Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/HXL8IZC_pRbCWiWnaq5K7Ujtpno.roa
File: HXL8IZC_pRbCWiWnaq5K7Ujtpno.roa (raw, json)
Hash identifier: 4HRfYHZxPEpzp3UJp/rdSlLvQzFfH4EqFOMwGYFuYsA=
Subject key identifier: 1D:72:FC:21:90:BF:A5:16:C2:5A:25:A7:6A:AE:4A:ED:48:ED:A6:7A
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018AAD743A9BAD7231EF985E195AEA3C8E45
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/HXL8IZC_pRbCWiWnaq5K7Ujtpno.roa
Signing time: Tue 19 Sep 2023 12:39:50 +0000
ROA not before: Tue 19 Sep 2023 12:39:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 80.87.206.0/24 maxlen: 24
185.162.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:74:3a:9b:ad:72:31:ef:98:5e:19:5a:ea:3c:8e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Sep 19 12:39:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d72fc2190bfa516c25a25a76aae4aed48eda67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:e7:8b:d0:7d:11:0d:3f:45:f9:43:70:89:
80:9d:2a:a8:aa:88:c4:c2:b3:25:ed:1c:e3:47:75:
e2:10:11:57:46:de:ad:33:12:88:3e:78:e8:71:1c:
bd:2c:3c:93:bf:65:01:3e:47:d1:bf:39:e0:c4:7c:
4f:7f:99:05:71:b8:0e:fc:20:1c:c9:10:db:a7:ab:
e4:d5:a1:08:d7:09:1a:ad:43:95:52:b7:55:e0:c5:
ef:46:d0:10:fa:58:35:1f:45:ce:1a:3f:c4:c1:39:
bf:c9:ac:55:cb:d3:c4:31:32:85:f5:18:a3:57:49:
74:5e:66:98:31:bf:15:3a:da:46:b6:a6:19:11:45:
43:72:af:d4:50:00:9d:08:69:e6:e1:a9:91:0e:15:
33:8e:45:bb:70:36:4d:74:3b:b9:22:90:e5:1b:04:
83:75:59:5e:3a:0e:53:2b:8f:c1:53:af:48:cb:61:
24:87:8d:e2:d5:c1:d9:17:86:ea:dc:14:b6:c6:a9:
c0:18:6a:7d:04:b8:a9:81:40:c7:95:23:5e:3c:ba:
42:20:4f:64:ea:99:f3:d1:f9:c8:69:bf:ee:a6:31:
96:fa:08:15:35:d3:c6:c5:fb:c2:37:84:c2:7a:dd:
76:1c:1b:a9:07:7b:8f:71:6e:f8:05:2d:9f:f6:be:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:72:FC:21:90:BF:A5:16:C2:5A:25:A7:6A:AE:4A:ED:48:ED:A6:7A
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/HXL8IZC_pRbCWiWnaq5K7Ujtpno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.87.206.0/24
185.162.235.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b4:38:fe:a1:75:f7:1e:4c:bf:08:d7:c2:43:5b:77:b7:59:
95:7d:cd:7a:64:eb:bc:49:f9:e8:62:11:45:e5:77:ff:f8:48:
26:8f:44:2f:0c:46:b3:71:fc:b5:14:68:37:1a:74:d7:62:0d:
f2:02:12:49:af:53:6f:a1:52:61:8a:a0:99:d6:c0:7c:58:4c:
af:18:a7:7d:34:f7:c8:ad:2e:4d:8c:43:57:ed:93:36:ad:9b:
e2:83:d2:c4:fa:28:88:ee:b2:7f:84:75:a7:03:3f:7d:e2:1b:
d7:6a:7c:f3:fb:29:c0:b5:70:65:26:68:ca:57:db:4d:c1:a1:
90:7f:30:cf:32:d3:8d:91:9d:98:b4:e0:52:9a:07:fe:8e:d2:
52:75:4c:74:75:01:b8:b7:b5:8a:c3:6e:7f:b9:a2:bb:11:70:
00:a0:07:5c:99:86:e1:02:eb:c6:e1:eb:fe:cc:f2:4c:a2:dc:
69:9d:13:0d:ba:e5:05:b3:42:e8:d6:f0:01:86:a2:76:ae:16:
89:a7:96:c1:f3:a5:00:92:07:ab:1f:a3:01:15:43:f6:70:e0:
f7:65:f9:18:e2:61:61:05:1e:8a:3d:39:5e:f8:fc:2f:29:7c:
88:56:0b:56:a1:95:57:48:ff:a6:3f:15:39:d8:ae:4a:25:9f:
0a:dc:a2:71
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqtdDqbrXIx75heGVrqPI5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjMwOTE5MTIzOTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDcyZmMyMTkwYmZhNTE2YzI1YTI1YTc2YWFlNGFlZDQ4ZWRhNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfPni9B9EQ0/RflDcImAnSqoqojE
wrMl7RzjR3XiEBFXRt6tMxKIPnjocRy9LDyTv2UBPkfRvzngxHxPf5kFcbgO/CAc
yRDbp6vk1aEI1wkarUOVUrdV4MXvRtAQ+lg1H0XOGj/EwTm/yaxVy9PEMTKF9Rij
V0l0XmaYMb8VOtpGtqYZEUVDcq/UUACdCGnm4amRDhUzjkW7cDZNdDu5IpDlGwSD
dVleOg5TK4/BU69Iy2Ekh43i1cHZF4bq3BS2xqnAGGp9BLipgUDHlSNePLpCIE9k
6pnz0fnIab/upjGW+ggVNdPGxfvCN4TCet12HBupB3uPcW74BS2f9r5IyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB1y/CGQv6UWwlolp2quSu1I7aZ6MB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvSFhMOElaQ19wUmJDV2lXbmFxNUs3VWp0cG5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUFfOAwQA
uaLrMA0GCSqGSIb3DQEBCwUAA4IBAQBVtDj+oXX3Hky/CNfCQ1t3t1mVfc16ZOu8
SfnoYhFF5Xf/+Egmj0QvDEazcfy1FGg3GnTXYg3yAhJJr1NvoVJhiqCZ1sB8WEyv
GKd9NPfIrS5NjENX7ZM2rZvig9LE+iiI7rJ/hHWnAz994hvXanzz+ynAtXBlJmjK
V9tNwaGQfzDPMtONkZ2YtOBSmgf+jtJSdUx0dQG4t7WKw25/uaK7EXAAoAdcmYbh
AuvG4ev+zPJMotxpnRMNuuUFs0Lo1vABhqJ2rhaJp5bB86UAkgerH6MBFUP2cOD3
ZfkY4mFhBR6KPTle+PwvKXyIVgtWoZVXSP+mPxU52K5KJZ8K3KJx
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:40 2024 by rpki-client on console-ams.rpki-client.org