Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/6iITby21zFqWX7xItmQ8-N4xWPM.roa
File: 6iITby21zFqWX7xItmQ8-N4xWPM.roa (raw, json)
Hash identifier: yoCWaJjwBVrIpjpRh66l91kVNBHkWcFRh+iBgmzAGfA=
Subject key identifier: EA:22:13:6F:2D:B5:CC:5A:96:5F:BC:48:B6:64:3C:F8:DE:31:58:F3
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 01856D41A3B29087C5281BE2BBDCB8CD2375
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/6iITby21zFqWX7xItmQ8-N4xWPM.roa
Signing time: Sun 01 Jan 2023 12:14:56 +0000
ROA not before: Sun 01 Jan 2023 12:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196944
IP address blocks: 193.105.142.0/24 maxlen: 24
2001:678:fc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:a3:b2:90:87:c5:28:1b:e2:bb:dc:b8:cd:23:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Jan 1 12:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea22136f2db5cc5a965fbc48b6643cf8de3158f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:63:46:98:8e:e6:0c:fe:d3:50:56:d0:b8:
35:d0:27:6d:c2:c9:30:36:11:80:87:45:0c:7a:02:
c5:a2:6a:de:2f:e2:a0:44:5f:26:bd:bb:24:6b:0b:
2e:c9:75:3a:dd:37:78:c1:49:7e:b2:3d:a9:15:cd:
12:52:b8:76:38:f1:59:96:df:c0:57:88:fa:a9:41:
59:19:06:b5:8b:59:a4:1f:33:11:61:33:12:e0:61:
bc:aa:71:c1:b7:5a:a3:44:1f:b9:13:c3:da:f7:46:
15:4e:af:a0:6d:d8:aa:48:33:9b:92:95:19:98:fe:
7f:5a:5e:3b:a6:e5:16:86:65:e5:00:b4:e2:c8:fa:
ef:3f:d9:5b:a9:c8:85:fb:87:5c:67:fe:15:14:b6:
d4:3f:64:f8:d4:31:bb:6b:d0:84:0b:30:44:f0:b4:
1d:82:67:2d:37:7c:2a:93:5c:81:7c:62:db:cf:37:
60:4d:08:64:41:7c:86:e9:41:09:e7:93:94:ab:e7:
f0:25:57:86:15:05:cd:49:c3:df:84:d4:95:75:f5:
f8:75:24:84:e4:90:4a:e5:75:00:71:8c:c0:10:4b:
8c:79:5a:21:4e:25:bd:c2:17:7a:65:8a:81:b8:7a:
26:fe:9d:4d:da:cd:2d:af:01:bc:21:f0:71:29:3b:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:22:13:6F:2D:B5:CC:5A:96:5F:BC:48:B6:64:3C:F8:DE:31:58:F3
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/6iITby21zFqWX7xItmQ8-N4xWPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.142.0/24
IPv6:
2001:678:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
ce:06:43:47:ea:47:1d:c5:fb:cc:e1:10:0e:70:06:3c:98:03:
26:3a:18:d3:e3:dc:44:cf:5c:4f:ef:41:a5:21:e7:b6:83:39:
ce:c4:c0:eb:93:0b:46:dd:e9:f8:d5:1f:a4:9a:79:da:4d:60:
2f:16:58:f9:86:24:56:20:01:c7:07:0b:90:42:c6:79:4c:f4:
b3:28:4b:0b:86:60:5e:cc:cd:88:ad:69:49:91:52:97:f2:e7:
f4:e1:5d:ee:c5:57:d5:30:b9:66:a5:d1:00:5a:32:6e:63:a0:
61:ec:a1:f9:56:06:9f:db:ac:d0:37:b6:27:85:6c:73:53:fe:
77:46:ad:be:0d:78:bf:83:50:77:df:76:4d:3f:20:d4:e9:fe:
2e:b3:8e:47:5b:29:72:d1:60:25:9f:ed:23:92:36:5c:67:23:
06:c1:1b:61:db:2e:3a:ca:24:34:ec:1b:9f:b0:2b:09:0a:ea:
2d:54:d9:e7:6e:6e:eb:dd:99:ab:22:81:a9:70:d0:cb:9d:f7:
e8:ad:77:ad:fe:18:af:e0:0c:a2:ce:e0:52:72:45:98:09:93:
5c:df:47:48:93:da:a8:c8:bf:20:b6:21:68:36:f0:d6:54:61:
f4:9f:27:ee:29:14:b3:04:0b:29:1b:32:fc:b9:18:44:7e:29:
aa:49:95:04
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVtQaOykIfFKBviu9y4zSN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl
NGU0NjEwHhcNMjMwMTAxMTIxNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTIyMTM2ZjJkYjVjYzVhOTY1ZmJjNDhiNjY0M2NmOGRlMzE1OGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOljRpiO5gz+01BW0Lg10Cdtwskw
NhGAh0UMegLFomreL+KgRF8mvbskawsuyXU63Td4wUl+sj2pFc0SUrh2OPFZlt/A
V4j6qUFZGQa1i1mkHzMRYTMS4GG8qnHBt1qjRB+5E8Pa90YVTq+gbdiqSDObkpUZ
mP5/Wl47puUWhmXlALTiyPrvP9lbqciF+4dcZ/4VFLbUP2T41DG7a9CECzBE8LQd
gmctN3wqk1yBfGLbzzdgTQhkQXyG6UEJ55OUq+fwJVeGFQXNScPfhNSVdfX4dSSE
5JBK5XUAcYzAEEuMeVohTiW9whd6ZYqBuHom/p1N2s0trwG8IfBxKTu4UwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOoiE28ttcxall+8SLZkPPjeMVjzMB8GA1UdIwQY
MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt
YmM5MWMwNjcwZDAzLzEvNmlJVGJ5MjF6RnFXWDd4SXRtUTgtTjR4V1BNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz
LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWmOMA8E
AgACMAkDBwAgAQZ4D8AwDQYJKoZIhvcNAQELBQADggEBAM4GQ0fqRx3F+8zhEA5w
BjyYAyY6GNPj3ETPXE/vQaUh57aDOc7EwOuTC0bd6fjVH6SaedpNYC8WWPmGJFYg
AccHC5BCxnlM9LMoSwuGYF7MzYitaUmRUpfy5/ThXe7FV9UwuWal0QBaMm5joGHs
oflWBp/brNA3tieFbHNT/ndGrb4NeL+DUHffdk0/INTp/i6zjkdbKXLRYCWf7SOS
NlxnIwbBG2HbLjrKJDTsG5+wKwkK6i1U2edubuvdmasigalw0Mud9+itd63+GK/g
DKLO4FJyRZgJk1zfR0iT2qjIvyC2IWg28NZUYfSfJ+4pFLMECykbMvy5GER+KapJ
lQQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:34 2024 by rpki-client on console-fra.rpki-client.org