Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/6vdBpIhry23wCTCh0bp0fpcZ71Q.roa
File: 6vdBpIhry23wCTCh0bp0fpcZ71Q.roa (raw, json)
Hash identifier: tG4aQVeO5m/kay99wOYUe2ZCXsVSJzwMQtJ+cnf8wbA=
Subject key identifier: EA:F7:41:A4:88:6B:CB:6D:F0:09:30:A1:D1:BA:74:7E:97:19:EF:54
Certificate issuer: /CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
Certificate serial: 01928C1F42A308CB0B91641CA63FE9DDE2E8
Authority key identifier: AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/6vdBpIhry23wCTCh0bp0fpcZ71Q.roa
Signing time: Mon 14 Oct 2024 17:41:51 +0000
ROA not before: Mon 14 Oct 2024 17:41:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204923
IP address blocks: 5.61.0.0/21 maxlen: 21
80.208.248.0/22 maxlen: 22
185.60.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8c:1f:42:a3:08:cb:0b:91:64:1c:a6:3f:e9:dd:e2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
Validity
Not Before: Oct 14 17:41:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaf741a4886bcb6df00930a1d1ba747e9719ef54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:7f:af:12:b8:bb:b6:a3:fa:a5:9c:e4:6d:
c8:a8:16:fd:4d:97:dd:70:49:f0:09:fe:0b:57:21:
18:8e:2e:22:b7:83:00:2e:4d:f5:d4:f0:3b:4c:9b:
67:c6:05:f0:d5:02:f7:93:ac:28:29:a8:05:56:1c:
73:7c:5f:82:14:13:39:e3:47:38:29:ea:43:35:3d:
dc:2c:aa:34:a5:b3:61:49:95:95:fb:ee:3b:fe:6e:
2d:b1:c9:2d:8b:7b:a8:09:ee:06:7f:07:61:09:ec:
21:0e:ab:24:43:4c:18:6b:b4:99:a1:55:bd:fc:dd:
1d:96:1a:31:13:c9:1a:b8:d1:3a:f5:e8:59:73:4e:
e2:ae:f4:bd:9c:8f:bc:14:a1:95:1b:aa:2d:f5:7b:
6c:76:6c:10:fd:ae:1f:d3:ad:89:df:f5:13:b3:59:
2b:3c:1c:1c:9f:01:29:59:53:33:fd:47:78:6a:67:
f6:4a:cc:5b:d6:2b:4e:77:32:eb:b7:e1:42:b1:ea:
15:10:b7:1f:77:2c:aa:52:c6:e0:d5:66:85:0f:50:
f1:1f:92:07:0e:63:83:87:83:5c:bc:f4:e8:eb:aa:
24:44:19:93:9e:3f:3f:e8:25:4d:72:54:46:0e:97:
e2:0c:3c:32:54:ef:94:7a:d0:92:ac:5e:e4:72:90:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:41:A4:88:6B:CB:6D:F0:09:30:A1:D1:BA:74:7E:97:19:EF:54
X509v3 Authority Key Identifier:
keyid:AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/6vdBpIhry23wCTCh0bp0fpcZ71Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.0.0/21
80.208.248.0/22
185.60.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:43:85:b5:94:2a:f5:5a:9f:1e:f9:44:32:44:19:54:74:ef:
aa:3b:d1:79:59:8f:cd:3f:3a:38:25:3f:a1:53:24:59:8c:e3:
01:52:cb:71:ed:d8:e3:0e:af:ee:e1:e4:14:a7:d5:fe:25:da:
da:5b:74:76:f8:bf:a1:29:11:b6:ca:07:48:5f:cf:17:91:d4:
69:d6:e8:b8:24:db:d7:5f:08:d1:cb:59:75:ba:bf:18:d0:bc:
54:9f:42:92:0d:a7:8f:f5:6c:8b:94:7c:84:78:b1:fc:92:2b:
60:bc:a3:42:d7:a3:db:7c:0e:c9:e2:29:fe:6d:fd:56:01:84:
ea:1d:28:f1:35:b8:7f:a7:bb:58:14:46:bc:a2:c7:e4:7a:fd:
9c:5f:01:70:65:d1:27:b3:8b:cf:62:03:59:e0:8d:2d:5e:92:
32:27:f4:03:7c:2e:9a:4e:64:e3:cd:ae:20:3f:a1:cf:ba:30:
19:33:92:f2:b3:84:16:80:3f:71:07:88:01:aa:d3:dc:3e:44:
22:51:ee:fb:62:71:8c:89:2b:60:eb:a3:90:d7:07:71:c4:a0:
71:a1:23:f7:f1:57:bf:da:43:54:d8:57:28:72:b2:d2:e7:4e:
26:08:66:b1:93:48:dc:3d:ff:d6:bc:9f:b5:fb:0e:b5:ef:b2:
74:77:9a:92
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZKMH0KjCMsLkWQcpj/p3eLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMjIyZjU2NzNiODI4YTdhZTUyZjk5YmEwYzYyYWNkNzA5
NzRhMzgwHhcNMjQxMDE0MTc0MTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWY3NDFhNDg4NmJjYjZkZjAwOTMwYTFkMWJhNzQ3ZTk3MTllZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYZ/rxK4u7aj+qWc5G3IqBb9TZfd
cEnwCf4LVyEYji4it4MALk311PA7TJtnxgXw1QL3k6woKagFVhxzfF+CFBM540c4
KepDNT3cLKo0pbNhSZWV++47/m4tsckti3uoCe4GfwdhCewhDqskQ0wYa7SZoVW9
/N0dlhoxE8kauNE69ehZc07irvS9nI+8FKGVG6ot9XtsdmwQ/a4f062J3/UTs1kr
PBwcnwEpWVMz/Ud4amf2Ssxb1itOdzLrt+FCseoVELcfdyyqUsbg1WaFD1DxH5IH
DmODh4NcvPTo66okRBmTnj8/6CVNclRGDpfiDDwyVO+UetCSrF7kcpD9zQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOr3QaSIa8tt8AkwodG6dH6XGe9UMB8GA1UdIwQY
MBaAFKoiL1ZzuCinrlL5m6DGKs1wl0o4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlJdlZuTzRLS2V1VXZtYm9NWXF6WENYU2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTQ2MzYtYzk5OC00MDlhLTg5YmIt
MmI3YjgyN2U3MThjLzEvNnZkQnBJaHJ5MjN3Q1RDaDBicDBmcGNaNzFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNTQ2MzYtYzk5OC00MDlhLTg5YmItMmI3YjgyN2U3MThj
LzEvcWlJdlZuTzRLS2V1VXZtYm9NWXF6WENYU2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDBT0AAwQC
UND4AwQCuTzwMA0GCSqGSIb3DQEBCwUAA4IBAQCKQ4W1lCr1Wp8e+UQyRBlUdO+q
O9F5WY/NPzo4JT+hUyRZjOMBUstx7djjDq/u4eQUp9X+JdraW3R2+L+hKRG2ygdI
X88XkdRp1ui4JNvXXwjRy1l1ur8Y0LxUn0KSDaeP9WyLlHyEeLH8kitgvKNC16Pb
fA7J4in+bf1WAYTqHSjxNbh/p7tYFEa8osfkev2cXwFwZdEns4vPYgNZ4I0tXpIy
J/QDfC6aTmTjza4gP6HPujAZM5Lys4QWgD9xB4gBqtPcPkQiUe77YnGMiStg66OQ
1wdxxKBxoSP38Ve/2kNU2FcocrLS504mCGaxk0jcPf/WvJ+1+w6177J0d5qS
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:51 2025 by rpki-client