Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/6nWRaPvFzCX6dGVz_7uRrtuMpR4.roa
File: 6nWRaPvFzCX6dGVz_7uRrtuMpR4.roa (raw, json)
Hash identifier: vYDRP//9vRKZ3x37p19El6kgZ7+WIKL0yju+Rv2qe14=
Subject key identifier: EA:75:91:68:FB:C5:CC:25:FA:74:65:73:FF:BB:91:AE:DB:8C:A5:1E
Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial: 01901C96F8D9001463CDBC7BDD94B3CDD077
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/6nWRaPvFzCX6dGVz_7uRrtuMpR4.roa
Signing time: Sat 15 Jun 2024 15:49:34 +0000
ROA not before: Sat 15 Jun 2024 15:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8767
IP address blocks: 45.84.72.0/23 maxlen: 23
45.84.74.0/23 maxlen: 23
2a0e:a680::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Jun 2024 16:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:96:f8:d9:00:14:63:cd:bc:7b:dd:94:b3:cd:d0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Validity
Not Before: Jun 15 15:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea759168fbc5cc25fa746573ffbb91aedb8ca51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:b5:6b:d1:ef:82:26:c6:58:e9:d4:aa:91:
03:7c:07:d9:d5:01:77:4e:51:57:f5:71:43:e0:61:
47:9d:55:45:26:a8:3f:a6:cd:9c:97:f7:e1:4b:41:
22:cd:dc:ea:66:a0:da:6b:3e:b8:c6:ff:f7:6f:be:
2d:1e:12:0d:f7:ae:02:11:ad:ef:0b:89:30:18:4b:
34:11:46:d7:e2:bb:a3:63:5a:0f:2c:64:d6:3e:84:
2d:6f:fb:a1:78:68:b7:a5:cc:72:52:16:e4:44:99:
03:33:66:a2:47:45:1a:eb:85:8c:eb:e0:0f:80:92:
0f:68:95:c9:15:91:64:13:c9:ef:ef:9b:03:2f:46:
40:b4:9f:0b:19:7f:45:d4:ad:46:c8:91:9a:b6:20:
ac:e5:4b:5a:74:89:41:81:a1:c5:68:7f:c1:8e:50:
07:8e:18:46:90:aa:da:30:60:69:ad:90:29:80:4b:
d8:13:b4:70:f1:fe:dd:2e:9a:0b:8f:e5:e9:69:21:
be:71:65:f6:c6:90:3e:14:7a:83:8c:9a:be:93:a9:
cd:d2:7b:90:c0:4a:07:08:cc:76:d4:13:2a:29:ba:
78:c8:4f:93:81:0c:0b:9b:48:77:73:57:b6:8e:a0:
a3:b5:a2:71:43:f4:70:aa:2e:11:b0:3c:dd:f6:59:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:75:91:68:FB:C5:CC:25:FA:74:65:73:FF:BB:91:AE:DB:8C:A5:1E
X509v3 Authority Key Identifier:
keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/6nWRaPvFzCX6dGVz_7uRrtuMpR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.72.0/22
IPv6:
2a0e:a680::/48
Signature Algorithm: sha256WithRSAEncryption
37:3d:8f:45:0d:02:4a:b1:47:84:3f:6d:30:d5:e2:3e:dc:69:
64:d1:cb:7a:8b:f8:ff:f9:62:47:11:52:9c:ad:be:41:a4:0e:
a2:b8:8b:08:c8:43:51:24:51:46:0d:6d:76:03:48:7f:fb:9a:
42:da:da:40:ab:d9:77:46:b0:18:27:5a:0b:ec:93:c9:38:5a:
4e:5b:5f:bc:0c:52:41:bb:b8:0a:c0:9d:a0:22:47:5d:6f:1b:
fc:f7:2d:0b:0a:19:1b:b9:8f:a5:4b:bc:f0:96:d0:8e:f4:ed:
41:25:e6:47:51:4b:d4:1e:c1:cd:a2:b6:53:14:3c:bf:34:b6:
b3:ba:81:39:67:9a:e5:8b:84:79:a4:58:8e:f6:71:2c:92:a2:
4e:b7:3a:27:2e:84:2e:cc:b7:a5:0b:ef:f5:ad:5a:97:0b:e3:
ab:c8:a3:ea:6d:01:31:a6:c4:4e:24:e7:06:84:60:bb:42:51:
ed:22:ea:04:4c:38:de:61:b4:61:44:cc:dd:a8:b4:85:3a:e4:
83:1f:bb:38:97:1e:0c:ff:64:15:e5:79:9d:d5:41:e6:f6:e5:
cc:72:ea:33:d2:92:26:cf:46:9f:a9:63:ba:cf:47:4e:ea:94:
ef:c9:f3:ea:58:87:77:d0:6d:c3:ad:49:eb:6b:78:02:66:65:
36:ed:52:cc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZAclvjZABRjzbx73ZSzzdB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDdlY2YxNzE0MmIzYjA5MzVmOGUzN2I4ZjdkOWMyNTNm
MGVlMTkwHhcNMjQwNjE1MTU0OTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTc1OTE2OGZiYzVjYzI1ZmE3NDY1NzNmZmJiOTFhZWRiOGNhNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOm1a9HvgibGWOnUqpEDfAfZ1QF3
TlFX9XFD4GFHnVVFJqg/ps2cl/fhS0EizdzqZqDaaz64xv/3b74tHhIN964CEa3v
C4kwGEs0EUbX4rujY1oPLGTWPoQtb/uheGi3pcxyUhbkRJkDM2aiR0Ua64WM6+AP
gJIPaJXJFZFkE8nv75sDL0ZAtJ8LGX9F1K1GyJGatiCs5UtadIlBgaHFaH/BjlAH
jhhGkKraMGBprZApgEvYE7Rw8f7dLpoLj+XpaSG+cWX2xpA+FHqDjJq+k6nN0nuQ
wEoHCMx21BMqKbp4yE+TgQwLm0h3c1e2jqCjtaJxQ/Rwqi4RsDzd9lnR8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOp1kWj7xcwl+nRlc/+7ka7bjKUeMB8GA1UdIwQY
MBaAFJHX7PFxQrOwk1+ON7j32cJT8O4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RmczhYRkNzN0NUWDQ0M3VQZlp3bFB3N2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iMDhlNmUtMDgyMi00MjI0LTk1NGIt
YTZiMWFkMzRlMDhjLzEvNm5XUmFQdkZ6Q1g2ZEdWel83dVJydHVNcFI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9iMDhlNmUtMDgyMi00MjI0LTk1NGItYTZiMWFkMzRlMDhj
LzEva2RmczhYRkNzN0NUWDQ0M3VQZlp3bFB3N2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLVRIMA8E
AgACMAkDBwAqDqaAAAAwDQYJKoZIhvcNAQELBQADggEBADc9j0UNAkqxR4Q/bTDV
4j7caWTRy3qL+P/5YkcRUpytvkGkDqK4iwjIQ1EkUUYNbXYDSH/7mkLa2kCr2XdG
sBgnWgvsk8k4Wk5bX7wMUkG7uArAnaAiR11vG/z3LQsKGRu5j6VLvPCW0I707UEl
5kdRS9Qewc2itlMUPL80trO6gTlnmuWLhHmkWI72cSySok63OicuhC7Mt6UL7/Wt
WpcL46vIo+ptATGmxE4k5waEYLtCUe0i6gRMON5htGFEzN2otIU65IMfuziXHgz/
ZBXleZ3VQeb25cxy6jPSkibPRp+pY7rPR07qlO/J8+pYh3fQbcOtSetreAJmZTbt
Usw=
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:00:20 2024 by rpki-client on console-fra.rpki-client.org