Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/hp65o-0Yv5ncFTzuwAGgFGWhs-E.roa
File: hp65o-0Yv5ncFTzuwAGgFGWhs-E.roa (raw, json)
Hash identifier: LwhzX10dIFMBzySIFCUd6nrYNac2r0NhoLbkzyTjGag=
Subject key identifier: 86:9E:B9:A3:ED:18:BF:99:DC:15:3C:EE:C0:01:A0:14:65:A1:B3:E1
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01910820629E15114927557ED3A3DBD19C1A
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/hp65o-0Yv5ncFTzuwAGgFGWhs-E.roa
Signing time: Wed 31 Jul 2024 09:30:25 +0000
ROA not before: Wed 31 Jul 2024 09:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 178.253.16.0/24 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 21:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:20:62:9e:15:11:49:27:55:7e:d3:a3:db:d1:9c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 31 09:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=869eb9a3ed18bf99dc153ceec001a01465a1b3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:d3:6d:f4:2e:e0:94:8c:be:de:6c:7a:35:
64:c8:32:6a:88:76:cd:1a:33:59:94:ee:57:07:2c:
f3:70:ed:d8:15:be:d7:9d:be:f9:e3:18:5f:3c:6c:
16:2a:c5:d4:86:85:22:70:5a:3f:02:cd:f4:09:ab:
a8:ca:2d:61:cf:52:6f:c9:b5:4b:f6:0a:68:87:42:
7a:24:6a:38:a2:a8:ae:3b:a1:89:d9:0e:2e:4d:ce:
ba:ce:de:28:af:fe:f8:b7:6c:76:2e:ce:a2:a9:7c:
dd:4d:67:1a:50:cc:07:ae:43:1a:4b:16:1e:52:a9:
bb:7f:a9:68:3b:34:3c:3d:3b:f3:1b:16:03:60:77:
fb:f0:d1:2a:24:93:6b:40:ae:75:35:c7:5a:1e:c4:
e6:01:82:fa:8c:f0:50:95:41:1d:f4:07:b2:0e:8c:
e8:d8:0d:20:4c:28:7b:65:62:61:5f:11:1a:67:d5:
9c:60:4a:e3:a1:77:6c:16:27:26:6d:fb:f1:a8:59:
fd:30:5c:ec:d8:c3:25:fb:61:5c:b8:f3:1e:12:84:
39:18:a2:cb:30:da:e0:b1:9a:9b:ed:17:ce:95:bd:
81:ef:ae:28:ff:8d:74:23:99:b5:2e:b9:6e:fc:06:
52:25:e5:8b:07:2e:76:fa:d4:13:c8:e9:a1:6f:49:
f6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9E:B9:A3:ED:18:BF:99:DC:15:3C:EE:C0:01:A0:14:65:A1:B3:E1
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/hp65o-0Yv5ncFTzuwAGgFGWhs-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
31:7b:cf:74:93:4d:46:62:57:2e:d4:0f:7a:87:d4:75:5e:70:
aa:fd:d1:e3:16:0c:4f:44:dd:43:9d:43:03:23:c0:0f:e5:38:
f8:fa:59:03:43:d6:a4:fe:3a:0c:0a:18:31:3d:9c:b7:3e:ca:
ea:e9:5e:6a:94:90:5a:89:c6:e9:e1:2e:89:c7:42:6e:e1:98:
bd:eb:a1:fc:e7:35:f6:c3:45:7b:1d:2a:f2:3a:11:c7:6e:da:
c7:4e:d5:fb:6b:c5:81:ad:7f:f5:5d:07:46:80:67:71:fe:cf:
c8:d9:e2:03:f1:a7:36:f6:1d:b2:ec:dd:a0:1a:75:1f:9a:c9:
60:2f:e5:87:fc:1a:fa:9d:23:10:27:f6:8b:83:1c:7a:99:07:
47:f2:a1:f2:8e:ec:cf:bb:a3:d1:4a:3c:ba:f8:a8:df:ca:61:
82:bd:37:ea:b1:59:d6:75:2e:51:d1:03:45:fd:1a:53:48:c9:
0e:95:fb:92:36:74:7a:0f:01:11:9e:b1:af:53:4e:47:65:ca:
70:39:2e:b1:bc:d2:b2:2a:b7:10:4e:00:23:08:1e:c7:58:e7:
0d:5c:83:4d:e1:ef:c9:ff:0c:4e:21:f4:70:60:50:8b:61:ab:
0d:93:06:de:42:5d:31:6f:b9:b6:7d:64:54:e5:03:d1:b3:fd:
2b:c6:a7:00
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZEIIGKeFRFJJ1V+06Pb0ZwaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQwNzMxMDkzMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjllYjlhM2VkMThiZjk5ZGMxNTNjZWVjMDAxYTAxNDY1YTFiM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1jTbfQu4JSMvt5sejVkyDJqiHbN
GjNZlO5XByzzcO3YFb7Xnb754xhfPGwWKsXUhoUicFo/As30Cauoyi1hz1JvybVL
9gpoh0J6JGo4oqiuO6GJ2Q4uTc66zt4or/74t2x2Ls6iqXzdTWcaUMwHrkMaSxYe
Uqm7f6loOzQ8PTvzGxYDYHf78NEqJJNrQK51NcdaHsTmAYL6jPBQlUEd9AeyDozo
2A0gTCh7ZWJhXxEaZ9WcYErjoXdsFicmbfvxqFn9MFzs2MMl+2FcuPMeEoQ5GKLL
MNrgsZqb7RfOlb2B764o/410I5m1Lrlu/AZSJeWLBy52+tQTyOmhb0n27QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIaeuaPtGL+Z3BU87sABoBRlobPhMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvaHA2NW8tMFl2NW5jRlR6dXdBR2dGR1docy1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsv0QAwQB
sv0sMA0GCSqGSIb3DQEBCwUAA4IBAQAxe890k01GYlcu1A96h9R1XnCq/dHjFgxP
RN1DnUMDI8AP5Tj4+lkDQ9ak/joMChgxPZy3Psrq6V5qlJBaicbp4S6Jx0Ju4Zi9
66H85zX2w0V7HSryOhHHbtrHTtX7a8WBrX/1XQdGgGdx/s/I2eID8ac29h2y7N2g
GnUfmslgL+WH/Br6nSMQJ/aLgxx6mQdH8qHyjuzPu6PRSjy6+KjfymGCvTfqsVnW
dS5R0QNF/RpTSMkOlfuSNnR6DwERnrGvU05HZcpwOS6xvNKyKrcQTgAjCB7HWOcN
XINN4e/J/wxOIfRwYFCLYasNkwbeQl0xb7m2fWRU5QPRs/0rxqcA
-----END CERTIFICATE-----
Generated at Fri Sep 13 23:47:32 2024 by rpki-client on console-ams.rpki-client.org