Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/mGY66BFQzDkKVkahFbA1RBgMbDc.roa
File: mGY66BFQzDkKVkahFbA1RBgMbDc.roa (raw, json)
Hash identifier: Q6kchfhqlnW1Jaz1us2r2fWTxAG7xq4f7FSmE+1k8Z4=
Subject key identifier: 98:66:3A:E8:11:50:CC:39:0A:56:46:A1:15:B0:35:44:18:0C:6C:37
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 018571A7B631C2E62BFECB522D6FABC8CF31
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/mGY66BFQzDkKVkahFbA1RBgMbDc.roa
Signing time: Mon 02 Jan 2023 08:44:54 +0000
ROA not before: Mon 02 Jan 2023 08:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 62.68.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b6:31:c2:e6:2b:fe:cb:52:2d:6f:ab:c8:cf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jan 2 08:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98663ae81150cc390a5646a115b03544180c6c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:64:b9:40:b3:39:6c:6e:c5:89:1f:70:89:
c8:c8:32:78:09:91:f8:4f:f9:c2:75:69:c9:b0:c8:
45:44:e9:6a:e8:f8:3f:8b:4e:f0:29:14:6e:b3:19:
07:e7:44:1a:1e:84:32:c0:1b:20:64:cc:d9:ab:a0:
d9:c4:e5:4d:d2:44:bd:fc:8c:67:bf:18:b7:ef:12:
ac:a5:a8:4e:79:34:b0:44:4a:3d:3d:ea:93:7d:5a:
71:9f:4f:d3:35:d0:5b:42:23:e1:26:b5:b6:53:28:
20:52:8a:8e:d9:79:0b:4b:42:85:a7:fe:af:1d:ef:
e4:8a:a5:d8:6e:2d:8f:7c:38:65:90:4b:13:6c:0b:
4c:a4:e8:c5:86:96:3b:aa:1c:d2:49:8b:38:ae:5d:
43:0d:e2:72:a8:79:02:44:3f:c6:3e:9c:aa:1b:9d:
04:2a:75:57:02:60:7a:e5:03:dd:b9:aa:90:4c:41:
e8:c5:37:7a:e9:df:7a:b7:fe:a6:07:3c:0d:c4:98:
56:ce:fb:bf:80:37:f1:9f:0c:07:32:49:86:79:8a:
2e:6b:d1:95:c7:e2:59:09:7e:ba:7d:f4:aa:0a:1e:
51:e9:47:3c:84:5e:13:bc:b6:35:85:ea:89:54:34:
f1:d3:67:8e:e4:e1:38:b8:15:8b:45:cb:90:99:a6:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:66:3A:E8:11:50:CC:39:0A:56:46:A1:15:B0:35:44:18:0C:6C:37
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/mGY66BFQzDkKVkahFbA1RBgMbDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:87:49:c7:27:5c:94:8a:7f:18:c9:50:6b:b7:5c:af:42:28:
9e:39:ff:32:48:b3:82:55:89:1c:16:b8:1a:f0:8d:6c:31:b0:
37:6b:27:a5:e7:51:bd:b6:1f:2b:5a:48:e9:cb:14:b5:66:67:
f2:4b:2a:0e:65:7a:8e:68:b1:fe:b2:18:b8:b0:85:49:df:6f:
8f:7f:5e:f7:1a:29:89:74:e3:e2:08:b1:cb:c5:d7:ad:f0:03:
c8:e0:92:19:55:85:e1:48:70:74:54:0b:f5:a4:75:91:cf:40:
5c:0f:85:49:83:71:f6:5b:63:2b:f0:62:1d:9b:48:eb:51:b1:
c4:24:d9:ee:d2:e5:de:8a:b7:33:28:0a:6e:9a:11:6f:0a:83:
4d:e8:a6:a7:09:80:65:8f:34:1a:04:ed:d1:c3:18:1a:23:0e:
34:90:7e:4e:c9:3e:30:d1:a0:00:15:a1:c9:b5:a3:04:3a:3b:
45:5a:30:75:cb:0e:36:f0:97:81:ba:02:b1:a4:e4:92:d5:f1:
9f:68:b8:5c:dc:68:d7:e5:8b:56:cc:2f:37:f5:86:31:25:25:
7a:f2:2d:5c:7d:6f:02:18:73:b7:01:1a:f4:9f:51:a3:52:bf:
be:eb:ba:29:cb:ba:86:22:8d:83:31:09:a7:9e:b9:e7:c5:85:
a0:c4:eb:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxp7YxwuYr/stSLW+ryM8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjMwMTAyMDg0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODY2M2FlODExNTBjYzM5MGE1NjQ2YTExNWIwMzU0NDE4MGM2YzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup1kuUCzOWxuxYkfcInIyDJ4CZH4
T/nCdWnJsMhFROlq6Pg/i07wKRRusxkH50QaHoQywBsgZMzZq6DZxOVN0kS9/Ixn
vxi37xKspahOeTSwREo9PeqTfVpxn0/TNdBbQiPhJrW2UyggUoqO2XkLS0KFp/6v
He/kiqXYbi2PfDhlkEsTbAtMpOjFhpY7qhzSSYs4rl1DDeJyqHkCRD/GPpyqG50E
KnVXAmB65QPduaqQTEHoxTd66d96t/6mBzwNxJhWzvu/gDfxnwwHMkmGeYoua9GV
x+JZCX66ffSqCh5R6Uc8hF4TvLY1heqJVDTx02eO5OE4uBWLRcuQmabZDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJhmOugRUMw5ClZGoRWwNUQYDGw3MB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvbUdZNjZCRlF6RGtLVmthaEZiQTFSQmdNYkRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRJMA0G
CSqGSIb3DQEBCwUAA4IBAQA8h0nHJ1yUin8YyVBrt1yvQiieOf8ySLOCVYkcFrga
8I1sMbA3ayel51G9th8rWkjpyxS1ZmfySyoOZXqOaLH+shi4sIVJ32+Pf173GimJ
dOPiCLHLxdet8API4JIZVYXhSHB0VAv1pHWRz0BcD4VJg3H2W2Mr8GIdm0jrUbHE
JNnu0uXeirczKApumhFvCoNN6KanCYBljzQaBO3RwxgaIw40kH5OyT4w0aAAFaHJ
taMEOjtFWjB1yw428JeBugKxpOSS1fGfaLhc3GjX5YtWzC839YYxJSV68i1cfW8C
GHO3ARr0n1GjUr++67opy7qGIo2DMQmnnrnnxYWgxOtt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:35 2024 by rpki-client on console-fra.rpki-client.org