Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l6ItooQsNrEzO7Xia1H0GTylMe4.roa
File: l6ItooQsNrEzO7Xia1H0GTylMe4.roa (raw, json)
Hash identifier: /MO5mlTxKmh41PDjyK7+tgIuw683JYfEvPTMMAfxjgo=
Subject key identifier: 97:A2:2D:A2:84:2C:36:B1:33:3B:B5:E2:6B:51:F4:19:3C:A5:31:EE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018A9207F6FB239D38050812CA68B0E3B662
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l6ItooQsNrEzO7Xia1H0GTylMe4.roa
Signing time: Thu 14 Sep 2023 04:51:50 +0000
ROA not before: Thu 14 Sep 2023 04:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197549
IP address blocks: 217.69.175.0/24 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 32
89.144.0.0/18 maxlen: 32
89.106.64.0/19 maxlen: 32
94.249.218.0/23 maxlen: 32
94.249.222.0/23 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:07:f6:fb:23:9d:38:05:08:12:ca:68:b0:e3:b6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 14 04:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97a22da2842c36b1333bb5e26b51f4193ca531ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:57:42:bf:99:38:a8:ec:22:d7:95:f3:15:
80:b7:fa:44:f1:ea:a0:52:97:fa:52:e5:0c:88:67:
8f:7d:cf:13:73:56:d7:86:8a:50:98:a4:f2:05:11:
62:1a:4f:7a:37:5d:41:c4:4e:ff:7f:67:12:b5:c0:
3f:f8:06:4b:34:1a:88:5b:1e:ab:22:06:87:c0:21:
40:41:e8:02:9e:8c:05:5e:68:f2:56:70:ce:16:4b:
74:f9:a6:da:08:75:6b:ff:d9:cc:cf:6d:0f:31:a2:
36:3c:e7:2a:ef:90:e3:b3:96:63:2e:84:3f:8a:59:
eb:b3:44:68:67:11:a2:a3:5d:a4:17:d8:12:ce:dc:
e8:e6:77:f7:8f:2e:5e:9c:c5:a8:b6:3b:c1:c0:49:
19:0f:15:c1:e0:6e:4e:be:72:15:79:68:0d:f5:c8:
83:5b:b6:b8:8b:aa:e8:5b:cd:71:48:73:c5:91:9e:
d0:94:e4:1f:11:b3:e4:5a:e7:00:a8:1c:97:a7:24:
8d:22:19:e2:0c:f0:8b:d0:d9:7c:03:40:c0:a3:ad:
40:dc:4d:9a:15:74:95:ac:47:2c:11:25:9c:68:a2:
43:7e:5d:59:fa:03:da:80:d6:ec:37:f5:b2:34:7a:
52:ea:65:55:df:d5:4f:2e:a7:df:ba:b4:38:f9:b0:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:2D:A2:84:2C:36:B1:33:3B:B5:E2:6B:51:F4:19:3C:A5:31:EE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l6ItooQsNrEzO7Xia1H0GTylMe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.0.0/19
89.106.64.0/19
89.144.0.0/18
94.249.218.0/23
94.249.222.0/23
217.69.175.0/24
Signature Algorithm: sha256WithRSAEncryption
06:54:62:fb:02:25:31:ff:3a:3d:9b:60:db:6d:69:34:a1:b8:
2d:ff:2c:a9:1f:0b:47:17:69:3d:6c:33:00:69:b0:80:78:e5:
16:05:ad:f4:61:ea:ea:a0:ef:b7:13:1b:66:c5:63:7f:05:2a:
6a:8e:ba:0d:e0:02:1a:2b:75:cf:be:db:4f:58:9b:4c:df:27:
59:5d:6a:ae:f9:3f:38:6a:ee:61:34:f6:39:fd:06:42:9d:62:
32:e0:5f:12:41:3a:bc:a1:f8:50:7c:60:ed:13:65:f1:37:48:
ce:b4:10:d7:c3:0b:d0:1d:e3:c4:90:11:60:23:2f:97:c8:c1:
08:07:09:95:0a:00:05:8c:e5:95:1e:9e:cf:8d:fa:b7:7d:52:
6e:1c:92:12:70:1d:73:48:9c:eb:ca:9f:65:fa:8a:91:00:b4:
27:53:27:bc:19:11:83:e4:3d:3d:48:37:71:18:69:02:45:39:
f0:7b:2d:3a:d9:7e:f2:2d:33:55:7a:ee:da:b8:a8:a3:0f:a6:
68:8d:18:05:c6:28:c6:93:e9:39:5c:0b:62:7c:3e:2c:92:11:
9a:6b:d9:2d:d6:b3:2b:25:59:3d:6b:bb:23:0b:3f:1f:71:e5:
4d:20:a7:62:82:7b:43:ae:17:e6:64:d5:a3:38:6c:e4:8a:9b:
61:50:38:b6
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYqSB/b7I504BQgSymiw47ZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjMwOTE0MDQ1MTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2EyMmRhMjg0MmMzNmIxMzMzYmI1ZTI2YjUxZjQxOTNjYTUzMWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXRXQr+ZOKjsIteV8xWAt/pE8eqg
Upf6UuUMiGePfc8Tc1bXhopQmKTyBRFiGk96N11BxE7/f2cStcA/+AZLNBqIWx6r
IgaHwCFAQegCnowFXmjyVnDOFkt0+abaCHVr/9nMz20PMaI2POcq75Djs5ZjLoQ/
ilnrs0RoZxGio12kF9gSztzo5nf3jy5enMWotjvBwEkZDxXB4G5OvnIVeWgN9ciD
W7a4i6roW81xSHPFkZ7QlOQfEbPkWucAqByXpySNIhniDPCL0Nl8A0DAo61A3E2a
FXSVrEcsESWcaKJDfl1Z+gPagNbsN/WyNHpS6mVV39VPLqffurQ4+bDlhwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJeiLaKELDaxMzu14mtR9Bk8pTHuMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbDZJdG9vUXNOckV6TzdYaWExSDBHVHlsTWU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFVV0AAwQF
WWpAAwQGWZAAAwQBXvnaAwQBXvneAwQA2UWvMA0GCSqGSIb3DQEBCwUAA4IBAQAG
VGL7AiUx/zo9m2DbbWk0obgt/yypHwtHF2k9bDMAabCAeOUWBa30YerqoO+3Extm
xWN/BSpqjroN4AIaK3XPvttPWJtM3ydZXWqu+T84au5hNPY5/QZCnWIy4F8SQTq8
ofhQfGDtE2XxN0jOtBDXwwvQHePEkBFgIy+XyMEIBwmVCgAFjOWVHp7Pjfq3fVJu
HJIScB1zSJzryp9l+oqRALQnUye8GRGD5D09SDdxGGkCRTnwey062X7yLTNVeu7a
uKijD6ZojRgFxijGk+k5XAtifD4skhGaa9kt1rMrJVk9a7sjCz8fceVNIKdigntD
rhfmZNWjOGzkipthUDi2
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org