Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/6zXKJWJrh4JU7-2RMICknEz-k04.roa
File: 6zXKJWJrh4JU7-2RMICknEz-k04.roa (raw, json)
Hash identifier: 5je1fZAoYgFNwnoO5MDzgbKFMBoAu+vg2D7sNHnnbec=
Subject key identifier: EB:35:CA:25:62:6B:87:82:54:EF:ED:91:30:80:A4:9C:4C:FE:93:4E
Certificate issuer: /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial: 0185728CA72C21DC8D050E20C825DAA5D036
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/6zXKJWJrh4JU7-2RMICknEz-k04.roa
Signing time: Mon 02 Jan 2023 12:54:58 +0000
ROA not before: Mon 02 Jan 2023 12:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51918
IP address blocks: 83.151.224.0/22 maxlen: 22
83.151.224.0/19 maxlen: 19
83.151.228.0/22 maxlen: 22
83.151.232.0/22 maxlen: 22
83.151.236.0/22 maxlen: 22
83.151.240.0/22 maxlen: 22
83.151.244.0/22 maxlen: 22
83.151.248.0/22 maxlen: 22
83.151.252.0/22 maxlen: 22
46.37.32.0/22 maxlen: 22
46.37.32.0/19 maxlen: 19
46.37.36.0/22 maxlen: 22
46.37.40.0/22 maxlen: 22
46.37.44.0/22 maxlen: 22
46.37.48.0/22 maxlen: 22
46.37.52.0/22 maxlen: 22
46.37.56.0/22 maxlen: 22
46.37.60.0/22 maxlen: 22
185.14.208.0/22 maxlen: 22
2a01:5d00::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:a7:2c:21:dc:8d:05:0e:20:c8:25:da:a5:d0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Validity
Not Before: Jan 2 12:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb35ca25626b878254efed913080a49c4cfe934e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:45:6b:bb:ee:af:4d:ff:9f:bd:e1:9e:cc:8b:
fd:65:f9:60:7f:25:89:c6:10:fb:17:11:af:ef:c2:
95:42:6f:12:ff:82:46:6e:b7:27:07:bf:89:37:72:
b9:38:f4:f4:9e:09:36:2e:5a:99:6f:7c:9a:41:06:
b3:fd:1b:5a:9b:1b:a1:f6:8f:4e:b8:4b:89:4f:6e:
9c:1e:d0:6a:d8:9b:ea:bd:33:d5:1c:61:a1:f5:40:
19:51:d3:4a:6f:50:e3:f6:9e:6d:28:d4:41:32:42:
82:5c:37:0c:69:59:d0:34:7c:fe:47:c3:1b:91:be:
cf:7e:b8:bb:bb:1e:d1:ce:ee:25:29:05:6d:2f:fe:
fe:80:93:c1:87:51:b4:44:28:fc:aa:c8:93:da:f1:
8f:a2:6c:89:74:e1:3b:70:02:96:1f:7c:85:a4:a9:
47:33:4a:a4:3e:cf:a6:a0:69:fe:2d:2d:d3:d7:e0:
e7:1f:85:a1:29:9d:a7:68:6e:e3:02:47:fb:3d:0c:
9b:dd:5d:51:b1:f5:82:72:8c:60:0c:c7:7f:dc:11:
85:f2:40:22:81:ac:58:30:e2:de:a1:b6:68:c6:7d:
2c:d0:a1:f2:a6:07:e5:4e:21:a7:90:0f:ff:ff:3d:
a5:97:b9:22:87:b0:0a:f0:e7:d8:0e:35:59:b7:7f:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:35:CA:25:62:6B:87:82:54:EF:ED:91:30:80:A4:9C:4C:FE:93:4E
X509v3 Authority Key Identifier:
keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/6zXKJWJrh4JU7-2RMICknEz-k04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.32.0/19
83.151.224.0/19
185.14.208.0/22
IPv6:
2a01:5d00::/32
Signature Algorithm: sha256WithRSAEncryption
1a:63:a4:84:51:6c:bf:b8:98:38:eb:e2:2f:d7:5c:9c:3c:bf:
74:55:0a:75:b8:28:52:e4:94:7b:1c:69:a0:d4:e5:4e:a1:f4:
b8:89:75:79:bf:10:72:35:a8:a8:21:3d:63:94:83:5b:73:97:
25:16:a3:3a:4f:90:29:ef:c3:c1:01:44:cc:b6:e4:ba:c1:c2:
bf:c5:a9:85:fb:83:5f:1b:ad:6d:1d:68:3f:ed:36:fe:e0:03:
f9:3a:9c:ca:f4:5c:61:50:d7:5a:fe:27:92:10:b9:8d:71:e0:
79:dd:04:30:63:11:bf:c7:44:83:8b:3f:68:b8:08:23:5e:ff:
92:f1:bd:ad:d6:54:74:2c:a9:df:3f:7c:74:e3:6a:2d:8b:cd:
5d:cc:d1:5c:69:11:96:71:22:b4:4e:c5:27:63:2d:3b:95:a9:
0b:0a:9f:6e:50:b9:b1:79:99:33:88:b3:ee:c5:1b:c3:8c:78:
ef:09:92:82:f5:cc:32:97:4d:ad:1b:17:59:33:aa:f0:8b:49:
0a:3a:6c:40:2a:50:9c:f6:23:ac:ad:8b:d9:42:b4:f2:ee:5d:
3f:b1:46:be:c9:58:b1:91:56:b0:18:e9:48:07:3c:2b:8c:15:
8c:46:60:32:ac:29:d1:19:10:5d:1f:a6:13:07:13:f6:bd:fa:
26:b8:40:1b
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVyjKcsIdyNBQ4gyCXapdA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMGEyMTIzZjU0OTI2NGU3Y2JiOWZhMjFkMmM1MTM3NzIx
NDg2ZTQwHhcNMjMwMTAyMTI1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjM1Y2EyNTYyNmI4NzgyNTRlZmVkOTEzMDgwYTQ5YzRjZmU5MzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEVru+6vTf+fveGezIv9ZflgfyWJ
xhD7FxGv78KVQm8S/4JGbrcnB7+JN3K5OPT0ngk2LlqZb3yaQQaz/Rtamxuh9o9O
uEuJT26cHtBq2JvqvTPVHGGh9UAZUdNKb1Dj9p5tKNRBMkKCXDcMaVnQNHz+R8Mb
kb7Pfri7ux7Rzu4lKQVtL/7+gJPBh1G0RCj8qsiT2vGPomyJdOE7cAKWH3yFpKlH
M0qkPs+moGn+LS3T1+DnH4WhKZ2naG7jAkf7PQyb3V1RsfWCcoxgDMd/3BGF8kAi
gaxYMOLeobZoxn0s0KHypgflTiGnkA///z2ll7kih7AK8OfYDjVZt3+R9QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFOs1yiVia4eCVO/tkTCApJxM/pNOMB8GA1UdIwQY
MBaAFMEKISP1SSZOfLufoh0sUTdyFIbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUt
YWRiMzAwZjcyMjVhLzEvNnpYS0pXSnJoNEpVNy0yUk1JQ2tuRXotazA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUtYWRiMzAwZjcyMjVh
LzEvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFLiUgAwQF
U5fgAwQCuQ7QMA0EAgACMAcDBQAqAV0AMA0GCSqGSIb3DQEBCwUAA4IBAQAaY6SE
UWy/uJg46+Iv11ycPL90VQp1uChS5JR7HGmg1OVOofS4iXV5vxByNaioIT1jlINb
c5clFqM6T5Ap78PBAUTMtuS6wcK/xamF+4NfG61tHWg/7Tb+4AP5OpzK9FxhUNda
/ieSELmNceB53QQwYxG/x0SDiz9ouAgjXv+S8b2t1lR0LKnfP3x042oti81dzNFc
aRGWcSK0TsUnYy07lakLCp9uULmxeZkziLPuxRvDjHjvCZKC9cwyl02tGxdZM6rw
i0kKOmxAKlCc9iOsrYvZQrTy7l0/sUa+yVixkVawGOlIBzwrjBWMRmAyrCnRGRBd
H6YTBxP2vfomuEAb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org