Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/HcXjp19NrJK2Z-TwgIaluI5Hzkw.roa
File: HcXjp19NrJK2Z-TwgIaluI5Hzkw.roa (raw, json)
Hash identifier: vCQbDhNpHn0fqITLcTqKc2eyAfVV6DociyN1lAednXo=
Subject key identifier: 1D:C5:E3:A7:5F:4D:AC:92:B6:67:E4:F0:80:86:A5:B8:8E:47:CE:4C
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 018B4749E32D170071198BCC0E479C0446A7
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/HcXjp19NrJK2Z-TwgIaluI5Hzkw.roa
Signing time: Thu 19 Oct 2023 09:35:06 +0000
ROA not before: Thu 19 Oct 2023 09:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 194.124.142.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:49:e3:2d:17:00:71:19:8b:cc:0e:47:9c:04:46:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Oct 19 09:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dc5e3a75f4dac92b667e4f08086a5b88e47ce4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:f4:a2:cd:aa:09:1a:c2:40:c2:93:52:ff:
b3:e6:e5:8a:79:07:a5:f6:c5:ba:18:91:21:4a:78:
a6:68:0a:01:f1:8b:f9:97:9b:64:7f:a2:27:49:08:
c5:a7:62:2f:6a:d1:3c:7e:19:d5:1a:aa:d0:65:ed:
cb:bf:35:fa:c3:c4:70:54:0a:a0:04:1b:0a:33:7a:
55:10:a9:2d:a4:c6:fe:e3:48:99:fe:53:4b:06:c1:
84:c8:2f:3c:86:4b:fc:10:ef:84:17:0f:30:e9:6d:
de:b4:d2:a6:2b:28:b3:65:2d:5d:c5:24:a7:b9:60:
14:fa:88:87:56:0e:68:0e:ef:b2:55:71:64:66:72:
3c:7a:67:2a:fc:23:b6:45:b9:c4:0d:4d:ea:bb:d1:
d0:40:b8:19:a6:3e:45:87:7b:ee:54:24:d2:43:40:
e8:ec:3b:e2:78:72:fc:cb:ce:e7:e0:1b:f3:80:50:
10:7a:f9:b6:28:e5:2f:59:0a:7a:81:c4:ae:21:9d:
b2:8f:4d:02:68:b7:f1:04:66:8b:6f:c9:99:b1:88:
63:6c:78:41:8b:4b:3e:9d:48:c5:21:c6:12:ec:d2:
0a:1d:ce:ac:5d:90:b8:d5:57:16:57:f8:d3:6d:ae:
fb:bf:67:70:cd:af:af:33:21:be:0a:63:82:d6:94:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C5:E3:A7:5F:4D:AC:92:B6:67:E4:F0:80:86:A5:B8:8E:47:CE:4C
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/HcXjp19NrJK2Z-TwgIaluI5Hzkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.142.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:29:89:83:25:00:40:98:0f:c4:b7:11:30:ca:64:65:79:bf:
82:5c:b0:fa:7e:12:2c:25:9b:83:fa:b2:d4:90:30:12:c2:0d:
05:c5:7e:90:5f:a2:fd:b4:34:8d:27:c9:7c:a0:c4:a6:22:d6:
54:e0:40:88:56:85:44:05:d8:c6:49:6b:c3:06:0b:3b:7d:7f:
4c:e1:39:53:42:78:e8:ac:6d:bc:50:b4:95:89:82:12:51:4e:
9d:7f:b3:cf:51:fd:17:c7:17:82:d2:c2:7b:c2:7e:7f:a4:5e:
c9:8f:d1:6c:ae:50:0a:37:7c:d9:43:3f:56:4f:c1:ef:4a:ff:
9e:ef:79:d6:b7:bb:ce:ab:63:89:90:77:f5:37:15:cd:26:49:
f4:c2:0d:d3:37:a8:a6:f9:f4:93:73:1f:09:86:99:39:d8:eb:
f6:2a:80:77:6b:b9:f0:3b:2d:81:02:cf:bb:78:d4:ce:44:8a:
e1:a5:8f:a5:26:61:27:85:a3:fb:dd:26:3e:3e:c4:57:56:23:
2f:ee:29:34:70:9c:9f:ac:c4:17:be:69:6b:66:6d:7d:96:14:
f6:9e:fd:76:00:a7:b1:c4:db:7f:30:3a:88:d6:be:58:cf:3b:
05:08:17:a7:52:24:9a:0d:6a:e1:f9:a3:f2:ae:c8:bd:96:ce:
53:ff:e7:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtHSeMtFwBxGYvMDkecBEanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YmI1NTIzNjU0OTljMDdhZWQzNGI2ODg0ZjViMmU5Mzgw
ZWJlZTEwHhcNMjMxMDE5MDkzNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGM1ZTNhNzVmNGRhYzkyYjY2N2U0ZjA4MDg2YTViODhlNDdjZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw/0os2qCRrCQMKTUv+z5uWKeQel
9sW6GJEhSnimaAoB8Yv5l5tkf6InSQjFp2IvatE8fhnVGqrQZe3LvzX6w8RwVAqg
BBsKM3pVEKktpMb+40iZ/lNLBsGEyC88hkv8EO+EFw8w6W3etNKmKyizZS1dxSSn
uWAU+oiHVg5oDu+yVXFkZnI8emcq/CO2RbnEDU3qu9HQQLgZpj5Fh3vuVCTSQ0Do
7DvieHL8y87n4BvzgFAQevm2KOUvWQp6gcSuIZ2yj00CaLfxBGaLb8mZsYhjbHhB
i0s+nUjFIcYS7NIKHc6sXZC41VcWV/jTba77v2dwza+vMyG+CmOC1pRtuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB3F46dfTayStmfk8ICGpbiOR85MMB8GA1UdIwQY
MBaAFNe7VSNlSZwHrtNLaIT1suk4Dr7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUt
M2ViZDQ1NWFjMmFlLzEvSGNYanAxOU5ySksyWi1Ud2dJYWx1STVIemt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUtM2ViZDQ1NWFjMmFl
LzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnyOMA0G
CSqGSIb3DQEBCwUAA4IBAQCNKYmDJQBAmA/EtxEwymRleb+CXLD6fhIsJZuD+rLU
kDASwg0FxX6QX6L9tDSNJ8l8oMSmItZU4ECIVoVEBdjGSWvDBgs7fX9M4TlTQnjo
rG28ULSViYISUU6df7PPUf0XxxeC0sJ7wn5/pF7Jj9FsrlAKN3zZQz9WT8HvSv+e
73nWt7vOq2OJkHf1NxXNJkn0wg3TN6im+fSTcx8Jhpk52Ov2KoB3a7nwOy2BAs+7
eNTORIrhpY+lJmEnhaP73SY+PsRXViMv7ik0cJyfrMQXvmlrZm19lhT2nv12AKex
xNt/MDqI1r5YzzsFCBenUiSaDWrh+aPyrsi9ls5T/+em
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:16 2024 by rpki-client on console.sobornost.net