Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HC6eC3rYV2mI2KkKO63GzKTyjH0.roa
File: HC6eC3rYV2mI2KkKO63GzKTyjH0.roa (raw, json)
Hash identifier: lrqGT6TaSGaG3BZ27fzM5+x4XSpzOlN0EBqqZqbdt78=
Subject key identifier: 1C:2E:9E:0B:7A:D8:57:69:88:D8:A9:0A:3B:AD:C6:CC:A4:F2:8C:7D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAFD0B7DE3E9C62F6D20760B7D85C5
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HC6eC3rYV2mI2KkKO63GzKTyjH0.roa
Signing time: Sun 01 Jan 2023 10:05:20 +0000
ROA not before: Sun 01 Jan 2023 10:05:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62313
IP address blocks: 192.165.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fd:0b:7d:e3:e9:c6:2f:6d:20:76:0b:7d:85:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c2e9e0b7ad8576988d8a90a3badc6cca4f28c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:81:4e:02:ee:3e:21:4a:0e:93:17:eb:3d:
db:7b:ff:ab:56:8c:31:f5:5a:72:97:f6:c2:25:28:
09:e7:91:92:c0:0c:0b:dc:f1:f5:b6:39:f9:b3:23:
2c:4e:bc:82:69:69:07:dc:23:86:52:e1:b2:53:12:
5a:0e:fb:ac:4e:09:2a:83:f0:44:f5:62:50:ef:e5:
53:73:b5:65:dd:ad:d9:f5:f6:3e:3b:a6:76:4b:5a:
89:ba:2a:ec:08:2e:23:e9:5a:05:67:e8:68:1b:50:
41:9d:9d:ce:c6:19:12:40:2d:ce:5c:fd:09:3e:46:
0a:aa:ab:0a:d0:51:d1:43:54:b5:82:46:04:e8:31:
ed:28:34:da:a8:db:03:5c:70:9b:dc:97:56:1b:b2:
d2:17:b1:ab:e6:10:71:37:36:c0:86:ce:96:20:73:
f1:b2:c1:f7:92:92:52:60:e4:b7:55:53:5e:a3:73:
1f:e5:f3:28:93:9c:22:38:0d:d6:2a:2a:34:a4:c2:
c0:3c:0a:f3:7a:41:46:d1:bc:72:5b:26:0f:aa:f7:
cb:5c:ad:e0:fa:9c:76:41:ac:e0:79:b3:20:22:45:
73:fc:2e:cc:7c:02:26:8e:e2:f7:6f:2e:41:58:23:
86:81:a2:3c:50:79:5b:c1:50:f3:94:5b:f8:8d:32:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2E:9E:0B:7A:D8:57:69:88:D8:A9:0A:3B:AD:C6:CC:A4:F2:8C:7D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HC6eC3rYV2mI2KkKO63GzKTyjH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.83.0/24
Signature Algorithm: sha256WithRSAEncryption
94:08:7f:a2:66:ff:6d:6e:04:a1:20:ec:d9:bc:7d:49:6f:7b:
ae:e8:91:83:b4:8a:cf:e0:c6:4c:92:ad:e4:34:67:77:d2:b0:
93:b4:06:f0:44:93:7d:3f:55:e1:7d:08:f9:f3:cd:5b:31:b5:
44:f6:31:77:b5:e9:55:ab:61:97:65:1a:f3:d1:e0:29:c0:b2:
17:60:2f:8f:f5:7b:75:d4:1c:73:a7:c6:8c:48:20:26:37:c0:
1c:70:0e:db:8e:4e:d7:3b:76:e9:52:98:3b:9f:7d:0a:a2:3b:
95:43:06:ac:7e:8a:0b:b3:be:fb:eb:bb:24:c5:04:d5:f8:41:
08:ac:f0:a2:bb:10:22:49:99:18:f9:60:90:bb:f5:2b:6d:85:
d4:be:a4:20:28:1d:c1:6c:a7:73:96:f1:03:08:19:f5:d6:9c:
d1:cb:da:04:16:96:f5:3b:cf:1e:0d:04:e1:a5:1d:fe:e4:41:
bf:3c:6f:a4:85:1b:8b:1d:73:89:ef:bc:dc:b7:38:b5:e9:b6:
2f:07:c7:87:69:13:f0:8d:ea:b6:8e:a9:e2:aa:e5:ec:cf:e7:
4c:b1:4f:e8:0e:40:60:13:e7:57:3d:61:11:13:f6:6b:22:e7:
a7:c5:92:91:42:f5:69:dd:f9:26:4d:a2:1d:93:f9:5b:3f:a2:
71:b8:11:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsyv0LfePpxi9tIHYLfYXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzJlOWUwYjdhZDg1NzY5ODhkOGE5MGEzYmFkYzZjY2E0ZjI4YzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsKBTgLuPiFKDpMX6z3be/+rVowx
9Vpyl/bCJSgJ55GSwAwL3PH1tjn5syMsTryCaWkH3COGUuGyUxJaDvusTgkqg/BE
9WJQ7+VTc7Vl3a3Z9fY+O6Z2S1qJuirsCC4j6VoFZ+hoG1BBnZ3OxhkSQC3OXP0J
PkYKqqsK0FHRQ1S1gkYE6DHtKDTaqNsDXHCb3JdWG7LSF7Gr5hBxNzbAhs6WIHPx
ssH3kpJSYOS3VVNeo3Mf5fMok5wiOA3WKio0pMLAPArzekFG0bxyWyYPqvfLXK3g
+px2QazgebMgIkVz/C7MfAImjuL3by5BWCOGgaI8UHlbwVDzlFv4jTJQ+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwungt62FdpiNipCjutxsyk8ox9MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvSEM2ZUMzcllWMm1JMktrS082M0d6S1R5akgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKVTMA0G
CSqGSIb3DQEBCwUAA4IBAQCUCH+iZv9tbgShIOzZvH1Jb3uu6JGDtIrP4MZMkq3k
NGd30rCTtAbwRJN9P1XhfQj5881bMbVE9jF3telVq2GXZRrz0eApwLIXYC+P9Xt1
1Bxzp8aMSCAmN8AccA7bjk7XO3bpUpg7n30KojuVQwasfooLs77767skxQTV+EEI
rPCiuxAiSZkY+WCQu/UrbYXUvqQgKB3BbKdzlvEDCBn11pzRy9oEFpb1O88eDQTh
pR3+5EG/PG+khRuLHXOJ77zctzi16bYvB8eHaRPwjeq2jqniquXsz+dMsU/oDkBg
E+dXPWERE/ZrIuenxZKRQvVp3fkmTaIdk/lbP6JxuBEb
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org