Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/HSHkk50rfPCLWmn7B-R-KHXLplU.roa
File: HSHkk50rfPCLWmn7B-R-KHXLplU.roa (raw, json)
Hash identifier: VrkgmnSnzj25/QunqMdqIQ4Rl1RO5ooXLLfpt/4wgd4=
Subject key identifier: 1D:21:E4:93:9D:2B:7C:F0:8B:5A:69:FB:07:E4:7E:28:75:CB:A6:55
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 01856FF035EB4F32FF4C98DF664D65168878
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/HSHkk50rfPCLWmn7B-R-KHXLplU.roa
Signing time: Mon 02 Jan 2023 00:44:51 +0000
ROA not before: Mon 02 Jan 2023 00:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47959
IP address blocks: 176.57.64.0/24 maxlen: 24
176.57.64.0/22 maxlen: 22
176.57.66.0/24 maxlen: 24
176.57.65.0/24 maxlen: 24
176.57.67.0/24 maxlen: 24
2a00:1b80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:35:eb:4f:32:ff:4c:98:df:66:4d:65:16:88:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Jan 2 00:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d21e4939d2b7cf08b5a69fb07e47e2875cba655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:6e:ca:11:aa:72:8d:99:dd:08:c9:4e:e7:
dc:5e:21:ec:4c:e3:aa:73:ea:fa:79:ab:42:6f:3e:
dc:d4:2a:40:e1:3e:18:2b:e8:39:24:f8:c0:7d:28:
80:46:8a:53:83:2f:c5:a7:dd:a7:80:57:df:d2:be:
00:fe:9a:bf:20:fa:5f:e4:40:9c:d6:92:b7:ad:e1:
a1:a3:9a:2d:2a:db:7d:e3:07:67:91:e8:6e:de:cf:
70:ce:0c:02:1b:7c:c4:33:3f:e2:86:19:77:ea:7a:
48:61:49:76:f0:f6:b5:17:a3:f4:8c:43:c1:80:7f:
bb:d8:d4:8c:7e:e1:3c:db:e3:3f:25:d8:c8:c9:b9:
bb:51:60:2c:79:e2:da:24:c3:f8:92:57:86:5a:df:
1e:19:15:00:1d:17:ce:0c:ab:7f:e8:bb:6e:2d:a9:
b4:e9:8c:1a:80:e2:44:ea:b9:89:2f:d5:f7:60:3e:
96:86:7d:cb:26:cd:66:3a:25:8f:e5:c4:40:01:ed:
16:10:24:f1:4e:c3:f9:70:1c:a8:2b:4b:c1:e8:6e:
0b:7e:96:ad:c2:71:91:90:b6:91:4d:2b:b6:9a:ac:
41:87:ae:5f:24:60:64:f8:b1:bd:cb:07:43:93:a7:
6a:39:90:a6:aa:7e:33:db:a1:d9:85:b4:77:8a:3d:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:21:E4:93:9D:2B:7C:F0:8B:5A:69:FB:07:E4:7E:28:75:CB:A6:55
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/HSHkk50rfPCLWmn7B-R-KHXLplU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.64.0/22
IPv6:
2a00:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
00:07:57:5a:7e:97:57:17:e4:ca:99:1c:bb:2f:61:af:ce:26:
d2:60:3f:f1:4d:b1:00:1e:f1:1c:b8:b3:51:b7:34:dd:f6:11:
7c:94:1b:cb:07:32:22:76:25:93:66:d7:4a:23:82:c7:b5:40:
a8:17:a5:72:7f:d6:9b:2a:2d:a9:44:c7:30:0a:4c:64:90:4e:
d6:12:f6:05:2b:cb:58:45:13:14:3c:dc:eb:be:e0:dc:81:3e:
cd:68:56:de:3f:15:ef:38:b9:37:a0:e0:a6:ca:ae:97:fc:c2:
9e:9d:ee:e1:0a:59:a9:0e:77:0a:4f:95:c0:90:8a:30:9e:d6:
da:b8:8f:08:19:86:cc:3f:79:9a:5e:2a:94:15:f6:55:24:d7:
12:79:87:92:63:c9:03:ca:cc:2f:e0:0c:d3:cf:9a:60:da:52:
d0:a8:e9:51:02:f1:8a:ce:07:e5:49:a7:14:3f:15:40:b2:f3:
c0:bd:b6:dc:00:af:74:83:ea:cb:17:78:45:dd:ed:72:8f:47:
6d:8b:fb:2c:08:fe:76:cc:df:e7:eb:34:d2:09:45:7d:29:88:
26:79:34:f8:3f:4a:c7:53:f2:f1:e9:f7:cc:a1:69:5f:c1:c9:
a1:6c:a8:7f:05:cb:29:c0:39:5b:bf:17:5d:26:ca:88:93:2f:
b8:69:7d:b1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVv8DXrTzL/TJjfZk1lFoh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzUwOWU3ZWM2OGZlMmQ5NDM0MDdkNWRkMTI2YTBmNTk2
ZjJhYjUwHhcNMjMwMTAyMDA0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDIxZTQ5MzlkMmI3Y2YwOGI1YTY5ZmIwN2U0N2UyODc1Y2JhNjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjduyhGqco2Z3QjJTufcXiHsTOOq
c+r6eatCbz7c1CpA4T4YK+g5JPjAfSiARopTgy/Fp92ngFff0r4A/pq/IPpf5ECc
1pK3reGho5otKtt94wdnkehu3s9wzgwCG3zEMz/ihhl36npIYUl28Pa1F6P0jEPB
gH+72NSMfuE82+M/JdjIybm7UWAseeLaJMP4kleGWt8eGRUAHRfODKt/6LtuLam0
6YwagOJE6rmJL9X3YD6Whn3LJs1mOiWP5cRAAe0WECTxTsP5cByoK0vB6G4Lfpat
wnGRkLaRTSu2mqxBh65fJGBk+LG9ywdDk6dqOZCmqn4z26HZhbR3ij0aNwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFB0h5JOdK3zwi1pp+wfkfih1y6ZVMB8GA1UdIwQY
MBaAFAk1CefsaP4tlDQH1d0Sag9Zbyq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgt
N2Q2OTczMzcxMzdiLzEvSFNIa2s1MHJmUENMV21uN0ItUi1LSFhMcGxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgtN2Q2OTczMzcxMzdi
LzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCsDlAMA0E
AgACMAcDBQMqABuAMA0GCSqGSIb3DQEBCwUAA4IBAQAAB1dafpdXF+TKmRy7L2Gv
zibSYD/xTbEAHvEcuLNRtzTd9hF8lBvLBzIidiWTZtdKI4LHtUCoF6Vyf9abKi2p
RMcwCkxkkE7WEvYFK8tYRRMUPNzrvuDcgT7NaFbePxXvOLk3oOCmyq6X/MKene7h
ClmpDncKT5XAkIowntbauI8IGYbMP3maXiqUFfZVJNcSeYeSY8kDyswv4AzTz5pg
2lLQqOlRAvGKzgflSacUPxVAsvPAvbbcAK90g+rLF3hF3e1yj0dti/ssCP52zN/n
6zTSCUV9KYgmeTT4P0rHU/Lx6ffMoWlfwcmhbKh/BcspwDlbvxddJsqIky+4aX2x
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:44 2024 by rpki-client on console-ams.rpki-client.org