Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/6o6pUwQWoFesEZYROc1W3FyC4vU.roa
File: 6o6pUwQWoFesEZYROc1W3FyC4vU.roa (raw, json)
Hash identifier: a+MlCjuuSyTQDT7JRoWcqUPjxZMy2gsj+LMqbGgPfK4=
Subject key identifier: EA:8E:A9:53:04:16:A0:57:AC:11:96:11:39:CD:56:DC:5C:82:E2:F5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 01857315DFFF0EB33B115EB8A936DE0204F3
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/6o6pUwQWoFesEZYROc1W3FyC4vU.roa
Signing time: Mon 02 Jan 2023 15:24:51 +0000
ROA not before: Mon 02 Jan 2023 15:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31221
IP address blocks: 193.218.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:df:ff:0e:b3:3b:11:5e:b8:a9:36:de:02:04:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Jan 2 15:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea8ea9530416a057ac11961139cd56dc5c82e2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:50:e4:40:fc:fe:76:f4:77:b0:67:8b:40:
64:78:d4:9c:83:fc:48:71:31:99:ad:5b:e3:a3:00:
41:90:3b:f1:ff:92:b3:29:9d:d1:d2:93:9b:81:26:
93:5b:ca:25:d9:23:d0:30:ab:cb:c4:33:7c:43:af:
86:74:1b:94:6e:e8:54:e5:a0:cc:52:c9:c2:d5:5c:
03:ab:49:d2:a0:e5:a8:1e:4b:2d:c5:7f:e3:f7:0b:
4b:c4:5f:54:b1:06:09:37:61:37:66:8f:2c:8f:0c:
2a:97:e8:28:44:ab:9c:66:0a:d8:64:0d:c9:ce:8d:
89:d6:96:12:ed:a1:d5:c2:08:ce:e1:9e:7d:1b:f0:
23:aa:79:89:4e:9d:c4:a1:a1:22:ec:59:63:e7:39:
30:8c:1c:eb:ad:b6:4b:74:09:94:f4:90:d1:39:7e:
99:c0:2b:86:9a:b0:53:0a:db:47:ab:9d:88:b0:f2:
94:0f:d6:82:9e:42:cf:98:44:e1:d6:68:d2:6b:5a:
97:56:dd:d7:31:ac:34:00:73:aa:d0:1f:2e:4b:22:
e7:3f:b0:45:2a:d1:10:6f:95:b5:f7:67:81:39:a7:
21:42:48:74:0a:13:70:f2:86:f7:bd:5b:99:47:08:
c4:84:9d:6c:1a:86:0e:24:70:bb:40:33:20:6d:77:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8E:A9:53:04:16:A0:57:AC:11:96:11:39:CD:56:DC:5C:82:E2:F5
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/6o6pUwQWoFesEZYROc1W3FyC4vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.120.0/24
Signature Algorithm: sha256WithRSAEncryption
24:52:44:4e:03:08:9f:1f:90:92:85:4d:2b:be:22:97:c6:7e:
6c:01:0b:23:83:6d:3f:58:02:7a:1d:c7:05:80:00:16:c5:90:
86:6e:f7:10:32:79:5a:bc:bb:8a:35:bc:85:77:90:0c:76:99:
ad:80:0e:41:05:4e:9c:fb:59:ed:61:31:f3:1b:42:94:ea:0a:
17:77:05:98:6e:c5:9b:26:e3:3f:d6:cb:b6:67:5d:69:62:25:
e6:ee:76:5e:91:dd:33:37:74:05:21:7b:44:4e:f9:54:08:94:
e0:6f:e5:64:9d:ee:43:36:45:f1:bb:e8:4c:85:01:ab:ea:f3:
c5:9c:e7:d7:f7:3c:3c:a0:88:ac:15:54:90:6c:61:b1:58:4a:
4a:84:8c:98:ad:f3:98:71:c8:af:32:2d:90:96:84:da:70:1d:
19:a3:23:47:d3:d2:f0:8c:eb:67:4a:98:a1:7a:7f:d5:be:87:
26:b1:43:17:68:03:e5:ea:e9:b5:33:e1:9c:6c:69:02:a9:ad:
66:ca:3c:a7:80:1b:1b:f2:c7:7a:96:3c:61:e9:1a:b1:fb:68:
fb:b3:4c:64:84:44:30:6e:51:fa:72:3c:f9:57:b2:30:2a:08:
79:3f:13:ec:96:da:f6:e8:b2:74:56:76:8a:30:53:6f:7d:48:
ca:e5:85:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzFd//DrM7EV64qTbeAgTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZWViMjQyZmIwYWZhYTAzN2Q5Y2FmNTYwNGM2NTg3ZTQw
ZGUzYjUwHhcNMjMwMTAyMTUyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYThlYTk1MzA0MTZhMDU3YWMxMTk2MTEzOWNkNTZkYzVjODJlMmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwONQ5ED8/nb0d7Bni0BkeNScg/xI
cTGZrVvjowBBkDvx/5KzKZ3R0pObgSaTW8ol2SPQMKvLxDN8Q6+GdBuUbuhU5aDM
UsnC1VwDq0nSoOWoHkstxX/j9wtLxF9UsQYJN2E3Zo8sjwwql+goRKucZgrYZA3J
zo2J1pYS7aHVwgjO4Z59G/AjqnmJTp3EoaEi7Flj5zkwjBzrrbZLdAmU9JDROX6Z
wCuGmrBTCttHq52IsPKUD9aCnkLPmETh1mjSa1qXVt3XMaw0AHOq0B8uSyLnP7BF
KtEQb5W192eBOachQkh0ChNw8ob3vVuZRwjEhJ1sGoYOJHC7QDMgbXda/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOqOqVMEFqBXrBGWETnNVtxcguL1MB8GA1UdIwQY
MBaAFCLuskL7CvqgN9nK9WBMZYfkDeO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYt
MjUxNTYyZjAwZmM1LzEvNm82cFV3UVdvRmVzRVpZUk9jMVczRnlDNHZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYtMjUxNTYyZjAwZmM1
LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwdp4MA0G
CSqGSIb3DQEBCwUAA4IBAQAkUkROAwifH5CShU0rviKXxn5sAQsjg20/WAJ6HccF
gAAWxZCGbvcQMnlavLuKNbyFd5AMdpmtgA5BBU6c+1ntYTHzG0KU6goXdwWYbsWb
JuM/1su2Z11pYiXm7nZekd0zN3QFIXtETvlUCJTgb+Vkne5DNkXxu+hMhQGr6vPF
nOfX9zw8oIisFVSQbGGxWEpKhIyYrfOYccivMi2QloTacB0ZoyNH09LwjOtnSpih
en/VvocmsUMXaAPl6um1M+GcbGkCqa1myjyngBsb8sd6ljxh6Rqx+2j7s0xkhEQw
blH6cjz5V7IwKgh5PxPsltr26LJ0VnaKMFNvfUjK5YVj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:17 2024 by rpki-client on console-ams.rpki-client.org