Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/HnGQwLNHYImDBar8Eh8dXJ5Xlgs.roa
File: HnGQwLNHYImDBar8Eh8dXJ5Xlgs.roa (raw, json)
Hash identifier: hNsKnvT2iridEKjMuJOaPSwgfkPwY3lw8ub5WqWCDl8=
Subject key identifier: 1E:71:90:C0:B3:47:60:89:83:05:AA:FC:12:1F:1D:5C:9E:57:96:0B
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 0187BCEFC0C5CA0F4F8979AD492C730EEB01
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/HnGQwLNHYImDBar8Eh8dXJ5Xlgs.roa
Signing time: Wed 26 Apr 2023 09:40:41 +0000
ROA not before: Wed 26 Apr 2023 09:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199554
IP address blocks: 185.63.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:ef:c0:c5:ca:0f:4f:89:79:ad:49:2c:73:0e:eb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Apr 26 09:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e7190c0b34760898305aafc121f1d5c9e57960b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:38:5e:a2:4e:23:9e:eb:5a:a0:6f:1d:67:
56:92:de:99:af:d4:24:13:bd:3e:ec:80:8f:bc:af:
0b:0c:4c:57:8d:ff:70:58:38:df:4e:21:1d:3e:39:
df:6e:94:04:5d:56:e5:41:65:f2:d0:8d:42:66:d1:
b1:86:65:bb:6a:27:d0:c1:e0:35:49:bc:3f:e2:46:
4b:76:99:d3:4e:bd:18:20:7d:5e:77:44:6a:dd:f5:
48:af:98:e0:72:36:24:43:b2:da:a1:ec:c7:85:7d:
23:9e:5b:47:e5:ca:7b:bf:f8:5c:f1:28:65:fb:0e:
bc:64:3f:45:9b:79:af:bf:c1:20:87:5b:19:0d:fe:
4d:71:b2:ab:c7:e0:bc:ca:3f:81:4c:f3:cf:36:ff:
8e:fd:e8:36:89:7d:d5:13:f3:96:8d:1f:de:f2:af:
3e:ce:74:42:3b:c3:53:d9:63:20:21:6d:42:a2:a6:
da:0c:f4:f2:cd:5f:09:dc:84:3d:79:01:dd:41:ed:
38:3e:31:d2:20:f7:9b:d0:54:98:d1:5a:ad:6d:a5:
4b:ab:2b:6d:cf:08:cf:63:5c:c1:b9:a4:86:50:ef:
11:22:ec:7c:5d:25:ff:3b:ec:b3:bb:0d:2b:06:4b:
6f:25:22:25:ae:0a:ff:cd:c2:58:c5:97:b6:bb:f9:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:71:90:C0:B3:47:60:89:83:05:AA:FC:12:1F:1D:5C:9E:57:96:0B
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/HnGQwLNHYImDBar8Eh8dXJ5Xlgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.149.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:9f:ba:17:f4:1b:61:37:fd:cf:d6:c6:d7:ad:15:ff:47:77:
77:aa:a6:9e:e0:78:67:6d:ac:eb:49:e8:10:36:fc:ae:aa:b6:
f0:a2:0f:bb:4b:86:1c:78:c5:85:33:f9:53:0d:da:60:1c:fe:
fa:af:96:b9:17:ae:da:06:82:14:75:ae:f0:11:51:75:ee:b4:
3b:fd:9b:0b:40:3c:b8:6a:f1:f2:6c:bb:fd:f8:67:76:31:1b:
7e:f0:6e:ee:00:54:48:2d:50:7e:46:4b:48:ba:5d:3a:de:4e:
2e:f2:91:42:78:bf:96:37:21:a8:09:f3:b9:ec:1f:cb:91:73:
69:3c:50:3a:aa:93:8b:1c:5a:7e:fe:bb:2d:54:0d:22:b8:0c:
c7:9c:54:bc:4b:49:25:bc:40:4d:80:56:3d:b3:e9:7a:fc:72:
6f:01:d5:ec:9e:90:8c:28:24:8d:2f:4e:87:32:1e:08:2d:10:
1f:7f:6d:5b:0c:83:59:7e:41:2e:08:56:8f:67:87:91:b8:bd:
78:1b:5f:5e:ff:1b:f4:98:05:af:5b:60:8f:b4:9d:bd:f0:08:
cd:6c:b5:b5:9c:14:78:4b:c0:45:ce:8a:54:4c:c8:44:b3:ff:
bc:3c:66:64:3a:69:65:29:07:af:66:26:03:78:9c:e9:3c:78:
37:ad:39:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYe878DFyg9PiXmtSSxzDusBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm
ZDUzYWUwHhcNMjMwNDI2MDk0MDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTcxOTBjMGIzNDc2MDg5ODMwNWFhZmMxMjFmMWQ1YzllNTc5NjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbM4XqJOI57rWqBvHWdWkt6Zr9Qk
E70+7ICPvK8LDExXjf9wWDjfTiEdPjnfbpQEXVblQWXy0I1CZtGxhmW7aifQweA1
Sbw/4kZLdpnTTr0YIH1ed0Rq3fVIr5jgcjYkQ7LaoezHhX0jnltH5cp7v/hc8Shl
+w68ZD9Fm3mvv8Egh1sZDf5NcbKrx+C8yj+BTPPPNv+O/eg2iX3VE/OWjR/e8q8+
znRCO8NT2WMgIW1CoqbaDPTyzV8J3IQ9eQHdQe04PjHSIPeb0FSY0VqtbaVLqytt
zwjPY1zBuaSGUO8RIux8XSX/O+yzuw0rBktvJSIlrgr/zcJYxZe2u/mlfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB5xkMCzR2CJgwWq/BIfHVyeV5YLMB8GA1UdIwQY
MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt
OGVlMjFiNzRkZDU2LzEvSG5HUXdMTkhZSW1EQmFyOEVoOGRYSjVYbGdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2
LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT+VMA0G
CSqGSIb3DQEBCwUAA4IBAQAbn7oX9BthN/3P1sbXrRX/R3d3qqae4HhnbazrSegQ
Nvyuqrbwog+7S4YceMWFM/lTDdpgHP76r5a5F67aBoIUda7wEVF17rQ7/ZsLQDy4
avHybLv9+Gd2MRt+8G7uAFRILVB+RktIul063k4u8pFCeL+WNyGoCfO57B/LkXNp
PFA6qpOLHFp+/rstVA0iuAzHnFS8S0klvEBNgFY9s+l6/HJvAdXsnpCMKCSNL06H
Mh4ILRAff21bDINZfkEuCFaPZ4eRuL14G19e/xv0mAWvW2CPtJ298AjNbLW1nBR4
S8BFzopUTMhEs/+8PGZkOmllKQevZiYDeJzpPHg3rTn1
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:27 2023 by rpki-client on console-ams.rpki-client.org