Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/6WSos1Kb-Y4kirfSAOJRpxcBL4o.roa
File: 6WSos1Kb-Y4kirfSAOJRpxcBL4o.roa (raw, json)
Hash identifier: UwsAuKvTDWjh0D6CRQE0H6VaHBHdextSlz3gU0NUKUA=
Subject key identifier: E9:64:A8:B3:52:9B:F9:8E:24:8A:B7:D2:00:E2:51:A7:17:01:2F:8A
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018A14E8F0522954331C231CD54CAFAC40BB
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/6WSos1Kb-Y4kirfSAOJRpxcBL4o.roa
Signing time: Sun 20 Aug 2023 21:45:24 +0000
ROA not before: Sun 20 Aug 2023 21:45:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399073
IP address blocks: 81.22.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Sep 2023 06:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:14:e8:f0:52:29:54:33:1c:23:1c:d5:4c:af:ac:40:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 20 21:45:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e964a8b3529bf98e248ab7d200e251a717012f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f0:72:97:e5:45:24:90:d5:0a:13:b4:39:c7:
b9:20:18:3f:35:1f:fb:df:a6:ac:c1:73:a1:d0:1d:
2d:6f:71:29:53:bd:57:63:11:55:98:b7:97:f6:01:
56:20:6c:da:0b:e4:47:23:ff:02:22:e9:1b:5f:c2:
83:00:59:fa:20:ea:1c:99:11:90:79:c7:ad:78:80:
3e:39:e8:55:63:e9:40:1a:18:9a:3b:4c:92:e8:46:
50:f7:f3:00:8f:8a:c2:9a:d5:d0:8f:a3:f3:62:66:
56:af:e7:e4:9e:06:b4:65:bf:62:53:d2:41:8e:58:
a8:a8:0c:4b:68:e7:14:3d:2d:87:e7:bb:5b:b9:84:
96:7b:d5:66:2a:3a:73:34:08:f8:22:8b:dd:4b:92:
27:b0:cf:b7:a3:ca:56:d8:6f:c2:4e:c5:e4:97:00:
35:89:6c:19:eb:f4:d3:e0:e4:a5:77:bc:eb:5d:ff:
78:1e:50:12:da:af:42:2d:d8:eb:3f:f8:d5:9a:d9:
f6:c2:f4:64:c9:51:ca:7f:e3:4b:07:fb:f7:f8:27:
cf:01:13:f2:a0:57:4e:a2:04:aa:75:04:1e:de:39:
2e:1b:57:2f:be:74:af:d5:fb:1b:48:be:8f:0b:d3:
32:ab:96:3c:6c:ee:c4:62:94:5e:a5:15:b9:e6:5d:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:A8:B3:52:9B:F9:8E:24:8A:B7:D2:00:E2:51:A7:17:01:2F:8A
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/6WSos1Kb-Y4kirfSAOJRpxcBL4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.140.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:b4:ad:1b:be:f7:3b:38:ae:ee:17:f1:91:ff:15:48:e2:7b:
f1:52:bd:22:92:c2:d4:50:53:56:75:85:51:69:95:c3:ef:28:
b1:c7:fa:e4:4d:72:bd:55:64:d2:73:9a:19:93:af:41:4a:92:
ec:07:cb:12:47:65:b6:5d:97:69:cc:91:9b:f8:0e:88:17:f0:
db:34:9c:8d:03:4c:fe:44:db:52:7e:91:5d:fa:af:38:e5:99:
c0:f8:3a:90:d2:d3:e9:30:ef:c7:db:c8:2d:98:f7:23:2f:5e:
00:2c:12:2d:bc:e7:3a:1d:85:92:21:e2:98:e3:2f:95:26:76:
44:26:4e:2b:86:87:a4:ea:2f:9f:87:73:12:0c:13:87:63:7f:
fc:9e:47:58:93:63:48:fd:4f:b3:2a:63:f4:ca:45:e1:22:ed:
b1:01:c8:ed:41:3e:ce:d2:90:6d:2f:6b:02:7d:e4:6d:f9:86:
73:8d:d3:6f:d7:cf:66:c7:eb:cd:07:2e:8b:33:9f:8f:a0:50:
ae:de:c7:6c:16:48:3a:80:99:ea:d4:f9:34:bf:7d:ad:b8:ba:
97:41:25:95:6d:ff:c2:48:59:47:2a:dc:ba:2d:6a:5f:44:29:
fd:e0:a8:d9:64:ae:73:8d:e6:ac:2d:b8:f5:08:ed:13:0a:2f:
8c:63:f9:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoU6PBSKVQzHCMc1UyvrEC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwODIwMjE0NTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTY0YThiMzUyOWJmOThlMjQ4YWI3ZDIwMGUyNTFhNzE3MDEyZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fByl+VFJJDVChO0Oce5IBg/NR/7
36aswXOh0B0tb3EpU71XYxFVmLeX9gFWIGzaC+RHI/8CIukbX8KDAFn6IOocmRGQ
eceteIA+OehVY+lAGhiaO0yS6EZQ9/MAj4rCmtXQj6PzYmZWr+fknga0Zb9iU9JB
jlioqAxLaOcUPS2H57tbuYSWe9VmKjpzNAj4IovdS5InsM+3o8pW2G/CTsXklwA1
iWwZ6/TT4OSld7zrXf94HlAS2q9CLdjrP/jVmtn2wvRkyVHKf+NLB/v3+CfPARPy
oFdOogSqdQQe3jkuG1cvvnSv1fsbSL6PC9Myq5Y8bO7EYpRepRW55l1FwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlkqLNSm/mOJIq30gDiUacXAS+KMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvNldTb3MxS2ItWTRraXJmU0FPSlJweGNCTDRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCURaMMA0G
CSqGSIb3DQEBCwUAA4IBAQButK0bvvc7OK7uF/GR/xVI4nvxUr0iksLUUFNWdYVR
aZXD7yixx/rkTXK9VWTSc5oZk69BSpLsB8sSR2W2XZdpzJGb+A6IF/DbNJyNA0z+
RNtSfpFd+q845ZnA+DqQ0tPpMO/H28gtmPcjL14ALBItvOc6HYWSIeKY4y+VJnZE
Jk4rhoek6i+fh3MSDBOHY3/8nkdYk2NI/U+zKmP0ykXhIu2xAcjtQT7O0pBtL2sC
feRt+YZzjdNv189mx+vNBy6LM5+PoFCu3sdsFkg6gJnq1Pk0v32tuLqXQSWVbf/C
SFlHKty6LWpfRCn94KjZZK5zjeasLbj1CO0TCi+MY/nT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org