Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6uMV7R8PoA2UKMbb9SxmRESPdiI.roa
File: 6uMV7R8PoA2UKMbb9SxmRESPdiI.roa (raw, json)
Hash identifier: jGqOUlxyGPR6CReGSA6btxSbjoqUaPpjQQZOrGuGLbQ=
Subject key identifier: EA:E3:15:ED:1F:0F:A0:0D:94:28:C6:DB:F5:2C:66:44:44:8F:76:22
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042C3BF826765376A14C360B2236922
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6uMV7R8PoA2UKMbb9SxmRESPdiI.roa
Signing time: Mon 02 Jan 2023 02:15:01 +0000
ROA not before: Mon 02 Jan 2023 02:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 163.5.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:c3:bf:82:67:65:37:6a:14:c3:60:b2:23:69:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eae315ed1f0fa00d9428c6dbf52c6644448f7622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5f:10:8b:2b:5d:d6:8e:96:ae:cf:09:c8:36:
e7:96:e4:ba:fc:48:b2:1b:c0:74:f1:cc:51:b9:2e:
2c:3b:bc:5d:01:e2:23:1d:11:63:8c:a0:63:38:f6:
ad:ce:4b:bb:95:ca:54:19:81:97:15:54:ec:03:77:
57:72:69:fc:17:e7:28:ab:9c:27:c3:4f:fc:69:78:
b6:a6:7d:43:c1:55:3a:4d:a5:a1:f3:98:70:f8:9a:
5c:68:fb:e5:df:bb:6b:02:16:06:b5:f5:09:bb:48:
3b:8b:cb:d9:c7:6e:0a:8b:a2:94:2c:a6:56:b9:ce:
db:2c:f7:09:3f:b3:e9:cd:dd:ee:27:51:19:88:ee:
89:ee:cd:67:0c:58:ab:98:40:ac:66:a0:8a:c0:5e:
19:7d:af:d4:9b:fd:e2:d6:b4:53:4e:b0:eb:af:98:
eb:b4:9d:6d:3c:48:92:3b:7f:7e:55:13:ae:3e:96:
9d:37:5f:de:1e:d8:b7:d2:a2:ce:10:f7:f1:3c:35:
4e:b8:4d:a6:2e:3f:ee:5d:02:f7:03:36:ba:1a:3b:
b3:77:d7:0b:66:61:65:10:e0:60:b4:ad:31:0b:79:
15:c8:48:c8:37:98:8c:3f:da:58:e6:d8:cb:83:6c:
44:03:6b:78:92:9d:2b:6d:7d:7b:67:c3:ca:ac:bb:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E3:15:ED:1F:0F:A0:0D:94:28:C6:DB:F5:2C:66:44:44:8F:76:22
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6uMV7R8PoA2UKMbb9SxmRESPdiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c7:cc:cd:e8:21:c6:91:fb:15:40:cb:d1:d3:4c:5b:de:2c:
52:fe:71:de:3e:9b:8f:61:63:81:95:34:bd:9f:f6:d1:60:5f:
af:db:be:5b:03:96:e5:7a:60:d8:4a:b4:a3:ab:2c:ef:1b:eb:
3c:c0:f4:09:15:74:6f:2e:fc:f3:d4:11:5a:62:c7:8e:f3:57:
66:5e:78:7d:da:75:fc:bd:b8:17:5c:2a:41:d6:24:21:47:6e:
48:bd:d5:48:3f:20:9c:14:92:b3:32:f8:bd:0c:83:df:75:90:
f9:fd:04:9b:31:34:5d:13:3c:fc:17:07:9a:49:6d:e5:a7:74:
68:62:a3:93:06:13:2f:46:f2:af:75:57:b4:51:d0:b2:c9:a8:
c3:53:e2:ba:5a:3f:12:eb:3a:e9:db:60:1f:c0:a2:7a:1d:0b:
ee:d3:4e:2d:96:50:92:2c:04:4a:d6:54:9d:81:5a:02:49:4b:
ca:78:07:c8:bb:34:6b:18:8f:98:3e:5c:87:a2:19:34:63:3d:
c8:9b:13:79:27:d4:e9:6b:aa:f2:ff:8a:f2:25:7f:dd:21:a0:
15:8b:ac:9c:3c:6b:a5:27:f8:9d:fb:2f:53:00:b3:98:3e:bb:
82:c4:2f:b8:4c:4e:8c:1a:98:06:88:f3:90:d2:b5:2f:35:ef:
bb:2b:37:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwQsO/gmdlN2oUw2CyI2kiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwMTAyMDIxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWUzMTVlZDFmMGZhMDBkOTQyOGM2ZGJmNTJjNjY0NDQ0OGY3NjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV8Qiytd1o6Wrs8JyDbnluS6/Eiy
G8B08cxRuS4sO7xdAeIjHRFjjKBjOPatzku7lcpUGYGXFVTsA3dXcmn8F+coq5wn
w0/8aXi2pn1DwVU6TaWh85hw+JpcaPvl37trAhYGtfUJu0g7i8vZx24Ki6KULKZW
uc7bLPcJP7Ppzd3uJ1EZiO6J7s1nDFirmECsZqCKwF4Zfa/Um/3i1rRTTrDrr5jr
tJ1tPEiSO39+VROuPpadN1/eHti30qLOEPfxPDVOuE2mLj/uXQL3Aza6Gjuzd9cL
ZmFlEOBgtK0xC3kVyEjIN5iMP9pY5tjLg2xEA2t4kp0rbX17Z8PKrLuQvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOrjFe0fD6ANlCjG2/UsZkREj3YiMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvNnVNVjdSOFBvQTJVS01iYjlTeG1SRVNQZGlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVPMA0G
CSqGSIb3DQEBCwUAA4IBAQBtx8zN6CHGkfsVQMvR00xb3ixS/nHePpuPYWOBlTS9
n/bRYF+v275bA5blemDYSrSjqyzvG+s8wPQJFXRvLvzz1BFaYseO81dmXnh92nX8
vbgXXCpB1iQhR25IvdVIPyCcFJKzMvi9DIPfdZD5/QSbMTRdEzz8FweaSW3lp3Ro
YqOTBhMvRvKvdVe0UdCyyajDU+K6Wj8S6zrp22AfwKJ6HQvu004tllCSLARK1lSd
gVoCSUvKeAfIuzRrGI+YPlyHohk0Yz3ImxN5J9Tpa6ry/4ryJX/dIaAVi6ycPGul
J/id+y9TALOYPruCxC+4TE6MGpgGiPOQ0rUvNe+7Kzeg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:03 2024 by rpki-client on console-fra.rpki-client.org