Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/6M5STy4kjerBq_uEZMXk9tyAZZ4.roa
File: 6M5STy4kjerBq_uEZMXk9tyAZZ4.roa (raw, json)
Hash identifier: tsMNTk7oImpUz7qxthQJMO0xy1E+GWD+PWGdZMNxRVE=
Subject key identifier: E8:CE:52:4F:2E:24:8D:EA:C1:AB:FB:84:64:C5:E4:F6:DC:80:65:9E
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 0187755C2F12EAF7897F29CE50370758B8D4
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/6M5STy4kjerBq_uEZMXk9tyAZZ4.roa
Signing time: Wed 12 Apr 2023 12:06:28 +0000
ROA not before: Wed 12 Apr 2023 12:06:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211995
IP address blocks: 46.28.237.0/24 maxlen: 24
185.233.35.0/24 maxlen: 24
93.114.130.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
2a10:d880::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 15 Sep 2023 04:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:5c:2f:12:ea:f7:89:7f:29:ce:50:37:07:58:b8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Apr 12 12:06:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8ce524f2e248deac1abfb8464c5e4f6dc80659e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:8a:b5:e9:6a:74:a3:7f:5d:eb:6b:03:d0:
cc:ba:29:0b:92:94:9b:9e:56:2d:ba:9f:19:2d:7e:
9c:a2:b9:f6:ed:d9:41:8d:79:90:ec:30:59:83:8c:
ca:9b:82:33:51:35:bd:43:1c:59:65:9f:50:0d:68:
d9:12:62:7b:68:1b:a1:46:03:d4:89:09:5b:a0:15:
e5:1b:2c:b5:c2:19:95:d3:53:d9:f2:b5:05:30:6b:
53:44:d5:4e:b0:65:0f:1a:4c:b5:c3:27:7b:68:d7:
ce:3a:88:a5:f9:ab:5d:8f:87:ff:18:f9:71:1b:52:
24:eb:31:ab:82:fd:76:32:f8:32:66:a4:cf:2a:00:
ac:b1:43:87:f2:56:4c:5b:b8:ba:4c:e4:7b:4e:1e:
7a:1d:67:84:a4:5f:12:9b:8a:71:ef:83:5e:9c:d6:
56:bb:43:8d:2b:02:3c:3f:16:72:9e:b9:4f:8b:d6:
df:00:14:44:ed:42:9e:f0:d3:f0:c9:b6:96:1e:db:
7d:61:da:69:fd:db:38:53:24:69:c8:96:d9:fa:94:
86:0d:a1:6f:c3:6b:5f:f9:10:e3:fa:aa:69:1b:c1:
f2:6a:de:23:b1:3e:a3:3d:b7:3c:ad:87:c2:54:3c:
8c:b1:b8:ce:35:fe:bd:5c:b9:7d:a8:c7:3d:cf:0d:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CE:52:4F:2E:24:8D:EA:C1:AB:FB:84:64:C5:E4:F6:DC:80:65:9E
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/6M5STy4kjerBq_uEZMXk9tyAZZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.237.0/24
93.114.130.0/24
185.136.207.0/24
185.233.35.0/24
IPv6:
2a10:d880::/29
Signature Algorithm: sha256WithRSAEncryption
5a:51:a4:f6:f7:ba:10:8b:a1:a1:a6:24:3d:59:c9:ed:b8:09:
71:f1:c3:a2:19:bd:63:af:90:34:dd:d8:09:dd:97:3e:ce:34:
ff:6f:16:ac:d8:4d:b4:75:f8:7c:89:af:ef:d3:06:ce:c9:90:
e1:ac:14:ca:9b:d0:f4:bf:1e:cb:f5:14:85:73:f0:54:00:2a:
84:f5:3d:30:cf:14:52:69:0b:52:64:42:e0:a3:20:95:ca:8f:
67:26:af:ae:f7:32:e0:e1:01:73:01:7c:cf:66:ee:7e:f3:6d:
f0:4f:26:ec:3b:50:d1:6e:69:a1:2f:d5:05:3f:82:02:48:10:
76:7c:a4:fd:5f:1a:56:cc:16:84:e0:24:78:90:a2:21:93:2e:
db:df:d3:76:c2:85:bf:c5:b1:e5:9b:38:5c:83:60:39:36:39:
ed:5c:4d:b5:53:97:24:f9:24:d3:77:1d:32:e9:e3:78:a2:6b:
94:00:7d:de:eb:56:e0:66:99:45:47:1d:95:e2:af:5d:a1:f7:
4d:65:66:f2:4f:2b:e1:60:d2:02:cf:95:c3:e2:6c:a0:44:92:
e3:f4:cd:fd:72:17:89:b3:76:6f:04:8f:05:16:bd:cc:41:b9:
93:12:4f:90:7b:71:d4:af:aa:32:38:77:f7:5c:38:3a:01:da:
5d:52:ea:9f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYd1XC8S6veJfynOUDcHWLjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYTY1N2YzNDI0YzhkZDU1MjE1YWY4NTNiOTMzMDdjMzY2
YzUzOGEwHhcNMjMwNDEyMTIwNjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGNlNTI0ZjJlMjQ4ZGVhYzFhYmZiODQ2NGM1ZTRmNmRjODA2NTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLKKtelqdKN/XetrA9DMuikLkpSb
nlYtup8ZLX6corn27dlBjXmQ7DBZg4zKm4IzUTW9QxxZZZ9QDWjZEmJ7aBuhRgPU
iQlboBXlGyy1whmV01PZ8rUFMGtTRNVOsGUPGky1wyd7aNfOOoil+atdj4f/GPlx
G1Ik6zGrgv12MvgyZqTPKgCssUOH8lZMW7i6TOR7Th56HWeEpF8Sm4px74NenNZW
u0ONKwI8PxZynrlPi9bfABRE7UKe8NPwybaWHtt9Ydpp/ds4UyRpyJbZ+pSGDaFv
w2tf+RDj+qppG8Hyat4jsT6jPbc8rYfCVDyMsbjONf69XLl9qMc9zw2VMQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOjOUk8uJI3qwav7hGTF5PbcgGWeMB8GA1UdIwQY
MBaAFBKmV/NCTI3VUhWvhTuTMHw2bFOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMt
MDVmMDkzMzg1YWM4LzEvNk01U1R5NGtqZXJCcV91RVpNWGs5dHlBWlo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMtMDVmMDkzMzg1YWM4
LzEvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQALhztAwQA
XXKCAwQAuYjPAwQAuekjMA0EAgACMAcDBQMqENiAMA0GCSqGSIb3DQEBCwUAA4IB
AQBaUaT297oQi6GhpiQ9WcntuAlx8cOiGb1jr5A03dgJ3Zc+zjT/bxas2E20dfh8
ia/v0wbOyZDhrBTKm9D0vx7L9RSFc/BUACqE9T0wzxRSaQtSZELgoyCVyo9nJq+u
9zLg4QFzAXzPZu5+823wTybsO1DRbmmhL9UFP4ICSBB2fKT9XxpWzBaE4CR4kKIh
ky7b39N2woW/xbHlmzhcg2A5NjntXE21U5ck+STTdx0y6eN4omuUAH3e61bgZplF
Rx2V4q9dofdNZWbyTyvhYNICz5XD4mygRJLj9M39cheJs3ZvBI8FFr3MQbmTEk+Q
e3HUr6oyOHf3XDg6AdpdUuqf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:12 2024 by rpki-client on console-ams.rpki-client.org