Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/6AZaopXsPKkhQcj8s8cI1M6YTwM.roa
File: 6AZaopXsPKkhQcj8s8cI1M6YTwM.roa (raw, json)
Hash identifier: 7Uz0PFDji6BDybhbSXWmdsFiZTQ1730lTwGA6u1/OlU=
Subject key identifier: E8:06:5A:A2:95:EC:3C:A9:21:41:C8:FC:B3:C7:08:D4:CE:98:4F:03
Certificate issuer: /CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec
Certificate serial: 01856E78B35082B43470EC61A66B8889267D
Authority key identifier: FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/6AZaopXsPKkhQcj8s8cI1M6YTwM.roa
Signing time: Sun 01 Jan 2023 17:54:42 +0000
ROA not before: Sun 01 Jan 2023 17:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20555
IP address blocks: 213.135.44.0/22 maxlen: 22
213.135.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:b3:50:82:b4:34:70:ec:61:a6:6b:88:89:26:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec
Validity
Not Before: Jan 1 17:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8065aa295ec3ca92141c8fcb3c708d4ce984f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:99:52:e6:e3:16:89:15:62:5b:fc:ba:7a:
36:c3:c0:94:59:0b:8a:21:c3:43:66:37:3c:64:28:
2c:89:ca:f2:97:ac:ec:98:e7:ce:c0:86:45:b7:6a:
9a:d5:ea:8d:75:3c:2f:f9:4d:2e:9f:94:93:bd:9d:
e2:8d:d5:7f:4a:91:c4:04:6f:fc:99:65:b0:4d:e8:
54:3e:b0:fb:be:f7:8e:95:40:60:d7:d4:38:7a:e6:
e7:98:9b:96:27:dd:7b:10:04:56:0f:eb:14:56:e6:
f9:a1:f0:6c:56:ec:f3:9c:1f:d4:79:13:44:08:71:
47:48:80:ea:1e:a7:ff:18:3e:44:d4:8d:15:9f:0d:
bf:af:01:9e:b4:99:f0:6f:a0:b9:d5:71:6c:14:7f:
91:a8:aa:4b:97:51:5f:ee:75:94:4d:17:a2:1b:27:
2b:e8:a6:d6:fd:d4:eb:4e:e4:55:87:d6:2c:96:ef:
2e:65:b0:db:e4:62:54:60:2c:88:cd:51:5d:f1:4f:
7e:13:8c:ab:e7:55:29:93:fd:5f:bf:7b:4f:4f:fa:
08:dd:5e:ea:9b:74:52:15:bb:76:52:7e:46:99:1d:
ab:57:a5:30:0f:af:1d:39:76:47:d9:a1:d0:3e:b1:
f8:80:6c:8c:11:31:b7:ea:29:d9:3f:c8:8f:99:b0:
31:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:06:5A:A2:95:EC:3C:A9:21:41:C8:FC:B3:C7:08:D4:CE:98:4F:03
X509v3 Authority Key Identifier:
keyid:FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/6AZaopXsPKkhQcj8s8cI1M6YTwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.44.0-213.135.49.255
Signature Algorithm: sha256WithRSAEncryption
27:a5:40:60:8f:70:4e:03:ea:4e:01:50:03:5b:28:dc:9f:da:
2b:25:72:23:cd:ba:30:ad:7b:6a:f0:1f:13:1a:ba:70:59:4f:
c5:bc:74:58:88:dc:79:cc:cc:02:c6:d6:5f:d8:2a:0a:70:23:
76:f8:22:8b:61:3d:4f:fc:ba:8b:68:c9:cb:10:09:25:e8:2a:
12:de:4c:7d:a6:67:0c:f7:c9:f3:8c:95:40:2f:79:dd:e6:b5:
36:2f:66:89:d2:b5:bb:be:77:f3:90:b0:2c:df:1b:32:2f:49:
e7:93:5a:c5:8c:27:08:1d:6e:3f:01:16:2b:1a:2f:cc:9e:2a:
27:01:62:a8:af:3d:b1:5e:da:c8:01:dd:b8:13:05:7d:b3:31:
31:15:25:dd:de:85:c8:c4:e6:84:bc:49:f8:05:57:cb:a4:62:
b5:95:3e:59:e7:ec:c8:fc:44:72:b9:49:4d:54:45:b7:79:7c:
de:d9:26:bb:e9:5f:f0:a5:87:ba:4d:38:06:69:78:fe:4d:65:
59:de:19:e6:09:e0:4a:bc:2a:3e:06:63:49:23:13:69:5f:18:
30:b3:d2:3b:61:f4:1e:91:4c:cd:7b:96:3b:76:5c:b7:86:7c:
46:04:64:50:de:d0:60:29:97:11:62:c0:a7:77:35:89:f6:ec:
25:99:a7:35
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAYVueLNQgrQ0cOxhpmuIiSZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDVhOWM1NDhkNmUzNGU4ZDE1ZmMwNjYzMmFhMzg5OTI3
MmY0ZWMwHhcNMjMwMTAxMTc1NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODA2NWFhMjk1ZWMzY2E5MjE0MWM4ZmNiM2M3MDhkNGNlOTg0ZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbiZUubjFokVYlv8uno2w8CUWQuK
IcNDZjc8ZCgsicryl6zsmOfOwIZFt2qa1eqNdTwv+U0un5STvZ3ijdV/SpHEBG/8
mWWwTehUPrD7vveOlUBg19Q4eubnmJuWJ917EARWD+sUVub5ofBsVuzznB/UeRNE
CHFHSIDqHqf/GD5E1I0Vnw2/rwGetJnwb6C51XFsFH+RqKpLl1Ff7nWUTReiGycr
6KbW/dTrTuRVh9Yslu8uZbDb5GJUYCyIzVFd8U9+E4yr51Upk/1fv3tPT/oI3V7q
m3RSFbt2Un5GmR2rV6UwD68dOXZH2aHQPrH4gGyMETG36inZP8iPmbAx+wIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFOgGWqKV7DypIUHI/LPHCNTOmE8DMB8GA1UdIwQY
MBaAFPsFqcVI1uNOjRX8BmMqo4mScvTsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13V3B4VWpXNDA2TkZmd0dZeXFqaVpKeTlPdy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvZWQ1MDIwLTE1NDktNDAxMy1iNTEy
LWNmNmZkMDZmNDhlZi8xLzZBWmFvcFhzUEtraFFjajhzOGNJMU02WVR3TS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTgvZWQ1MDIwLTE1NDktNDAxMy1iNTEyLWNmNmZkMDZmNDhl
Zi8xLzEtd1dweFVqVzQwNk5GZndHWXlxamlaSnk5T3cuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEAtWH
LAMEAdWHMDANBgkqhkiG9w0BAQsFAAOCAQEAJ6VAYI9wTgPqTgFQA1so3J/aKyVy
I826MK17avAfExq6cFlPxbx0WIjceczMAsbWX9gqCnAjdvgii2E9T/y6i2jJyxAJ
JegqEt5MfaZnDPfJ84yVQC953ea1Ni9midK1u75385CwLN8bMi9J55NaxYwnCB1u
PwEWKxovzJ4qJwFiqK89sV7ayAHduBMFfbMxMRUl3d6FyMTmhLxJ+AVXy6RitZU+
WefsyPxEcrlJTVRFt3l83tkmu+lf8KWHuk04Bml4/k1lWd4Z5gngSrwqPgZjSSMT
aV8YMLPSO2H0HpFMzXuWO3Zct4Z8RgRkUN7QYCmXEWLAp3c1ifbsJZmnNQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org