Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/6_5fbBkND1xbKtx5QYZnoqGXDwY.roa
File: 6_5fbBkND1xbKtx5QYZnoqGXDwY.roa (raw, json)
Hash identifier: PFCD3ivCq240j655j0NVqnAYh20o2xTloEI/sbLM9tc=
Subject key identifier: EB:FE:5F:6C:19:0D:0F:5C:5B:2A:DC:79:41:86:67:A2:A1:97:0F:06
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B5326D492D88EA29A81A0A6D798C05B
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/6_5fbBkND1xbKtx5QYZnoqGXDwY.roa
Signing time: Sun 01 Jan 2023 03:14:49 +0000
ROA not before: Sun 01 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210388
IP address blocks: 213.238.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:26:d4:92:d8:8e:a2:9a:81:a0:a6:d7:98:c0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebfe5f6c190d0f5c5b2adc79418667a2a1970f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4b:02:66:54:3b:9e:61:af:02:f4:4c:d6:d9:
ec:ac:95:63:38:68:2f:df:80:cd:ab:0c:18:5a:74:
aa:f0:39:52:59:9d:d3:8c:89:8a:88:c2:54:82:02:
a1:dc:44:92:a8:7b:8a:b3:8f:0e:9b:8f:86:6e:d1:
d7:26:0e:56:7f:f8:b0:3a:e9:1c:00:da:ff:9a:7d:
c2:15:b0:14:9f:60:be:86:8d:71:1a:a9:fe:cb:e4:
5d:c9:ca:3f:b9:a6:ba:c7:17:4b:8a:d0:40:36:a0:
ff:6f:ae:61:ff:3d:1f:29:93:9f:5e:c5:64:5e:de:
e9:99:81:b6:9e:1d:47:6d:4e:78:b8:f6:2b:57:38:
d6:6e:ed:b9:89:73:65:0a:87:6d:e1:b7:44:e9:3b:
70:58:94:22:14:b6:df:bc:7d:c5:28:50:72:2b:c8:
c3:a9:ea:f8:9b:ff:b1:59:6a:e7:4f:a4:8f:d8:8e:
46:d4:97:3a:0f:e8:23:e4:9c:ce:4c:41:4d:e3:84:
b9:17:4b:22:29:e6:e2:a8:35:57:78:ab:d3:ee:4a:
19:1b:e5:13:c5:ff:2c:fb:12:88:20:6b:ee:f8:fb:
f1:bf:a8:1c:ac:5c:9f:16:f6:b5:f7:4c:38:2b:e3:
7e:29:19:91:4b:2a:9e:06:d2:b2:8d:17:1a:39:08:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FE:5F:6C:19:0D:0F:5C:5B:2A:DC:79:41:86:67:A2:A1:97:0F:06
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/6_5fbBkND1xbKtx5QYZnoqGXDwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c2:10:14:f6:51:7c:e0:6f:41:86:6c:28:ce:cc:00:28:6b:
a0:fd:a3:e5:d9:7a:9c:47:8f:54:45:44:3d:b9:02:1a:89:be:
87:f3:c5:d5:fd:89:1d:b5:e8:f4:85:d7:07:29:de:bd:23:0a:
a3:83:29:f7:cf:47:90:9c:98:65:3a:6d:10:54:ac:ce:ec:8a:
e8:24:25:af:9f:c2:25:ec:59:d0:25:f8:21:62:bd:13:06:a6:
00:19:1f:be:e6:77:db:1c:28:ae:fb:e3:b2:c9:25:ea:40:6d:
f9:63:10:77:65:73:b6:c8:4d:d7:42:4c:2c:55:d5:ed:23:e4:
23:0f:5f:58:92:b1:0e:42:30:5c:55:c0:5b:be:ec:97:a1:b9:
81:07:2f:31:be:71:72:5a:8a:72:95:71:6c:9b:06:c6:d3:83:
f5:09:1c:fc:cd:5d:36:69:11:4f:8a:16:1c:6a:90:e4:55:ac:
bc:2d:17:d8:e5:88:fd:a1:13:48:c1:0e:52:c8:b7:06:2b:c1:
46:8e:e1:65:40:84:cc:d3:57:23:0a:9f:8e:46:6e:55:3f:12:
d6:f4:af:ac:10:42:c8:18:9d:ce:96:d8:63:16:6d:ef:ea:1b:
1f:b5:2a:3e:3a:c3:2b:2e:e0:1d:80:c1:49:d6:51:6b:25:7d:
4c:a9:fa:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrUybUktiOopqBoKbXmMBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjMwMTAxMDMxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmZlNWY2YzE5MGQwZjVjNWIyYWRjNzk0MTg2NjdhMmExOTcwZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEsCZlQ7nmGvAvRM1tnsrJVjOGgv
34DNqwwYWnSq8DlSWZ3TjImKiMJUggKh3ESSqHuKs48Om4+GbtHXJg5Wf/iwOukc
ANr/mn3CFbAUn2C+ho1xGqn+y+Rdyco/uaa6xxdLitBANqD/b65h/z0fKZOfXsVk
Xt7pmYG2nh1HbU54uPYrVzjWbu25iXNlCodt4bdE6TtwWJQiFLbfvH3FKFByK8jD
qer4m/+xWWrnT6SP2I5G1Jc6D+gj5JzOTEFN44S5F0siKebiqDVXeKvT7koZG+UT
xf8s+xKIIGvu+Pvxv6gcrFyfFva190w4K+N+KRmRSyqeBtKyjRcaOQhO8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOv+X2wZDQ9cWyrceUGGZ6Khlw8GMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvNl81ZmJCa05EMXhiS3R4NVFZWm5vcUdYRHdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6/MA0G
CSqGSIb3DQEBCwUAA4IBAQALwhAU9lF84G9BhmwozswAKGug/aPl2XqcR49URUQ9
uQIaib6H88XV/Ykdtej0hdcHKd69Iwqjgyn3z0eQnJhlOm0QVKzO7IroJCWvn8Il
7FnQJfghYr0TBqYAGR++5nfbHCiu++OyySXqQG35YxB3ZXO2yE3XQkwsVdXtI+Qj
D19YkrEOQjBcVcBbvuyXobmBBy8xvnFyWopylXFsmwbG04P1CRz8zV02aRFPihYc
apDkVay8LRfY5Yj9oRNIwQ5SyLcGK8FGjuFlQITM01cjCp+ORm5VPxLW9K+sEELI
GJ3OlthjFm3v6hsftSo+OsMrLuAdgMFJ1lFrJX1MqfpB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org