Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/xRk6s-LicZrPiCDwMJUzFzR4gow.roa
File: xRk6s-LicZrPiCDwMJUzFzR4gow.roa (raw, json)
Hash identifier: VrPQ2V9tPtZQSYSQ9H6u/7Tjr+lTAh0nmy64RA8/MWk=
Subject key identifier: C5:19:3A:B3:E2:E2:71:9A:CF:88:20:F0:30:95:33:17:34:78:82:8C
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 01856EAFBEADC5E6DE4AA34AF8FC1D08C6AC
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/xRk6s-LicZrPiCDwMJUzFzR4gow.roa
Signing time: Sun 01 Jan 2023 18:54:49 +0000
ROA not before: Sun 01 Jan 2023 18:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34308
IP address blocks: 84.246.248.0/21 maxlen: 24
185.63.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:be:ad:c5:e6:de:4a:a3:4a:f8:fc:1d:08:c6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Jan 1 18:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5193ab3e2e2719acf8820f0309533173478828c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:4b:63:15:58:95:2f:7a:3c:31:c1:8a:ab:
9e:2f:a8:5e:10:04:46:06:1a:57:59:76:df:80:60:
63:f7:8e:70:3c:20:bc:ae:2c:74:7b:03:ba:3e:57:
93:c5:26:95:43:7e:12:8d:e0:71:32:a1:4f:05:9a:
0b:a1:d3:68:cb:5f:93:87:52:77:43:33:cf:2b:d5:
33:e5:cf:e6:71:c6:da:c6:33:ac:3a:01:3a:b8:8d:
0e:b3:5b:f8:f3:93:f5:cb:39:5a:81:ea:70:05:7b:
e4:eb:91:82:ce:7b:98:0f:2b:df:9c:33:8f:ae:3e:
f8:2c:98:a9:af:c7:1c:0e:64:f3:ed:98:22:ac:23:
fe:0f:48:ae:fb:fb:f8:3e:31:32:df:cd:f5:83:62:
26:54:f4:fb:09:e3:a2:33:2e:a8:7d:4b:9d:ef:12:
9f:6f:39:66:e7:90:9c:00:03:de:43:36:64:cb:7b:
16:6f:db:5c:25:57:b3:80:cf:75:af:9a:cf:5e:8c:
00:ee:5e:e4:3b:be:f5:0b:45:a1:2a:97:41:a8:13:
c0:96:90:bd:51:b6:5e:f6:a0:c1:56:03:bf:84:a3:
15:18:71:52:4b:05:37:81:6f:38:1e:89:3e:c0:08:
62:89:78:81:a9:e0:86:8d:c2:3e:55:22:e4:bb:32:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:19:3A:B3:E2:E2:71:9A:CF:88:20:F0:30:95:33:17:34:78:82:8C
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/xRk6s-LicZrPiCDwMJUzFzR4gow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.248.0/21
185.63.212.0/22
Signature Algorithm: sha256WithRSAEncryption
65:54:8a:a5:8e:bb:dd:ec:0e:9a:41:44:4d:1b:c2:61:2f:84:
22:c9:b3:aa:41:29:cd:97:53:db:83:79:ad:88:50:42:6c:e5:
1e:ba:ae:76:88:56:a7:7d:38:98:89:b7:9d:9a:71:f5:69:f4:
69:4c:9c:3d:f0:3a:6f:66:2d:0c:b1:73:c1:34:06:c6:88:f1:
f6:22:4a:95:9a:7d:4b:35:5d:c4:39:de:82:5a:49:78:2a:8f:
8c:09:e6:2a:a9:70:5a:00:9c:03:1e:e7:37:cb:90:dc:9f:a0:
4e:c5:e0:84:3f:15:9e:e3:31:48:95:29:ba:95:81:de:a6:1d:
eb:c5:d0:41:86:4c:b5:4e:71:2c:13:59:0c:83:87:5c:54:c8:
03:ac:1c:6d:15:05:7a:97:1b:40:67:76:d8:ab:fd:68:de:07:
f7:12:06:aa:c6:97:9f:4a:81:e6:aa:6c:bb:18:4e:26:58:82:
92:6b:32:1e:ad:82:3e:ae:10:e1:35:f5:41:16:91:b5:3f:cd:
fd:a7:e0:f3:2e:80:5d:26:9f:a5:fe:b2:b5:39:14:75:db:27:
b0:8b:ab:52:a3:a1:05:9c:4b:3c:a3:95:2d:43:10:cf:a5:6f:
8f:0a:07:86:22:5b:56:d4:88:ec:e5:7f:76:99:32:b3:1b:68:
11:93:dc:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVur76txebeSqNK+PwdCMasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYTQ3NWQwOGI2ZjhiNzhlZDExYjBjYTRkMTM2ZGViMzhi
Yzk5MWIwHhcNMjMwMTAxMTg1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTE5M2FiM2UyZTI3MTlhY2Y4ODIwZjAzMDk1MzMxNzM0Nzg4MjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5hLYxVYlS96PDHBiqueL6heEARG
BhpXWXbfgGBj945wPCC8rix0ewO6PleTxSaVQ34SjeBxMqFPBZoLodNoy1+Th1J3
QzPPK9Uz5c/mccbaxjOsOgE6uI0Os1v485P1yzlagepwBXvk65GCznuYDyvfnDOP
rj74LJipr8ccDmTz7ZgirCP+D0iu+/v4PjEy3831g2ImVPT7CeOiMy6ofUud7xKf
bzlm55CcAAPeQzZky3sWb9tcJVezgM91r5rPXowA7l7kO771C0WhKpdBqBPAlpC9
UbZe9qDBVgO/hKMVGHFSSwU3gW84Hok+wAhiiXiBqeCGjcI+VSLkuzKM4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMUZOrPi4nGaz4gg8DCVMxc0eIKMMB8GA1UdIwQY
MBaAFO6kddCLb4t47RGwyk0Tbes4vJkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQt
MzZlMzlmZWQ3YmVkLzEveFJrNnMtTGljWnJQaUNEd01KVXpGelI0Z293LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQtMzZlMzlmZWQ3YmVk
LzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVPb4AwQC
uT/UMA0GCSqGSIb3DQEBCwUAA4IBAQBlVIqljrvd7A6aQURNG8JhL4QiybOqQSnN
l1Pbg3mtiFBCbOUeuq52iFanfTiYibedmnH1afRpTJw98DpvZi0MsXPBNAbGiPH2
IkqVmn1LNV3EOd6CWkl4Ko+MCeYqqXBaAJwDHuc3y5Dcn6BOxeCEPxWe4zFIlSm6
lYHeph3rxdBBhky1TnEsE1kMg4dcVMgDrBxtFQV6lxtAZ3bYq/1o3gf3Egaqxpef
SoHmqmy7GE4mWIKSazIerYI+rhDhNfVBFpG1P839p+DzLoBdJp+l/rK1ORR12yew
i6tSo6EFnEs8o5UtQxDPpW+PCgeGIltW1Ijs5X92mTKzG2gRk9wz
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:38 2024 by rpki-client on console-ams.rpki-client.org