Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6Fq6gyooP80dkEQTVslf_nk09f8.roa
File: 6Fq6gyooP80dkEQTVslf_nk09f8.roa (raw, json)
Hash identifier: g2IlHhq0rpWTEI1uM9vM8zMZuNL8Tai9MuX4K1xdBKQ=
Subject key identifier: E8:5A:BA:83:2A:28:3F:CD:1D:90:44:13:56:C9:5F:FE:79:34:F5:FF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018AAD7E4DB22A2A92A243E77E34F2035BE3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6Fq6gyooP80dkEQTVslf_nk09f8.roa
Signing time: Tue 19 Sep 2023 12:50:50 +0000
ROA not before: Tue 19 Sep 2023 12:50:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 85.121.148.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:7e:4d:b2:2a:2a:92:a2:43:e7:7e:34:f2:03:5b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 19 12:50:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e85aba832a283fcd1d90441356c95ffe7934f5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f3:3a:ce:4e:f0:25:6b:5f:1b:0e:6f:79:50:
4e:8d:6a:03:78:7c:b9:f3:29:2d:a4:64:29:71:bb:
9f:47:09:8a:b9:d4:c1:00:e9:ea:8f:16:71:3a:42:
b2:40:12:e7:19:6a:0c:6f:f8:1e:c2:7f:42:84:c6:
38:e2:f1:e2:ad:2b:1e:bf:56:bd:28:13:4d:f5:bf:
c8:df:39:84:1c:b4:d4:ef:85:54:83:89:ef:a5:7f:
bb:65:eb:4c:40:cb:fb:ba:68:6a:97:b2:3f:3d:05:
6c:14:00:b0:d7:bb:a3:31:45:76:72:b1:0f:0d:c0:
d2:22:69:a7:5e:45:cb:85:02:24:e3:89:3c:44:bd:
1e:85:7e:0a:63:7f:a5:b5:d8:9e:db:bd:89:c7:af:
9e:e3:f9:46:82:8f:37:8e:ef:e1:0e:da:02:1b:03:
f4:08:02:1f:42:0b:8e:17:0d:9e:ef:76:95:0d:cb:
20:e4:0a:3e:a5:b7:7f:98:6b:1c:90:18:1c:5a:1f:
8f:e5:a7:96:84:1a:aa:43:4f:d8:ef:b3:03:42:da:
9f:c1:a2:43:9c:e3:d9:8f:f7:9b:8f:8e:f8:54:27:
fd:29:11:26:a8:08:7d:5d:37:ba:45:23:61:32:ab:
45:f1:03:31:50:e8:a2:b4:62:50:bc:4a:20:22:e1:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5A:BA:83:2A:28:3F:CD:1D:90:44:13:56:C9:5F:FE:79:34:F5:FF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6Fq6gyooP80dkEQTVslf_nk09f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.148.0/23
Signature Algorithm: sha256WithRSAEncryption
66:5f:6f:50:7d:ca:3a:f6:0a:3a:52:e0:40:0a:89:f1:90:89:
cf:02:5b:98:04:eb:2e:54:8e:7c:d0:0d:ab:3a:c4:37:05:24:
39:94:be:e2:bd:16:86:13:62:17:79:8a:c9:02:cc:e2:92:3a:
f9:e7:fa:99:2c:6f:67:b0:de:8a:e0:2e:65:75:50:95:9f:0f:
cf:24:d5:15:f9:bd:44:89:9c:75:5e:51:91:16:34:6c:21:2f:
be:ec:4d:37:2c:0d:da:d2:16:91:42:4d:ea:e4:fb:6c:0a:9c:
0c:85:e7:71:a5:88:93:12:42:62:ea:ce:57:4b:83:55:42:f8:
fb:7e:54:32:92:0b:85:15:90:d6:cb:53:70:d3:9c:bd:42:1f:
c7:34:fd:39:54:7d:14:e8:94:f2:87:e3:e0:3d:ed:45:ef:d8:
e1:f7:14:64:80:82:dc:ed:b1:d6:bb:fc:92:61:9f:38:78:43:
70:f3:80:80:f2:51:8f:8d:50:91:c0:15:e6:25:fe:07:b9:a0:
45:b4:ed:5b:0a:02:75:1c:cc:75:93:ac:ba:80:3a:a6:2b:94:
91:92:16:19:f1:1c:3e:29:71:50:98:48:c1:85:7f:ab:45:4a:
49:df:7f:0b:c3:29:72:b9:aa:e4:8f:3c:31:27:f9:21:00:c7:
7b:9b:e4:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqtfk2yKiqSokPnfjTyA1vjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwOTE5MTI1MDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODVhYmE4MzJhMjgzZmNkMWQ5MDQ0MTM1NmM5NWZmZTc5MzRmNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvM6zk7wJWtfGw5veVBOjWoDeHy5
8yktpGQpcbufRwmKudTBAOnqjxZxOkKyQBLnGWoMb/gewn9ChMY44vHirSsev1a9
KBNN9b/I3zmEHLTU74VUg4nvpX+7ZetMQMv7umhql7I/PQVsFACw17ujMUV2crEP
DcDSImmnXkXLhQIk44k8RL0ehX4KY3+ltdie272Jx6+e4/lGgo83ju/hDtoCGwP0
CAIfQguOFw2e73aVDcsg5Ao+pbd/mGsckBgcWh+P5aeWhBqqQ0/Y77MDQtqfwaJD
nOPZj/ebj474VCf9KREmqAh9XTe6RSNhMqtF8QMxUOiitGJQvEogIuGNOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhauoMqKD/NHZBEE1bJX/55NPX/MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvNkZxNmd5b29QODBka0VRVFZzbGZfbmswOWY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVXmUMA0G
CSqGSIb3DQEBCwUAA4IBAQBmX29Qfco69go6UuBAConxkInPAluYBOsuVI580A2r
OsQ3BSQ5lL7ivRaGE2IXeYrJAszikjr55/qZLG9nsN6K4C5ldVCVnw/PJNUV+b1E
iZx1XlGRFjRsIS++7E03LA3a0haRQk3q5PtsCpwMhedxpYiTEkJi6s5XS4NVQvj7
flQykguFFZDWy1Nw05y9Qh/HNP05VH0U6JTyh+PgPe1F79jh9xRkgILc7bHWu/yS
YZ84eENw84CA8lGPjVCRwBXmJf4HuaBFtO1bCgJ1HMx1k6y6gDqmK5SRkhYZ8Rw+
KXFQmEjBhX+rRUpJ338LwylyuarkjzwxJ/khAMd7m+TF
-----END CERTIFICATE-----
Generated at Wed Sep 20 06:47:32 2023 by rpki-client on console-ams.rpki-client.org