Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/hzdfSc6Rh--hWJ_XIM2eR26Vd8M.roa
File: hzdfSc6Rh--hWJ_XIM2eR26Vd8M.roa (raw, json)
Hash identifier: QG7f4POtoDdA1b2yjeEBxcU009LdYcgZiipEqYKL3XQ=
Subject key identifier: 87:37:5F:49:CE:91:87:EF:A1:58:9F:D7:20:CD:9E:47:6E:95:77:C3
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 018CC6B8B214E9CA6D8B1334E8037C77099A
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/hzdfSc6Rh--hWJ_XIM2eR26Vd8M.roa
Signing time: Mon 01 Jan 2024 20:30:42 +0000
ROA not before: Mon 01 Jan 2024 20:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.158.60.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 06:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:b2:14:e9:ca:6d:8b:13:34:e8:03:7c:77:09:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jan 1 20:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87375f49ce9187efa1589fd720cd9e476e9577c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:e7:27:14:7c:f5:b6:db:2f:61:97:3b:46:
ce:4c:a9:f6:59:42:0f:8c:72:32:7a:f4:e9:a3:77:
a9:09:1d:3f:d8:49:ce:bf:4b:eb:03:af:29:6a:28:
63:a4:df:ca:83:fa:21:7f:61:00:ef:8d:be:bf:d1:
45:3c:13:59:f0:14:02:4c:b1:83:b7:f0:90:61:cb:
8a:5c:dd:f3:8e:bc:de:a7:e8:14:c0:dd:25:7c:3a:
02:ce:25:24:44:04:b3:9b:08:f8:25:3e:45:73:9c:
cc:67:1b:61:e3:a7:8d:24:3a:45:d3:6f:f8:77:ab:
6e:b7:5b:ed:7a:25:4c:e1:0f:23:39:c9:85:4f:2e:
21:03:bf:c3:ca:d9:dc:4b:23:ab:04:6f:74:94:80:
7b:cc:50:67:2b:6c:e7:66:af:b3:3d:07:46:f9:2a:
2f:6c:c2:4c:e0:fa:d4:55:00:ab:aa:18:93:a7:ef:
7d:c8:28:7b:c7:55:9c:17:d9:3a:23:d6:a8:a0:2f:
e8:47:6c:71:9f:27:91:a8:57:1d:99:ab:f7:87:78:
cd:c9:c9:01:28:0a:5a:ea:de:cd:49:a0:90:93:d3:
c6:74:e7:5b:63:85:e0:23:f7:70:1b:7b:9a:21:0e:
2a:b1:1b:64:84:d8:12:8b:74:00:86:29:42:18:5f:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:37:5F:49:CE:91:87:EF:A1:58:9F:D7:20:CD:9E:47:6E:95:77:C3
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/hzdfSc6Rh--hWJ_XIM2eR26Vd8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.60.0/23
Signature Algorithm: sha256WithRSAEncryption
55:64:8a:89:26:fa:11:4b:5c:fc:21:3d:e2:7b:aa:51:9d:16:
e7:36:66:7b:16:c5:3a:88:ca:47:e0:5a:db:cb:28:11:dd:fc:
61:90:e1:b7:bd:3e:96:c0:d8:b0:71:6f:ed:4f:c3:1a:0e:9e:
88:17:e7:99:be:fa:db:ad:1c:72:c5:19:05:7d:17:06:f3:34:
ef:ba:30:75:a9:b2:5c:de:23:5f:c8:31:e7:66:bd:40:6d:9b:
50:2b:8a:76:e9:e6:b7:6f:22:ca:2a:0d:ca:43:11:b6:07:0b:
30:56:f2:6b:90:5d:74:08:22:42:1a:27:bb:b7:e2:89:98:67:
ec:bf:36:3f:ff:d3:87:95:30:9b:15:48:4b:0d:26:3c:63:b7:
0e:56:b9:3e:a3:d6:60:2b:b7:9a:d6:d0:39:59:1d:47:41:d6:
31:66:a8:f0:bf:63:8f:83:93:80:67:fc:9a:40:03:30:22:31:
02:38:23:a7:ca:08:23:cc:d8:36:d0:97:31:7c:1a:a9:22:d3:
0a:ee:64:89:0b:63:41:01:5d:84:dc:03:37:b7:de:5e:af:25:
fa:c3:27:b8:02:1a:a0:d5:f1:45:5e:4c:5a:7a:f7:9c:33:17:
9f:06:7a:5c:1e:82:ea:ad:b3:e6:84:fd:45:43:21:0d:25:41:
bb:c3:68:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuLIU6cptixM06AN8dwmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZWNmOWJhYmM5Y2E2YmFlOTA4NWNlMjkyZmIxYzJjYzE4
ZDM0NGYwHhcNMjQwMTAxMjAzMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzM3NWY0OWNlOTE4N2VmYTE1ODlmZDcyMGNkOWU0NzZlOTU3N2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/DnJxR89bbbL2GXO0bOTKn2WUIP
jHIyevTpo3epCR0/2EnOv0vrA68paihjpN/Kg/ohf2EA742+v9FFPBNZ8BQCTLGD
t/CQYcuKXN3zjrzep+gUwN0lfDoCziUkRASzmwj4JT5Fc5zMZxth46eNJDpF02/4
d6tut1vteiVM4Q8jOcmFTy4hA7/DytncSyOrBG90lIB7zFBnK2znZq+zPQdG+Sov
bMJM4PrUVQCrqhiTp+99yCh7x1WcF9k6I9aooC/oR2xxnyeRqFcdmav3h3jNyckB
KApa6t7NSaCQk9PGdOdbY4XgI/dwG3uaIQ4qsRtkhNgSi3QAhilCGF+2AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIc3X0nOkYfvoVif1yDNnkdulXfDMB8GA1UdIwQY
MBaAFFHs+bq8nKa66Qhc4pL7HCzBjTRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMt
ZGNmYzZhOWUwZGM3LzEvaHpkZlNjNlJoLS1oV0pfWElNMmVSMjZWZDhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMtZGNmYzZhOWUwZGM3
LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ48MA0G
CSqGSIb3DQEBCwUAA4IBAQBVZIqJJvoRS1z8IT3ie6pRnRbnNmZ7FsU6iMpH4Frb
yygR3fxhkOG3vT6WwNiwcW/tT8MaDp6IF+eZvvrbrRxyxRkFfRcG8zTvujB1qbJc
3iNfyDHnZr1AbZtQK4p26ea3byLKKg3KQxG2BwswVvJrkF10CCJCGie7t+KJmGfs
vzY//9OHlTCbFUhLDSY8Y7cOVrk+o9ZgK7ea1tA5WR1HQdYxZqjwv2OPg5OAZ/ya
QAMwIjECOCOnyggjzNg20JcxfBqpItMK7mSJC2NBAV2E3AM3t95eryX6wye4Ahqg
1fFFXkxaevecMxefBnpcHoLqrbPmhP1FQyENJUG7w2hE
-----END CERTIFICATE-----
Generated at Mon Jan 8 07:26:00 2024 by rpki-client on console-fra.rpki-client.org