Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/6UrJOLD7zq54CU2b-9KCAQv6-FM.roa
File: 6UrJOLD7zq54CU2b-9KCAQv6-FM.roa (raw, json)
Hash identifier: lKB0imMySQzrS6HoEiII5vWc+6j689Ck/h3PTVopksk=
Subject key identifier: E9:4A:C9:38:B0:FB:CE:AE:78:09:4D:9B:FB:D2:82:01:0B:FA:F8:53
Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Certificate serial: 018CC26D05A1824122B5FD470857CF756846
Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/6UrJOLD7zq54CU2b-9KCAQv6-FM.roa
Signing time: Mon 01 Jan 2024 00:29:33 +0000
ROA not before: Mon 01 Jan 2024 00:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52125
IP address blocks: 193.32.179.0/24 maxlen: 24
193.32.178.0/24 maxlen: 24
193.32.177.0/24 maxlen: 24
185.236.23.0/24 maxlen: 24
185.236.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 03:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:05:a1:82:41:22:b5:fd:47:08:57:cf:75:68:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e94ac938b0fbceae78094d9bfbd282010bfaf853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:a9:f9:5f:e7:9f:2a:c6:e1:46:07:09:00:
96:c2:5d:2c:9c:1c:10:de:f4:20:04:66:ca:04:c3:
77:4c:03:68:4d:d0:6b:94:75:a8:de:56:36:19:4b:
dc:e7:2c:26:76:66:11:a4:81:d5:89:c2:e1:5d:ce:
64:6e:65:31:eb:8e:a3:dc:36:df:b0:de:e0:47:84:
d3:f3:4a:c8:65:89:b8:ae:c1:2e:3b:6e:d5:0a:87:
da:1f:7d:7f:38:42:2d:1d:d7:8e:24:0c:1f:c3:28:
2b:08:f4:88:b7:f5:3f:5a:70:03:0c:5a:b3:6f:d6:
f9:52:4d:65:a9:96:78:da:d3:b7:e5:01:3b:69:3d:
23:e1:20:d8:8e:d4:69:b8:20:e0:cb:61:54:1d:8f:
47:d3:da:6d:58:d8:7e:32:0b:fe:6c:88:6a:55:f7:
6e:b5:a6:56:ba:ec:5c:16:39:15:56:66:1c:fb:ca:
89:b9:9f:7a:17:6b:b7:2a:b2:2b:db:16:40:b8:f4:
0b:2f:dd:5b:39:a7:6f:82:d3:43:f8:92:1f:ac:6e:
71:c0:e9:b7:21:52:93:31:f5:42:0e:b8:c1:c0:7c:
08:e1:ff:fb:4e:b8:ea:e8:6d:65:8f:14:9b:47:c6:
98:71:ea:15:5b:02:d9:ab:57:cc:44:9f:fb:04:cd:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4A:C9:38:B0:FB:CE:AE:78:09:4D:9B:FB:D2:82:01:0B:FA:F8:53
X509v3 Authority Key Identifier:
keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/6UrJOLD7zq54CU2b-9KCAQv6-FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.22.0/23
193.32.177.0-193.32.179.255
Signature Algorithm: sha256WithRSAEncryption
57:e4:59:9e:46:79:ee:70:7c:4a:bc:ac:a4:32:a0:9d:43:11:
02:06:e5:ad:4e:2b:a8:d9:a4:e5:27:44:9a:8a:43:45:69:b6:
ec:02:2c:8b:69:a8:8b:8f:d3:0e:86:23:27:f3:c4:ed:fd:07:
1e:f2:73:bc:f6:d5:2d:0e:d0:ab:7f:0b:cb:79:97:dd:4e:2e:
ad:14:80:c6:ba:c8:fd:70:9b:6d:61:92:9c:3b:84:8c:0e:c0:
c5:fa:5b:47:dd:04:98:06:81:17:99:b3:e6:cc:6b:24:9b:27:
24:9a:86:02:12:da:9c:fd:0a:b9:81:6d:e3:b2:ce:29:71:db:
f8:7e:dd:0e:19:f6:85:34:19:b5:cc:6e:89:99:f1:73:83:94:
5f:cc:b1:05:1b:e8:fe:09:d3:bf:38:32:75:24:b6:30:40:f5:
c2:5d:76:ac:73:6b:b6:95:86:0d:25:1e:f7:2c:37:9e:a1:aa:
37:eb:8e:0a:6d:10:5a:45:f6:b7:9b:70:28:c6:98:26:dc:c6:
cf:52:2f:e6:29:fe:da:3b:48:6c:c5:98:b5:70:51:a1:0a:e1:
9e:2c:99:cf:aa:b1:db:20:5c:d5:86:b4:2e:8a:fe:1c:5c:ba:
c6:09:5b:95:0c:5c:32:21:32:91:98:b0:bd:dd:3d:00:85:1b:
cf:99:0c:8c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzCbQWhgkEitf1HCFfPdWhGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjdjYTlmZmFmZTcyYTMwOTY2ZjdlNDNkOTJiNThlNzc0
Y2U3NDEwHhcNMjQwMTAxMDAyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTRhYzkzOGIwZmJjZWFlNzgwOTRkOWJmYmQyODIwMTBiZmFmODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwmp+V/nnyrG4UYHCQCWwl0snBwQ
3vQgBGbKBMN3TANoTdBrlHWo3lY2GUvc5ywmdmYRpIHVicLhXc5kbmUx646j3Dbf
sN7gR4TT80rIZYm4rsEuO27VCofaH31/OEItHdeOJAwfwygrCPSIt/U/WnADDFqz
b9b5Uk1lqZZ42tO35QE7aT0j4SDYjtRpuCDgy2FUHY9H09ptWNh+Mgv+bIhqVfdu
taZWuuxcFjkVVmYc+8qJuZ96F2u3KrIr2xZAuPQLL91bOadvgtND+JIfrG5xwOm3
IVKTMfVCDrjBwHwI4f/7Trjq6G1ljxSbR8aYceoVWwLZq1fMRJ/7BM26QQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOlKyTiw+86ueAlNm/vSggEL+vhTMB8GA1UdIwQY
MBaAFOz3yp/6/nKjCWb35D2StY53TOdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUt
OTgxZmJiMzQ0MmRkLzEvNlVySk9MRDd6cTU0Q1UyYi05S0NBUXY2LUZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUtOTgxZmJiMzQ0MmRk
LzEvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBuewWMAwD
BADBILEDBALBILAwDQYJKoZIhvcNAQELBQADggEBAFfkWZ5Gee5wfEq8rKQyoJ1D
EQIG5a1OK6jZpOUnRJqKQ0VptuwCLItpqIuP0w6GIyfzxO39Bx7yc7z21S0O0Kt/
C8t5l91OLq0UgMa6yP1wm21hkpw7hIwOwMX6W0fdBJgGgReZs+bMaySbJySahgIS
2pz9CrmBbeOyzilx2/h+3Q4Z9oU0GbXMbomZ8XODlF/MsQUb6P4J0784MnUktjBA
9cJddqxza7aVhg0lHvcsN56hqjfrjgptEFpF9rebcCjGmCbcxs9SL+Yp/to7SGzF
mLVwUaEK4Z4smc+qsdsgXNWGtC6K/hxcusYJW5UMXDIhMpGYsL3dPQCFG8+ZDIw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:18 2024 by rpki-client on console-ams.rpki-client.org