Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/5B6SlmaGwMeLgRDyWA8JMOruwe4.roa
File: 5B6SlmaGwMeLgRDyWA8JMOruwe4.roa (raw, json)
Hash identifier: MBBoBSelgWFQrhI81T/ZcqI/rK3epsUMasS2aFvMQTI=
Subject key identifier: E4:1E:92:96:66:86:C0:C7:8B:81:10:F2:58:0F:09:30:EA:EE:C1:EE
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 0185708CB1A56859F3A4C541073032A0C581
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/5B6SlmaGwMeLgRDyWA8JMOruwe4.roa
Signing time: Mon 02 Jan 2023 03:35:46 +0000
ROA not before: Mon 02 Jan 2023 03:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29997
IP address blocks: 194.62.183.0/24 maxlen: 24
194.62.180.0/24 maxlen: 24
194.62.182.0/24 maxlen: 24
194.62.181.0/24 maxlen: 24
2a07:dc00:1820::/44 maxlen: 44
2a07:dc00:2550::/44 maxlen: 44
2a07:dc00:1830::/44 maxlen: 44
2a07:dc00:1810::/44 maxlen: 44
2a07:dc00:180::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:b1:a5:68:59:f3:a4:c5:41:07:30:32:a0:c5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Jan 2 03:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e41e92966686c0c78b8110f2580f0930eaeec1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:a2:ea:ff:75:18:9a:d1:c4:1e:31:ab:e6:
39:f9:36:2c:9b:14:f4:72:70:56:e8:02:f0:95:25:
06:06:68:93:ca:0a:fe:9d:68:ac:f1:d1:59:46:95:
87:d6:79:06:c7:45:42:87:c1:da:18:5f:10:aa:60:
96:97:6d:89:da:ec:76:c8:ad:54:66:b6:7c:d7:16:
6a:15:0f:c5:cd:a4:cf:f8:2e:35:c1:a2:c8:6a:b7:
0c:de:0b:dd:4b:2f:c2:66:d8:2d:34:ad:81:6b:3c:
15:be:67:d9:13:58:5b:fc:1f:16:c3:eb:c4:32:41:
ea:03:3f:35:8d:70:d7:bb:91:9e:b0:7d:bf:0d:5d:
06:7a:56:21:1f:64:bf:87:22:7d:28:fe:3c:37:ed:
6c:6b:5d:b2:72:cc:30:2d:0c:7c:4b:66:fd:85:b3:
b1:0a:d2:4b:89:94:10:fc:e8:19:0c:ff:c6:c8:1a:
c5:cd:91:ac:76:2b:a8:3b:e5:e5:47:8c:75:f5:15:
49:5b:9a:5d:64:ad:c2:ac:e3:97:1a:df:b7:aa:63:
5b:a8:03:e1:71:d7:94:c8:4a:11:34:07:5b:a7:de:
94:48:43:1b:09:6c:f1:12:ba:40:18:d0:b5:d6:8e:
3e:3d:8b:dc:84:86:bd:c7:52:2d:9a:a9:10:62:3d:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1E:92:96:66:86:C0:C7:8B:81:10:F2:58:0F:09:30:EA:EE:C1:EE
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/5B6SlmaGwMeLgRDyWA8JMOruwe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.180.0/22
IPv6:
2a07:dc00:180::/44
2a07:dc00:1810::-2a07:dc00:183f:ffff:ffff:ffff:ffff:ffff
2a07:dc00:2550::/44
Signature Algorithm: sha256WithRSAEncryption
b7:f1:85:ec:b3:13:48:9a:b8:58:0b:7e:7c:d4:65:30:34:fc:
e2:6f:46:cb:5e:e4:67:87:84:4f:dc:a7:8b:eb:aa:de:3f:cb:
39:58:3c:fc:a4:c8:63:da:b3:28:c4:d6:69:a1:19:2c:27:5f:
36:da:0a:35:b0:8e:d9:e4:dd:e5:a7:fe:fa:93:70:ae:e1:7d:
c8:d6:2e:bf:3f:eb:dc:7e:bd:75:9b:93:4c:17:f6:c4:15:84:
0c:51:c0:0a:d3:4f:69:43:2a:7b:cf:36:92:d1:15:e6:9d:c3:
a0:0d:9d:c1:4b:ec:ac:78:5f:cf:ba:77:65:69:92:3a:05:b1:
32:6e:3e:76:31:61:08:16:70:e4:5f:b5:05:96:71:0e:5c:9b:
34:60:8e:ce:fc:c1:31:90:c2:34:f1:10:55:ed:07:17:85:53:
1c:ca:80:95:b8:5a:7a:4b:c8:f6:7e:63:9c:57:c0:61:c8:39:
b4:0b:46:9c:8f:33:5b:5e:7e:a5:65:c0:d1:62:29:8c:8f:4f:
99:e6:3b:f1:16:6e:b4:44:53:0b:aa:b8:5e:0a:41:1d:af:a1:
75:4a:13:38:12:cf:c5:16:1b:c5:59:56:1b:75:40:05:4f:29:
67:d8:73:f0:ac:e8:b4:07:aa:a7:60:8d:00:da:28:e3:bf:46:
7a:84:b8:5d
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYVwjLGlaFnzpMVBBzAyoMWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGNmNTEyNDdhYjU3ZjUyNmYzODA3MjU5YTc4ZDJiMDI1
OTA2MDMwHhcNMjMwMTAyMDMzNTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDFlOTI5NjY2ODZjMGM3OGI4MTEwZjI1ODBmMDkzMGVhZWVjMWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11Ki6v91GJrRxB4xq+Y5+TYsmxT0
cnBW6ALwlSUGBmiTygr+nWis8dFZRpWH1nkGx0VCh8HaGF8QqmCWl22J2ux2yK1U
ZrZ81xZqFQ/FzaTP+C41waLIarcM3gvdSy/CZtgtNK2BazwVvmfZE1hb/B8Ww+vE
MkHqAz81jXDXu5GesH2/DV0GelYhH2S/hyJ9KP48N+1sa12ycswwLQx8S2b9hbOx
CtJLiZQQ/OgZDP/GyBrFzZGsdiuoO+XlR4x19RVJW5pdZK3CrOOXGt+3qmNbqAPh
cdeUyEoRNAdbp96USEMbCWzxErpAGNC11o4+PYvchIa9x1ItmqkQYj1BOQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFOQekpZmhsDHi4EQ8lgPCTDq7sHuMB8GA1UdIwQY
MBaAFJ5M9RJHq1f1JvOAclmnjSsCWQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMt
M2NmMzA2ODA3YTdlLzEvNUI2U2xtYUd3TWVMZ1JEeVdBOEpNT3J1d2U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMtM2NmMzA2ODA3YTdl
LzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAMBAIAATAGAwQCwj60MCwE
AgACMCYDBwQqB9wAAYAwEgMHBCoH3AAYEAMHBioH3AAYAAMHBCoH3AAlUDANBgkq
hkiG9w0BAQsFAAOCAQEAt/GF7LMTSJq4WAt+fNRlMDT84m9Gy17kZ4eET9yni+uq
3j/LOVg8/KTIY9qzKMTWaaEZLCdfNtoKNbCO2eTd5af++pNwruF9yNYuvz/r3H69
dZuTTBf2xBWEDFHACtNPaUMqe882ktEV5p3DoA2dwUvsrHhfz7p3ZWmSOgWxMm4+
djFhCBZw5F+1BZZxDlybNGCOzvzBMZDCNPEQVe0HF4VTHMqAlbhaekvI9n5jnFfA
Ycg5tAtGnI8zW15+pWXA0WIpjI9PmeY78RZutERTC6q4XgpBHa+hdUoTOBLPxRYb
xVlWG3VABU8pZ9hz8KzotAeqp2CNANoo479GeoS4XQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:34 2024 by rpki-client on console-ams.rpki-client.org