Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/HQvAc1gcFWs9xxDlablTAXKYz4M.roa
File: HQvAc1gcFWs9xxDlablTAXKYz4M.roa (raw, json)
Hash identifier: RP9kMzqqatYr20R+aot9CcQskpS8fX54wi1rbVa5uBs=
Subject key identifier: 1D:0B:C0:73:58:1C:15:6B:3D:C7:10:E5:69:B9:53:01:72:98:CF:83
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 01886B88751EDE562D01B1983F26611EC6BB
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/HQvAc1gcFWs9xxDlablTAXKYz4M.roa
Signing time: Tue 30 May 2023 07:21:24 +0000
ROA not before: Tue 30 May 2023 07:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61156
IP address blocks: 185.17.84.0/22 maxlen: 22
185.17.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:88:75:1e:de:56:2d:01:b1:98:3f:26:61:1e:c6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: May 30 07:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d0bc073581c156b3dc710e569b953017298cf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:30:d8:08:ad:f6:65:a4:b0:ce:6f:11:d1:
45:97:63:8e:a7:99:44:82:56:7d:2b:a2:1b:18:4a:
88:78:7c:f6:df:ec:b7:bc:c9:ef:65:bb:15:d9:10:
09:0a:0e:d4:c0:cd:ac:c4:56:6a:96:1a:5b:ed:e0:
00:4a:83:b7:fc:4e:12:7a:4d:17:54:ea:aa:f3:5c:
00:e3:aa:63:b0:57:d9:22:30:92:20:d2:5e:29:e1:
16:c2:e2:22:2d:aa:c0:2d:c3:78:30:e0:aa:c0:b9:
b1:36:49:49:dc:96:a5:9a:87:72:ce:3b:ce:fc:22:
8e:d4:75:72:4f:50:0f:2c:04:90:19:21:04:44:93:
3c:6d:9b:2b:e4:33:3b:51:5a:15:aa:12:34:17:f2:
3d:f6:d0:be:fc:c3:49:79:4d:73:ab:b8:76:33:5c:
63:d0:1c:e7:d2:96:ae:05:23:2d:0c:ce:4b:4a:ae:
cd:45:27:ac:ea:ce:e6:aa:10:ef:6d:21:cc:84:cc:
53:49:ee:30:e0:dc:c8:44:99:96:8f:04:e8:39:76:
a1:40:00:3c:f3:df:db:a2:3f:94:78:ab:2b:88:63:
b1:ce:3d:36:57:43:a0:d9:64:3d:8f:04:c8:e7:f9:
c4:ff:09:a9:17:0f:67:d3:ec:42:3e:6a:b6:df:a5:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0B:C0:73:58:1C:15:6B:3D:C7:10:E5:69:B9:53:01:72:98:CF:83
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/HQvAc1gcFWs9xxDlablTAXKYz4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.84.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:36:6f:a9:d4:52:b8:fc:07:22:cd:95:3a:8f:c5:06:73:0a:
1f:95:08:d8:e4:4e:72:dc:66:cd:8a:28:c1:38:fb:18:45:b0:
3d:e4:30:af:81:6e:75:b9:e2:02:e9:b9:68:6f:34:e6:91:76:
c4:dc:79:48:e6:39:52:18:36:6d:90:a9:23:13:0a:1f:9b:01:
55:74:48:4f:70:a4:23:94:ae:ef:03:ab:30:fc:90:b7:5d:24:
ab:99:f4:a6:a0:f0:a5:4d:6a:81:b4:ae:43:0d:3a:77:24:1f:
50:78:ae:a4:d0:1f:44:55:f0:00:39:fd:12:3c:7c:3d:c6:d9:
b5:96:9c:92:8b:77:42:34:0a:76:b2:1d:05:45:72:58:7b:a2:
c6:85:09:a2:26:f3:09:9b:01:a2:c0:82:94:99:9e:0c:50:30:
d4:95:8e:4a:9a:0d:7c:85:e7:b1:ac:ae:01:8b:4e:21:92:c2:
dc:d7:0a:9b:15:98:d4:5c:b6:db:8a:47:7b:72:b2:3c:1a:b5:
46:d0:aa:6b:3d:23:b6:78:63:39:5f:3e:df:a9:3b:b1:55:fc:
3b:80:7c:9d:24:de:4f:f8:f2:51:17:fd:34:cc:74:ec:2d:f1:
d4:03:2c:48:d1:dc:8d:65:4b:ea:91:40:c4:cb:7f:2f:f2:62:
42:62:de:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhriHUe3lYtAbGYPyZhHsa7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi
Y2ZhNjEwHhcNMjMwNTMwMDcyMTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDBiYzA3MzU4MWMxNTZiM2RjNzEwZTU2OWI5NTMwMTcyOThjZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu60w2Ait9mWksM5vEdFFl2OOp5lE
glZ9K6IbGEqIeHz23+y3vMnvZbsV2RAJCg7UwM2sxFZqlhpb7eAASoO3/E4Sek0X
VOqq81wA46pjsFfZIjCSINJeKeEWwuIiLarALcN4MOCqwLmxNklJ3JalmodyzjvO
/CKO1HVyT1APLASQGSEERJM8bZsr5DM7UVoVqhI0F/I99tC+/MNJeU1zq7h2M1xj
0Bzn0pauBSMtDM5LSq7NRSes6s7mqhDvbSHMhMxTSe4w4NzIRJmWjwToOXahQAA8
89/boj+UeKsriGOxzj02V0Og2WQ9jwTI5/nE/wmpFw9n0+xCPmq236VulwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0LwHNYHBVrPccQ5Wm5UwFymM+DMB8GA1UdIwQY
MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt
ZGU0YWNmNDQ3ZmFlLzEvSFF2QWMxZ2NGV3M5eHhEbGFibFRBWEtZejRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl
LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRFUMA0G
CSqGSIb3DQEBCwUAA4IBAQDENm+p1FK4/AcizZU6j8UGcwoflQjY5E5y3GbNiijB
OPsYRbA95DCvgW51ueIC6blobzTmkXbE3HlI5jlSGDZtkKkjEwofmwFVdEhPcKQj
lK7vA6sw/JC3XSSrmfSmoPClTWqBtK5DDTp3JB9QeK6k0B9EVfAAOf0SPHw9xtm1
lpySi3dCNAp2sh0FRXJYe6LGhQmiJvMJmwGiwIKUmZ4MUDDUlY5Kmg18heexrK4B
i04hksLc1wqbFZjUXLbbikd7crI8GrVG0KprPSO2eGM5Xz7fqTuxVfw7gHydJN5P
+PJRF/00zHTsLfHUAyxI0dyNZUvqkUDEy38v8mJCYt7+
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org