Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/6l8IhwAXjYo5SX9L-UDjUJq-zVI.roa
File: 6l8IhwAXjYo5SX9L-UDjUJq-zVI.roa (raw, json)
Hash identifier: ulcLtFkyZPwv7dkD6vcceFaQHfNdG2y/rGEGkcKhNbM=
Subject key identifier: EA:5F:08:87:00:17:8D:8A:39:49:7F:4B:F9:40:E3:50:9A:BE:CD:52
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 01857315EFE39B802DDE56C58D5801F13784
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/6l8IhwAXjYo5SX9L-UDjUJq-zVI.roa
Signing time: Mon 02 Jan 2023 15:24:55 +0000
ROA not before: Mon 02 Jan 2023 15:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.33.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:ef:e3:9b:80:2d:de:56:c5:8d:58:01:f1:37:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Jan 2 15:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea5f088700178d8a39497f4bf940e3509abecd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:31:be:5b:c1:28:03:e9:9c:de:46:17:9f:
10:87:06:f1:b7:62:dc:90:42:15:94:d5:b5:bf:e3:
1f:d1:ec:4a:bc:ef:a8:8b:d2:a7:6f:cb:54:42:76:
ab:da:0e:fd:83:30:42:ec:39:aa:3b:cf:bb:fb:4a:
7b:a2:ad:98:64:a4:3d:a2:2c:f1:7d:a5:e6:f8:4e:
7e:5b:b3:0b:7a:1b:3a:f0:7d:c0:b3:3b:76:6c:ff:
d4:c7:be:c2:bb:4e:25:94:80:16:ca:67:58:62:e7:
b9:ec:0f:b9:3d:c2:e8:80:a0:ef:fc:59:88:c8:ab:
56:d6:22:56:42:dc:ff:1f:83:d2:51:f5:58:3c:33:
f7:58:42:85:ae:e8:2c:41:48:ba:05:f8:aa:e7:5c:
61:35:66:60:38:81:36:80:02:d6:76:ee:56:41:cc:
08:91:70:fe:a8:ae:f8:e6:6f:b3:b3:63:28:88:b1:
ac:05:f7:f2:9b:52:31:65:ee:0e:e8:71:88:2b:8f:
50:6e:8d:a4:58:c6:6a:37:4c:fe:18:26:c3:8b:38:
68:a0:03:6e:f6:8d:bb:c6:c3:3f:8a:8f:7c:5d:fb:
71:47:32:e9:78:02:f8:42:43:4e:e8:6f:8c:24:1b:
b8:8c:f7:1e:8a:6c:81:9b:e1:50:a0:36:e9:bb:68:
40:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5F:08:87:00:17:8D:8A:39:49:7F:4B:F9:40:E3:50:9A:BE:CD:52
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/6l8IhwAXjYo5SX9L-UDjUJq-zVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.137.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7e:ae:d5:da:d7:7a:bb:e7:64:01:dd:4b:b4:54:fe:4d:ad:
61:b9:b1:33:c5:4f:65:8c:ca:12:ee:49:7e:54:16:8d:15:d5:
84:4d:3a:60:83:e1:a5:a4:2d:84:96:c6:b9:64:90:3d:40:be:
c6:b8:af:1c:45:5e:3d:d3:b5:79:72:b0:68:09:76:b8:70:91:
85:22:7b:94:cd:62:82:e4:de:ee:8c:11:e8:dd:fe:eb:5b:59:
45:e6:cb:ce:8e:80:21:43:9f:45:df:ce:29:ea:cb:6e:9c:4d:
23:f4:b1:46:1a:b2:b7:85:c4:f2:9a:50:78:c0:dd:ff:43:9f:
19:23:bd:1f:78:3e:2f:bd:a9:bf:eb:13:d4:5d:c9:3d:d2:05:
27:49:82:6f:ab:8c:94:c8:9b:7c:52:51:5c:d2:26:ed:5f:9e:
0b:30:0e:7a:5d:13:fa:56:e5:d3:c5:cc:d2:56:97:f1:29:0c:
e0:25:10:84:e0:03:c8:f9:e4:1a:23:e4:e0:38:60:f4:c3:59:
3e:14:d2:a3:84:14:e7:39:7c:5a:0a:7b:1e:3c:01:f5:b3:4e:
3c:90:b5:07:c5:c4:a0:53:7e:03:cc:b8:bb:24:4e:2a:f7:9b:
db:00:f7:b9:e3:10:ea:a4:62:96:2e:93:74:6f:9f:fa:d4:de:
8e:f6:5e:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzFe/jm4At3lbFjVgB8TeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMWJkOTczMmU2Y2RkNmU3NDk0ZDc5MTg3ZmNhODU1YjUx
OTk5MDkwHhcNMjMwMTAyMTUyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTVmMDg4NzAwMTc4ZDhhMzk0OTdmNGJmOTQwZTM1MDlhYmVjZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZwxvlvBKAPpnN5GF58Qhwbxt2Lc
kEIVlNW1v+Mf0exKvO+oi9Knb8tUQnar2g79gzBC7DmqO8+7+0p7oq2YZKQ9oizx
faXm+E5+W7MLehs68H3Aszt2bP/Ux77Cu04llIAWymdYYue57A+5PcLogKDv/FmI
yKtW1iJWQtz/H4PSUfVYPDP3WEKFrugsQUi6Bfiq51xhNWZgOIE2gALWdu5WQcwI
kXD+qK745m+zs2MoiLGsBffym1IxZe4O6HGIK49Qbo2kWMZqN0z+GCbDizhooANu
9o27xsM/io98XftxRzLpeAL4QkNO6G+MJBu4jPceimyBm+FQoDbpu2hAWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpfCIcAF42KOUl/S/lA41Cavs1SMB8GA1UdIwQY
MBaAFJ8b2XMubN1udJTXkYf8qFW1GZkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTct
ZDhiODIwMmQ3Nzg2LzEvNmw4SWh3QVhqWW81U1g5TC1VRGpVSnEtelZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTctZDhiODIwMmQ3Nzg2
LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSGJMA0G
CSqGSIb3DQEBCwUAA4IBAQB4fq7V2td6u+dkAd1LtFT+Ta1hubEzxU9ljMoS7kl+
VBaNFdWETTpgg+GlpC2Elsa5ZJA9QL7GuK8cRV4907V5crBoCXa4cJGFInuUzWKC
5N7ujBHo3f7rW1lF5svOjoAhQ59F384p6stunE0j9LFGGrK3hcTymlB4wN3/Q58Z
I70feD4vvam/6xPUXck90gUnSYJvq4yUyJt8UlFc0ibtX54LMA56XRP6VuXTxczS
VpfxKQzgJRCE4API+eQaI+TgOGD0w1k+FNKjhBTnOXxaCnsePAH1s048kLUHxcSg
U34DzLi7JE4q95vbAPe54xDqpGKWLpN0b5/61N6O9l4/
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:17 2024 by rpki-client on console-ams.rpki-client.org