Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/b6-RUOyc6rHxuPPLq8HAUhxrD7g.roa
File: b6-RUOyc6rHxuPPLq8HAUhxrD7g.roa (raw, json)
Hash identifier: M6q+ILPThH5tSOwbST0MXeGZMigE4dWMcSDL30q4pN0=
Subject key identifier: 6F:AF:91:50:EC:9C:EA:B1:F1:B8:F3:CB:AB:C1:C0:52:1C:6B:0F:B8
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 0188AF751171568475E2913A0B0452B1687C
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/b6-RUOyc6rHxuPPLq8HAUhxrD7g.roa
Signing time: Mon 12 Jun 2023 11:54:24 +0000
ROA not before: Mon 12 Jun 2023 11:54:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42313
IP address blocks: 79.106.242.0/23 maxlen: 23
79.106.244.0/23 maxlen: 23
79.106.240.0/21 maxlen: 21
79.106.246.0/23 maxlen: 23
79.106.255.0/24 maxlen: 24
79.106.254.0/24 maxlen: 24
185.171.146.0/24 maxlen: 24
185.171.144.0/23 maxlen: 23
79.106.84.0/24 maxlen: 24
79.106.90.0/24 maxlen: 24
79.106.95.0/24 maxlen: 24
79.106.96.0/19 maxlen: 19
79.106.94.0/23 maxlen: 23
79.106.104.0/24 maxlen: 24
79.106.102.0/24 maxlen: 24
79.106.103.0/24 maxlen: 24
79.106.101.0/24 maxlen: 24
79.106.107.0/24 maxlen: 24
79.106.118.0/23 maxlen: 23
79.106.117.0/24 maxlen: 24
79.106.125.0/24 maxlen: 24
79.106.123.0/24 maxlen: 24
79.106.124.0/24 maxlen: 24
79.106.122.0/24 maxlen: 24
79.106.120.0/24 maxlen: 24
79.106.127.0/24 maxlen: 24
79.106.128.0/19 maxlen: 19
79.106.126.0/24 maxlen: 24
79.106.32.0/19 maxlen: 19
79.106.37.0/24 maxlen: 24
79.106.42.0/24 maxlen: 24
79.106.50.0/24 maxlen: 24
79.106.56.0/22 maxlen: 22
79.106.64.0/19 maxlen: 19
79.106.64.0/24 maxlen: 24
79.106.77.0/24 maxlen: 24
79.106.192.0/19 maxlen: 19
79.106.195.0/24 maxlen: 24
79.106.194.0/23 maxlen: 23
79.106.196.0/24 maxlen: 24
79.106.205.0/24 maxlen: 24
79.106.204.0/24 maxlen: 24
79.106.210.0/24 maxlen: 24
79.106.211.0/24 maxlen: 24
79.106.209.0/24 maxlen: 24
79.106.207.0/24 maxlen: 24
79.106.215.0/24 maxlen: 24
79.106.214.0/24 maxlen: 24
79.106.218.0/23 maxlen: 23
79.106.220.0/24 maxlen: 24
79.106.224.0/19 maxlen: 19
79.106.230.0/24 maxlen: 24
79.106.229.0/24 maxlen: 24
79.106.232.0/22 maxlen: 22
79.106.228.0/24 maxlen: 24
79.106.240.0/23 maxlen: 23
79.106.160.0/19 maxlen: 19
79.106.176.0/21 maxlen: 21
79.106.0.0/24 maxlen: 24
79.106.0.0/19 maxlen: 19
79.106.0.0/17 maxlen: 17
79.106.0.0/16 maxlen: 16
217.24.240.0/21 maxlen: 21
217.24.240.0/20 maxlen: 20
217.24.248.0/24 maxlen: 24
217.24.248.0/21 maxlen: 21
217.24.254.0/24 maxlen: 24
2a05:fdc0::/32 maxlen: 32
2a05:fdc0:3200::/40 maxlen: 40
2a05:fdc0:3100::/40 maxlen: 40
2a05:fdc0:2300::/40 maxlen: 40
2a05:fdc0:2200::/40 maxlen: 40
2a05:fdc0:2100::/40 maxlen: 40
2a05:fdc2:1000::/36 maxlen: 36
2a05:fdc2:6000::/36 maxlen: 36
2a05:fdc2:9000::/36 maxlen: 36
2a05:fdc2:3000::/36 maxlen: 36
2a05:fdc2:8000::/36 maxlen: 36
2a05:fdc2::/32 maxlen: 32
2a05:fdc2:4000::/36 maxlen: 36
2a05:fdc2:7000::/36 maxlen: 36
2a05:fdc2:2000::/36 maxlen: 36
2a05:fdc2:5000::/36 maxlen: 36
2a05:fdc0::/29 maxlen: 29
2a05:fdc1::/32 maxlen: 32
2a05:fdc0:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Jun 2023 08:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:75:11:71:56:84:75:e2:91:3a:0b:04:52:b1:68:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Jun 12 11:54:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6faf9150ec9ceab1f1b8f3cbabc1c0521c6b0fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:4e:33:e9:fa:b1:34:38:e4:0c:47:07:5b:
40:24:7a:7a:3d:c6:f5:d1:f9:10:ca:b6:e1:4d:9f:
06:3b:23:04:47:3e:42:29:82:c5:e8:3f:f0:89:4f:
e2:2e:2b:b9:95:e4:75:3c:33:e0:4a:9e:61:62:ab:
be:3b:b0:6e:26:c8:a3:ca:36:89:8b:93:bd:88:61:
dc:28:de:1d:33:bc:59:e1:da:58:c1:f9:f8:9e:9d:
63:d4:bb:14:b8:ea:8b:ab:53:a3:87:a5:8a:0b:e4:
fc:14:c4:81:0b:be:1b:54:d1:41:c8:fe:bd:1d:f0:
14:a7:93:1a:dd:5c:b5:d6:ba:a8:a5:fd:8b:27:6d:
7a:7e:e4:f2:4d:77:43:ef:72:f4:13:d2:cc:39:8b:
1d:fb:58:e0:96:60:11:92:7e:13:8e:e2:7a:64:24:
9b:c1:b3:11:3d:30:ce:46:16:fb:82:dd:da:da:8e:
e1:3b:17:fd:57:69:31:b1:1a:7b:5c:fb:3a:15:88:
26:eb:77:ff:5a:27:da:f5:d5:bb:0f:2d:8b:01:1c:
18:5c:f5:e4:99:40:b9:81:0d:72:90:f0:53:fd:d1:
2a:8b:54:86:b8:e6:56:e5:f9:50:06:66:ec:77:1d:
ca:7c:1c:f2:41:85:78:d1:d7:dd:53:5a:b4:df:c5:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AF:91:50:EC:9C:EA:B1:F1:B8:F3:CB:AB:C1:C0:52:1C:6B:0F:B8
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/b6-RUOyc6rHxuPPLq8HAUhxrD7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.171.144.0-185.171.146.255
217.24.240.0/20
IPv6:
2a05:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
be:c2:e6:ac:ce:fb:da:80:47:dc:e0:ff:b6:9f:3e:ee:d9:f8:
17:2b:02:aa:54:e3:88:4a:fe:00:ee:e5:1d:72:dd:87:fe:bb:
c0:6b:ae:05:c6:51:14:45:06:2c:be:99:da:9a:d0:26:f3:b4:
10:df:06:8f:14:49:a0:2a:73:23:96:fe:55:24:a9:eb:5f:71:
78:43:f9:8b:27:f7:e4:db:f3:32:18:70:64:9d:eb:77:f1:14:
4b:4f:5a:d9:5a:26:eb:4f:f6:c3:7b:16:bd:cb:e7:42:28:df:
36:01:83:40:83:16:04:39:9d:43:01:12:a6:21:0e:4f:00:b9:
d3:ae:fb:ac:b2:88:c4:16:0d:cf:59:e6:59:a8:6b:7d:13:c5:
f8:b4:2c:ff:ec:10:5a:7d:a8:c5:7f:82:75:0e:9c:af:fb:49:
a7:64:65:d0:18:3f:2f:5a:1b:a2:49:96:9f:c0:6f:8c:8d:75:
57:18:15:c6:f7:8d:64:74:63:1a:80:29:b8:f3:ab:20:2a:65:
eb:72:a6:6e:9c:84:6f:99:9a:5c:78:f4:5b:d3:2a:ed:ad:e3:
7c:c4:84:67:b3:14:35:35:dc:bc:be:d2:90:f3:b0:18:e2:53:
a8:dc:15:2d:01:bf:02:42:4b:07:59:32:c2:76:e9:47:57:f7:
69:0a:20:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org