Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/Hnx6wpVyFzC_cTwn5JY_-g4Dn1w.roa
File: Hnx6wpVyFzC_cTwn5JY_-g4Dn1w.roa (raw, json)
Hash identifier: aP9JGw9TU+E4sxF0JSlYTcqb0ZAKF34IDDeD87nUsAI=
Subject key identifier: 1E:7C:7A:C2:95:72:17:30:BF:71:3C:27:E4:96:3F:FA:0E:03:9F:5C
Certificate issuer: /CN=e992a035bffc5a41412c497c1285d1838234ffb0
Certificate serial: 0185707087FC3CC7F69A90D1FA8EF07A3C49
Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/Hnx6wpVyFzC_cTwn5JY_-g4Dn1w.roa
Signing time: Mon 02 Jan 2023 03:05:01 +0000
ROA not before: Mon 02 Jan 2023 03:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 217.114.96.0/20 maxlen: 24
185.76.16.0/22 maxlen: 24
77.222.64.0/19 maxlen: 24
87.249.96.0/19 maxlen: 24
2001:1540::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:87:fc:3c:c7:f6:9a:90:d1:fa:8e:f0:7a:3c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0
Validity
Not Before: Jan 2 03:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e7c7ac295721730bf713c27e4963ffa0e039f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:a5:03:61:10:e4:f4:8e:37:69:1e:33:53:
ad:ba:c3:b4:1a:17:9e:f4:24:5b:3d:a9:0f:cc:78:
e7:3b:9e:03:f2:61:13:65:36:82:b7:07:e3:4d:c6:
14:16:5d:82:85:cf:78:91:f5:fe:b1:c9:5c:ac:b1:
e8:b7:d7:0f:57:b3:b1:a0:17:23:fd:b0:15:89:24:
40:be:e9:45:a6:0b:1e:e0:fd:6b:a0:c6:64:36:6b:
d3:a8:b6:64:88:72:e7:f9:f7:2a:46:76:5b:a1:d5:
48:3d:15:52:ba:dc:ff:4c:b6:c9:a6:dc:7e:76:a6:
9c:68:98:0c:82:75:57:ad:07:58:de:80:ca:e7:0b:
2a:9e:6b:b0:a1:b0:a8:c8:b4:c3:4f:ec:1c:fb:7f:
b3:42:3a:20:63:87:11:ff:8b:b3:f9:46:48:27:b6:
c6:70:6d:79:3c:83:05:0f:f2:80:ab:15:e1:14:f9:
17:5c:e9:40:f5:7c:f7:11:79:42:ec:f0:fe:70:25:
3e:13:3a:03:89:e8:ee:e1:36:94:e3:ae:b2:70:1a:
cb:5b:02:23:10:4f:ae:c3:98:95:72:07:50:60:40:
d8:ac:33:04:ce:e4:60:ba:a0:fa:20:8a:84:77:6f:
84:c5:78:37:fd:dc:7f:94:2c:04:40:4f:8b:21:81:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:7A:C2:95:72:17:30:BF:71:3C:27:E4:96:3F:FA:0E:03:9F:5C
X509v3 Authority Key Identifier:
keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/Hnx6wpVyFzC_cTwn5JY_-g4Dn1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.64.0/19
87.249.96.0/19
185.76.16.0/22
217.114.96.0/20
IPv6:
2001:1540::/32
Signature Algorithm: sha256WithRSAEncryption
3a:15:91:11:ec:19:2c:af:cb:46:52:06:2d:9e:12:ff:16:1c:
47:34:f6:67:9a:c7:9b:d1:2a:79:bd:c7:30:c4:22:75:9a:14:
1d:35:25:78:16:9c:c3:df:cc:b3:bb:cb:eb:5e:5d:59:06:ad:
09:03:39:3f:6c:1f:e8:ad:2c:37:89:e3:b0:f2:14:87:66:d9:
e1:2e:93:8a:76:45:62:1b:6c:0f:50:4a:bb:97:5f:00:e4:cc:
c9:fd:08:62:19:4b:0c:26:8b:51:42:4d:15:fa:f9:0f:03:57:
8b:5f:76:cd:0c:e7:45:da:df:a8:94:9e:7a:f8:7a:37:0b:00:
50:4f:22:20:9c:ba:1b:b4:98:31:14:17:b4:f2:33:d4:c2:f5:
3b:d3:c0:c4:67:24:b3:e4:c9:77:37:15:50:5c:e6:7f:06:f1:
76:91:02:24:33:35:30:aa:62:af:1e:56:c6:29:90:a2:92:eb:
a0:9a:4b:30:6a:39:f1:ee:f3:a5:60:02:40:ef:72:7e:63:f7:
ce:db:ed:65:4e:dd:b5:65:72:eb:b6:dc:32:8f:d3:70:2d:64:
42:a9:d2:dd:62:76:fc:71:f4:0d:68:7f:6d:33:87:d7:bb:b4:
ca:81:37:2e:46:ab:0a:1f:a3:47:a0:51:b1:6b:04:27:55:a3:
ea:05:dc:4a
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVwcIf8PMf2mpDR+o7wejxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OTJhMDM1YmZmYzVhNDE0MTJjNDk3YzEyODVkMTgzODIz
NGZmYjAwHhcNMjMwMTAyMDMwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTdjN2FjMjk1NzIxNzMwYmY3MTNjMjdlNDk2M2ZmYTBlMDM5ZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYulA2EQ5PSON2keM1OtusO0Ghee
9CRbPakPzHjnO54D8mETZTaCtwfjTcYUFl2Chc94kfX+sclcrLHot9cPV7OxoBcj
/bAViSRAvulFpgse4P1roMZkNmvTqLZkiHLn+fcqRnZbodVIPRVSutz/TLbJptx+
dqacaJgMgnVXrQdY3oDK5wsqnmuwobCoyLTDT+wc+3+zQjogY4cR/4uz+UZIJ7bG
cG15PIMFD/KAqxXhFPkXXOlA9Xz3EXlC7PD+cCU+EzoDieju4TaU466ycBrLWwIj
EE+uw5iVcgdQYEDYrDMEzuRguqD6IIqEd2+ExXg3/dx/lCwEQE+LIYHeeQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFB58esKVchcwv3E8J+SWP/oOA59cMB8GA1UdIwQY
MBaAFOmSoDW//FpBQSxJfBKF0YOCNP+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlpLZ05iXzhXa0ZCTEVsOEVvWFJnNEkwXzdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81ZjVmNmItMzVlNC00MzkxLTk1MTkt
Yjk3ZDMzNmVhMmY1LzEvSG54NndwVnlGekNfY1R3bjVKWV8tZzREbjF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi81ZjVmNmItMzVlNC00MzkxLTk1MTktYjk3ZDMzNmVhMmY1
LzEvNlpLZ05iXzhXa0ZCTEVsOEVvWFJnNEkwXzdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFTd5AAwQF
V/lgAwQCuUwQAwQE2XJgMA0EAgACMAcDBQAgARVAMA0GCSqGSIb3DQEBCwUAA4IB
AQA6FZER7Bksr8tGUgYtnhL/FhxHNPZnmseb0Sp5vccwxCJ1mhQdNSV4FpzD38yz
u8vrXl1ZBq0JAzk/bB/orSw3ieOw8hSHZtnhLpOKdkViG2wPUEq7l18A5MzJ/Qhi
GUsMJotRQk0V+vkPA1eLX3bNDOdF2t+olJ56+Ho3CwBQTyIgnLobtJgxFBe08jPU
wvU708DEZySz5Ml3NxVQXOZ/BvF2kQIkMzUwqmKvHlbGKZCikuugmkswajnx7vOl
YAJA73J+Y/fO2+1lTt21ZXLrttwyj9NwLWRCqdLdYnb8cfQNaH9tM4fXu7TKgTcu
RqsKH6NHoFGxawQnVaPqBdxK
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:20 2024 by rpki-client on console-ams.rpki-client.org