Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/6LpfBDij2KHBTNujbsNy3PagrTw.roa
File: 6LpfBDij2KHBTNujbsNy3PagrTw.roa (raw, json)
Hash identifier: J8NSh1dt3pAwI8iYp8VP4YzlAA0G/9B2D36ucdsZR70=
Subject key identifier: E8:BA:5F:04:38:A3:D8:A1:C1:4C:DB:A3:6E:C3:72:DC:F6:A0:AD:3C
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018C1FF3830DA4C1D86E6E6A5039A1F03FF8
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/6LpfBDij2KHBTNujbsNy3PagrTw.roa
Signing time: Thu 30 Nov 2023 11:18:21 +0000
ROA not before: Thu 30 Nov 2023 11:18:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35830
IP address blocks: 62.3.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:f3:83:0d:a4:c1:d8:6e:6e:6a:50:39:a1:f0:3f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 30 11:18:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8ba5f0438a3d8a1c14cdba36ec372dcf6a0ad3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:09:4e:28:e6:ba:36:1d:25:e9:ee:73:5e:59:
5a:c0:87:7e:81:63:35:87:25:03:a9:6c:c7:05:b8:
f6:cd:00:8d:80:8e:2a:37:fc:b4:a4:1b:0b:99:ac:
37:6f:db:ca:8e:26:3b:34:07:7d:1c:6e:6d:38:64:
4a:89:b6:de:79:ef:ec:77:7a:7b:4b:0c:8d:05:79:
e1:80:62:19:2f:7a:fd:96:21:7d:85:a1:24:38:bd:
7b:91:2e:a7:22:c2:04:f1:1b:ff:3e:8b:8e:34:a1:
2b:e1:29:39:df:40:bb:14:53:48:30:2c:92:ae:96:
fc:ed:56:51:fb:78:b8:48:8c:c9:62:57:26:45:e7:
be:38:82:28:96:1c:a2:87:3b:73:7f:ba:6b:67:d8:
f0:b8:6d:aa:85:af:ef:47:a4:45:7a:eb:b3:9c:7f:
79:6d:7d:a4:a5:69:b4:4f:78:58:dc:5c:30:48:2b:
56:ba:f7:2b:1b:f2:76:89:ea:89:65:ac:65:d0:7c:
76:6d:05:33:9b:50:3d:62:e8:cc:62:f1:dc:99:37:
13:25:6e:42:28:e8:24:f3:fc:bf:61:d8:1a:7f:fd:
ae:f1:ef:f1:6a:7e:5a:38:a6:9f:4d:14:e5:ba:46:
63:c8:55:51:f0:3f:2f:c7:45:2e:29:9d:c7:cb:c2:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BA:5F:04:38:A3:D8:A1:C1:4C:DB:A3:6E:C3:72:DC:F6:A0:AD:3C
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/6LpfBDij2KHBTNujbsNy3PagrTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
72:54:39:d6:b1:f7:f9:48:f4:cc:74:2b:58:39:d3:4a:d2:1e:
2d:84:17:22:56:6b:ac:e9:f3:e3:a0:8b:4f:15:d8:8f:ad:3f:
8d:3a:a0:b9:81:e1:38:10:66:e8:9b:27:cc:07:67:cb:4d:81:
b4:27:88:41:9a:8e:10:0e:51:3a:cf:d2:4c:3d:5d:a2:87:dd:
7d:25:2d:f2:94:7f:da:1d:f9:9a:90:c3:e0:b5:87:cf:5b:6b:
06:cd:a3:b8:7f:fb:68:a9:7a:f0:dd:2b:7e:9f:fc:56:e6:54:
6b:39:94:f4:b5:d1:ee:c3:a1:ce:d4:79:41:e6:7f:3a:49:92:
d7:bf:d1:dc:39:e6:d3:ea:77:17:68:7b:c4:00:12:bf:d2:36:
a9:9d:41:a4:7e:bc:f4:c3:43:a3:b0:ff:83:55:6e:4b:b9:68:
52:c9:1f:ec:fc:5a:8b:93:cb:5b:31:b4:af:cb:b7:fa:88:29:
2e:02:c3:75:a0:bf:df:b1:0a:a8:eb:aa:55:73:1a:d8:ee:ca:
99:d2:4a:95:a6:cf:98:93:55:27:c7:ac:27:68:61:5d:82:79:
47:27:c5:c3:47:7f:af:42:d4:78:2b:f5:d4:20:a1:d3:e0:84:
9f:24:90:7f:f1:21:b7:6a:98:57:a1:fb:83:d6:5a:92:ab:c5:
82:1b:1e:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwf84MNpMHYbm5qUDmh8D/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjMxMTMwMTExODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGJhNWYwNDM4YTNkOGExYzE0Y2RiYTM2ZWMzNzJkY2Y2YTBhZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AlOKOa6Nh0l6e5zXllawId+gWM1
hyUDqWzHBbj2zQCNgI4qN/y0pBsLmaw3b9vKjiY7NAd9HG5tOGRKibbeee/sd3p7
SwyNBXnhgGIZL3r9liF9haEkOL17kS6nIsIE8Rv/PouONKEr4Sk530C7FFNIMCyS
rpb87VZR+3i4SIzJYlcmRee+OIIolhyihztzf7prZ9jwuG2qha/vR6RFeuuznH95
bX2kpWm0T3hY3FwwSCtWuvcrG/J2ieqJZaxl0Hx2bQUzm1A9YujMYvHcmTcTJW5C
KOgk8/y/Ydgaf/2u8e/xan5aOKafTRTlukZjyFVR8D8vx0UuKZ3Hy8IqmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOi6XwQ4o9ihwUzbo27Dctz2oK08MB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvNkxwZkJEaWoyS0hCVE51amJzTnkzUGFnclR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMAMA0G
CSqGSIb3DQEBCwUAA4IBAQByVDnWsff5SPTMdCtYOdNK0h4thBciVmus6fPjoItP
FdiPrT+NOqC5geE4EGbomyfMB2fLTYG0J4hBmo4QDlE6z9JMPV2ih919JS3ylH/a
HfmakMPgtYfPW2sGzaO4f/toqXrw3St+n/xW5lRrOZT0tdHuw6HO1HlB5n86SZLX
v9HcOebT6ncXaHvEABK/0japnUGkfrz0w0OjsP+DVW5LuWhSyR/s/FqLk8tbMbSv
y7f6iCkuAsN1oL/fsQqo66pVcxrY7sqZ0kqVps+Yk1Unx6wnaGFdgnlHJ8XDR3+v
QtR4K/XUIKHT4ISfJJB/8SG3aphXofuD1lqSq8WCGx6R
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org