgCNMykhf6C
VRQJj0QbPCglxMMC57vpDf5GavTRki92+ve2LlZRlIT4lEod2qzLWLWsfwIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFB6jY7YPF8SA2QyaKOeBqe2abrkRMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvSHFOanRnOFh4SURaREpvbzU0R3A3WnB1dVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIwDAME
AQW0FgMEBQW0AAMEAwW0KAMEAgW0NAMEAgW0kAMEAgX9HAMEAi1CnAMEAi1CpAME
Ai2APAMEAy2IcAMEAi2IgAMEAi2IlAMEAlXQbAMEAlXQdAMEAlXRmAMEAlXRwAME
AljaXAMEAo1ivAMEAsIkJAMEAcI3vAMEAcI73AMEAcI79AMEAcJMkgMEAcJ89DAN
BgkqhkiG9w0BAQsFAAOCAQEAq0e+OpWMumJUize0gPyd6Jh2fnxcqU8lopxfOnPd
fvHUN45e2CPhoy/LXLq1dNxfIEbGryYKNW1JtT36TxzxrbBJIMMtt6dT5D8GW9Jv
8hjFkU0PLt7U9FTph7Yr9eEIfpw+UToh/XwG4uWHntmpbEQBNx4UVZIZVs/x+upy
eeI1nvCjTBB8lEWgWw2xRC8CcMZpTqB+FcNtw2eLyRdyKx5GLYLywyH2UFc3HlJh
s3GptiO3h13HTPtbkn4cSivAA4jnofGO5ltyjQGMR4Jr6PlT3TG30+6YB5QGbtIm
KIZ+zzs6eUHxtjVuXVWEkYD4sqPXDF7xKpFkLws96282tQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:23 2025 by rpki-client