Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/HYa67qbbjSPGTnDsuKUVXRcZDJY.roa
File: HYa67qbbjSPGTnDsuKUVXRcZDJY.roa (raw, json)
Hash identifier: GdHs7kPge14FNq8/gCe8PnoKXNIGEnOtJK6gd1MyFXk=
Subject key identifier: 1D:86:BA:EE:A6:DB:8D:23:C6:4E:70:EC:B8:A5:15:5D:17:19:0C:96
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 01893AAFDFB2F561FBA9C43AE3BA5FBE7F46
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/HYa67qbbjSPGTnDsuKUVXRcZDJY.roa
Signing time: Sun 09 Jul 2023 12:45:51 +0000
ROA not before: Sun 09 Jul 2023 12:45:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208520
IP address blocks: 45.94.14.0/24 maxlen: 24
2001:1497:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:af:df:b2:f5:61:fb:a9:c4:3a:e3:ba:5f:be:7f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jul 9 12:45:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d86baeea6db8d23c64e70ecb8a5155d17190c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:15:e6:fc:fb:96:8b:bf:5f:89:2a:57:83:
d1:4d:38:3d:95:80:9b:a4:c6:85:9f:71:e1:33:5b:
5f:36:8d:a3:96:86:a6:c3:34:96:66:de:30:1d:aa:
29:53:1d:0a:ed:51:ae:52:5d:58:57:ae:f5:68:70:
53:30:68:26:83:49:bc:45:f2:fd:36:57:0e:50:d1:
06:f0:d6:ee:85:5a:a4:da:0d:5e:4a:af:b5:91:67:
92:27:0f:27:44:8c:8e:aa:64:07:91:46:7f:e7:f5:
8d:49:39:03:8d:84:2c:aa:f7:ba:6d:34:48:7e:9a:
4f:42:1e:36:38:86:8e:0c:b2:7c:f9:35:78:97:9a:
fb:c0:0a:54:67:ef:20:c4:72:89:e2:d7:28:29:3d:
6b:48:3e:3d:63:39:00:0b:0f:e2:2e:53:ec:2b:02:
a8:f9:b5:97:3c:f2:cb:01:3f:d9:61:47:96:e0:ef:
05:c0:1e:9c:42:b0:99:40:03:28:89:8e:e0:5a:05:
25:30:06:a1:32:5c:78:d6:a6:2c:49:65:8e:c2:8f:
68:70:f8:fa:fb:4b:2b:b3:8b:64:ef:d0:4b:f0:05:
e0:a5:f9:ce:75:6a:60:3a:d2:ae:7d:31:88:03:85:
1d:dd:72:e8:af:19:f4:21:d6:4e:11:6e:e8:17:5f:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:BA:EE:A6:DB:8D:23:C6:4E:70:EC:B8:A5:15:5D:17:19:0C:96
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/HYa67qbbjSPGTnDsuKUVXRcZDJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.14.0/24
IPv6:
2001:1497:2::/48
Signature Algorithm: sha256WithRSAEncryption
bf:4f:75:5b:25:20:01:3e:df:41:7b:0f:3d:84:a9:db:41:04:
7c:c9:87:7b:1f:1b:71:51:b3:fb:0f:21:40:7e:40:35:3a:c0:
07:37:db:af:d7:73:7d:e5:f4:ca:20:46:1f:90:c5:e1:c3:e8:
29:96:73:85:d8:59:02:b0:c0:f7:59:e7:0f:c5:e9:16:1b:d1:
eb:5e:a2:92:1e:42:60:23:45:93:31:c1:1e:8b:61:65:c0:7a:
60:2c:33:43:16:2e:46:e4:e2:6e:21:26:67:e1:40:9a:4a:8a:
a9:e7:c8:9c:18:2b:7e:6a:86:ee:f3:30:f5:06:48:b3:26:db:
8f:4e:29:f3:f1:7b:5c:e3:36:0d:06:89:b5:48:de:21:a4:1a:
4c:f3:21:70:26:cb:fc:19:ac:ed:be:9c:9d:b8:72:18:e4:16:
94:5a:4a:83:33:92:48:a7:6b:c7:4c:94:b2:13:ff:bd:80:a3:
b4:34:00:48:ee:8d:30:06:1a:7d:19:c0:f0:6f:fe:f0:88:ec:
07:ce:e7:38:ca:22:1a:93:ea:ea:eb:8e:65:69:ea:20:00:8d:
91:c0:83:84:34:85:47:2c:bd:e2:20:51:71:cb:b4:c1:92:f1:
0e:9e:c5:8f:fd:2b:fa:63:76:70:68:86:86:6b:be:39:3a:9a:
38:99:a9:de
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYk6r9+y9WH7qcQ647pfvn9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjMwNzA5MTI0NTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDg2YmFlZWE2ZGI4ZDIzYzY0ZTcwZWNiOGE1MTU1ZDE3MTkwYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMQV5vz7lou/X4kqV4PRTTg9lYCb
pMaFn3HhM1tfNo2jloamwzSWZt4wHaopUx0K7VGuUl1YV671aHBTMGgmg0m8RfL9
NlcOUNEG8NbuhVqk2g1eSq+1kWeSJw8nRIyOqmQHkUZ/5/WNSTkDjYQsqve6bTRI
fppPQh42OIaODLJ8+TV4l5r7wApUZ+8gxHKJ4tcoKT1rSD49YzkACw/iLlPsKwKo
+bWXPPLLAT/ZYUeW4O8FwB6cQrCZQAMoiY7gWgUlMAahMlx41qYsSWWOwo9ocPj6
+0srs4tk79BL8AXgpfnOdWpgOtKufTGIA4Ud3XLorxn0IdZOEW7oF1/UFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB2Guu6m240jxk5w7LilFV0XGQyWMB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvSFlhNjdxYmJqU1BHVG5Ec3VLVVZYUmNaREpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALV4OMA8E
AgACMAkDBwAgARSXAAIwDQYJKoZIhvcNAQELBQADggEBAL9PdVslIAE+30F7Dz2E
qdtBBHzJh3sfG3FRs/sPIUB+QDU6wAc326/Xc33l9MogRh+QxeHD6CmWc4XYWQKw
wPdZ5w/F6RYb0eteopIeQmAjRZMxwR6LYWXAemAsM0MWLkbk4m4hJmfhQJpKiqnn
yJwYK35qhu7zMPUGSLMm249OKfPxe1zjNg0GibVI3iGkGkzzIXAmy/wZrO2+nJ24
chjkFpRaSoMzkkina8dMlLIT/72Ao7Q0AEjujTAGGn0ZwPBv/vCI7AfO5zjKIhqT
6urrjmVp6iAAjZHAg4Q0hUcsveIgUXHLtMGS8Q6exY/9K/pjdnBohoZrvjk6mjiZ
qd4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org