Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/bAHsAGwgx8_Jacj4_RS1k3Gea68.roa
File: bAHsAGwgx8_Jacj4_RS1k3Gea68.roa (raw, json)
Hash identifier: hOq/mXHoObs1fSNeWgUB01felvE7Duqmbd7vtED6PCI=
Subject key identifier: 6C:01:EC:00:6C:20:C7:CF:C9:69:C8:F8:FD:14:B5:93:71:9E:6B:AF
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 01863E2C2F10568304ED403886E2048A735B
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/bAHsAGwgx8_Jacj4_RS1k3Gea68.roa
Signing time: Sat 11 Feb 2023 01:52:08 +0000
ROA not before: Sat 11 Feb 2023 01:52:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210779
IP address blocks: 176.105.253.0/24 maxlen: 24
176.105.255.0/24 maxlen: 24
2a0d:c740:2c::/48 maxlen: 48
2a0d:c740:3c::/48 maxlen: 48
2a0d:c740:f::/48 maxlen: 48
2a0d:c740:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Feb 2023 05:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3e:2c:2f:10:56:83:04:ed:40:38:86:e2:04:8a:73:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Feb 11 01:52:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c01ec006c20c7cfc969c8f8fd14b593719e6baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:6e:7d:6a:17:b8:83:e0:7f:25:0e:44:30:
42:33:b9:2e:fc:7c:05:9b:fe:08:91:22:e2:e7:37:
b9:28:47:62:4d:f8:8a:94:39:8a:71:dd:e4:8a:11:
f5:b8:aa:d1:85:64:a1:3d:d1:d0:2e:4b:db:0e:b3:
cb:46:91:53:ab:66:22:2e:8f:4c:33:10:20:a6:87:
f8:2a:23:df:12:64:52:b5:ed:24:7e:52:9e:15:2d:
7b:32:78:62:e3:53:ef:fb:18:b6:4a:2b:56:32:4e:
d6:ff:03:dd:34:80:07:b1:cd:81:ba:a0:11:55:c0:
d0:89:58:77:dc:1e:98:e6:0d:cc:fa:e5:d7:ec:79:
aa:c5:c8:99:e1:b7:c8:bb:bb:58:c4:f9:f6:39:78:
02:00:eb:19:26:72:13:ef:39:6d:3d:a0:f1:b8:75:
0d:34:81:5f:34:4e:fc:e8:a7:97:cb:f0:c8:66:6e:
de:a3:8a:50:0a:07:6f:d7:34:fc:a4:49:4d:27:91:
b1:2e:2a:f0:ad:a0:a9:f8:89:9c:f2:05:88:3e:3f:
7b:f1:0e:0a:eb:b7:7f:e7:14:1d:af:50:e9:21:ef:
a3:0e:63:b8:54:13:f8:d4:9d:f8:ba:cb:71:1b:29:
79:b1:52:8a:77:c3:d5:f7:60:5e:80:33:3c:31:10:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:EC:00:6C:20:C7:CF:C9:69:C8:F8:FD:14:B5:93:71:9E:6B:AF
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/bAHsAGwgx8_Jacj4_RS1k3Gea68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.253.0/24
176.105.255.0/24
IPv6:
2a0d:c740:a::/48
2a0d:c740:f::/48
2a0d:c740:2c::/48
2a0d:c740:3c::/48
Signature Algorithm: sha256WithRSAEncryption
72:63:9b:fa:8f:eb:41:91:af:b2:94:05:35:d2:27:1a:ff:05:
cc:17:dd:7a:7e:17:d2:3c:e3:2e:27:89:4b:ef:0a:0d:47:17:
58:0c:cd:03:1b:9e:d7:2f:dd:13:88:74:88:2f:3b:28:63:80:
3f:48:0b:83:72:11:53:19:c2:7a:a3:f7:1f:7f:60:6a:24:9e:
a7:8d:85:1e:69:fe:d0:e7:52:44:c8:2f:d8:4b:79:6e:a8:0d:
c4:1d:b4:2c:4f:38:36:07:4a:8d:fa:2b:04:e0:aa:26:3b:f0:
8b:ec:35:19:3c:f4:1a:a9:64:19:da:93:e5:a8:78:7b:e8:bd:
41:89:9b:96:71:fa:b3:f8:f8:dc:9f:7a:40:d6:1c:cd:70:5d:
2c:1a:19:ba:4d:c1:13:86:48:1c:fb:9f:8a:19:46:27:46:62:
37:3c:bc:12:0a:9c:65:1a:4b:87:aa:66:b0:5e:87:0b:7b:39:
b5:72:54:df:5b:91:10:99:f1:43:ff:d2:32:ef:60:41:7a:16:
12:83:fb:c3:27:6f:55:5e:d2:8e:41:90:e6:c6:bd:82:f9:2c:
86:5a:53:40:06:70:be:9d:ed:a6:59:9d:a6:1c:2e:6d:ce:7f:
28:63:fe:bd:82:fd:1a:ce:cc:ae:8a:b2:99:02:e1:48:3f:7d:
ce:de:9c:4e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYY+LC8QVoME7UA4huIEinNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYTI2YjU2Y2VlOTdmNjAyMDk0MWJiMTdjNmE3YzZjZWEw
ZjgxNGEwHhcNMjMwMjExMDE1MjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzAxZWMwMDZjMjBjN2NmYzk2OWM4ZjhmZDE0YjU5MzcxOWU2YmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmhufWoXuIPgfyUORDBCM7ku/HwF
m/4IkSLi5ze5KEdiTfiKlDmKcd3kihH1uKrRhWShPdHQLkvbDrPLRpFTq2YiLo9M
MxAgpof4KiPfEmRSte0kflKeFS17Mnhi41Pv+xi2SitWMk7W/wPdNIAHsc2BuqAR
VcDQiVh33B6Y5g3M+uXX7HmqxciZ4bfIu7tYxPn2OXgCAOsZJnIT7zltPaDxuHUN
NIFfNE786KeXy/DIZm7eo4pQCgdv1zT8pElNJ5GxLirwraCp+Imc8gWIPj978Q4K
67d/5xQdr1DpIe+jDmO4VBP41J34ustxGyl5sVKKd8PV92BegDM8MRATrQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFGwB7ABsIMfPyWnI+P0UtZNxnmuvMB8GA1UdIwQY
MBaAFGuia1bO6X9gIJQbsXxqfGzqD4FKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iOTAzZTktNmQwOS00ZTIwLWI5MjYt
MzY5MmY5NmUzM2E5LzEvYkFIc0FHd2d4OF9KYWNqNF9SUzFrM0dlYTY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iOTAzZTktNmQwOS00ZTIwLWI5MjYtMzY5MmY5NmUzM2E5
LzEvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDASBAIAATAMAwQAsGn9AwQA
sGn/MCoEAgACMCQDBwAqDcdAAAoDBwAqDcdAAA8DBwAqDcdAACwDBwAqDcdAADww
DQYJKoZIhvcNAQELBQADggEBAHJjm/qP60GRr7KUBTXSJxr/BcwX3Xp+F9I84y4n
iUvvCg1HF1gMzQMbntcv3ROIdIgvOyhjgD9IC4NyEVMZwnqj9x9/YGoknqeNhR5p
/tDnUkTIL9hLeW6oDcQdtCxPODYHSo36KwTgqiY78IvsNRk89BqpZBnak+WoeHvo
vUGJm5Zx+rP4+NyfekDWHM1wXSwaGbpNwROGSBz7n4oZRidGYjc8vBIKnGUaS4eq
ZrBehwt7ObVyVN9bkRCZ8UP/0jLvYEF6FhKD+8Mnb1Ve0o5BkObGvYL5LIZaU0AG
cL6d7aZZnaYcLm3Ofyhj/r2C/RrOzK6KspkC4Ug/fc7enE4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org