Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/6HEy9z-RR7efS6mQ6qmBWKrsPxo.roa
File: 6HEy9z-RR7efS6mQ6qmBWKrsPxo.roa (raw, json)
Hash identifier: aXfEAnipOtXkPGrnXn8JsI+qMD0Gx/h18TdG0xnY6hA=
Subject key identifier: E8:71:32:F7:3F:91:47:B7:9F:4B:A9:90:EA:A9:81:58:AA:EC:3F:1A
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 0189BBDBE6B641B993AF93143240F01EE0E5
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/6HEy9z-RR7efS6mQ6qmBWKrsPxo.roa
Signing time: Thu 03 Aug 2023 14:44:58 +0000
ROA not before: Thu 03 Aug 2023 14:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208570
IP address blocks: 185.63.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:db:e6:b6:41:b9:93:af:93:14:32:40:f0:1e:e0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Aug 3 14:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e87132f73f9147b79f4ba990eaa98158aaec3f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:88:91:c3:4e:5c:dd:74:fa:4d:db:57:3e:e2:
bf:27:a7:cf:7c:02:0f:3c:aa:0d:aa:f0:ef:88:4d:
ec:82:42:2b:d0:ca:c8:fd:8b:1d:69:62:06:37:a0:
5d:8a:0e:36:d3:77:98:80:48:8f:fb:ee:ae:e1:43:
c7:b5:7d:53:fb:25:ef:2b:53:64:bf:a4:fb:2d:44:
59:92:42:82:b0:e1:62:46:92:37:5c:ed:51:86:f9:
4d:cd:21:a8:80:2c:52:43:a6:2c:5d:a8:9d:5b:5e:
3f:a8:4f:a9:1b:9b:0e:0b:e0:33:6b:d1:55:a7:1f:
87:a6:6a:58:7c:88:c6:a0:e0:d2:c9:b2:af:91:e7:
37:63:f6:87:b8:1e:ed:f6:5b:63:b7:64:88:ec:82:
a3:a5:c8:5a:c7:f1:1b:b3:0f:93:f9:7c:8c:8f:aa:
c9:b6:7c:13:f6:3a:f0:ec:76:6a:7e:9a:96:a0:4d:
71:ac:a5:f3:56:73:df:4a:22:bc:94:4b:aa:5b:8b:
33:2a:0c:7d:2f:19:53:fe:36:0a:4e:1c:55:82:29:
79:3f:9f:99:f0:b5:30:ef:1f:dd:a9:f6:1e:3e:dc:
97:30:67:9a:54:f0:56:59:91:c2:c6:4d:d4:61:28:
92:27:9f:5a:3b:6d:66:a8:fb:eb:f4:87:ea:12:3b:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:71:32:F7:3F:91:47:B7:9F:4B:A9:90:EA:A9:81:58:AA:EC:3F:1A
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/6HEy9z-RR7efS6mQ6qmBWKrsPxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.85.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7e:af:9f:e2:5a:95:e7:65:6c:be:6e:31:5f:7f:25:ab:d6:
8c:8e:c0:e0:30:10:54:19:ab:8e:b9:fa:06:a6:01:1c:d9:64:
30:9e:4f:f2:c0:55:10:d9:19:3a:e2:7c:3c:1c:35:5f:ce:6d:
de:2e:33:86:3e:97:a4:08:f4:b1:17:07:61:ab:ed:5c:9c:8d:
6d:f4:b6:92:51:5f:dc:ad:4e:19:22:00:61:19:8e:47:aa:38:
4c:1a:7b:44:2f:3d:db:42:cc:9e:83:ec:26:b7:42:1d:ce:7a:
ea:c1:60:b7:78:c6:09:1c:c2:07:c3:3f:34:5a:00:32:f0:db:
0a:b0:5c:16:e4:84:38:ce:20:dc:2e:a2:23:cf:3e:e5:ff:e2:
02:2d:eb:12:f1:81:16:c3:b1:6e:38:5b:b4:9b:97:40:99:81:
bc:06:1f:fd:f0:00:dd:98:41:3f:80:82:f8:e1:c3:bd:f1:71:
9f:a2:9c:11:fc:5a:19:85:df:e5:ea:1f:16:fe:fb:d9:9f:6a:
7f:7c:f8:21:72:4c:b5:10:76:78:d6:7a:6f:59:d0:58:ac:ad:
80:7b:3c:60:7a:bf:dc:80:f6:35:15:cb:95:f5:8f:26:04:d1:
45:ce:d6:8d:02:e7:fd:f0:93:f9:9c:39:c3:93:00:25:51:cf:
66:72:b4:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYm72+a2QbmTr5MUMkDwHuDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOTkyNzE5MTkxYTg5NGQwNjhkYmE4ZDBhMTAwNmU5ZmVh
ZGFhNjgwHhcNMjMwODAzMTQ0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODcxMzJmNzNmOTE0N2I3OWY0YmE5OTBlYWE5ODE1OGFhZWMzZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIiRw05c3XT6TdtXPuK/J6fPfAIP
PKoNqvDviE3sgkIr0MrI/YsdaWIGN6Bdig4203eYgEiP++6u4UPHtX1T+yXvK1Nk
v6T7LURZkkKCsOFiRpI3XO1RhvlNzSGogCxSQ6YsXaidW14/qE+pG5sOC+Aza9FV
px+HpmpYfIjGoODSybKvkec3Y/aHuB7t9ltjt2SI7IKjpchax/Ebsw+T+XyMj6rJ
tnwT9jrw7HZqfpqWoE1xrKXzVnPfSiK8lEuqW4szKgx9LxlT/jYKThxVgil5P5+Z
8LUw7x/dqfYePtyXMGeaVPBWWZHCxk3UYSiSJ59aO21mqPvr9IfqEjv4FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhxMvc/kUe3n0upkOqpgViq7D8aMB8GA1UdIwQY
MBaAFI2ZJxkZGolNBo26jQoQBun+rapoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalprbkdSa2FpVTBHamJxTkNoQUc2ZjZ0cW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83OWVkMDQtYmUxMS00Mzg4LWE2NmEt
NDgyZWM3ZDY4NzJlLzEvNkhFeTl6LVJSN2VmUzZtUTZxbUJXS3JzUHhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS83OWVkMDQtYmUxMS00Mzg4LWE2NmEtNDgyZWM3ZDY4NzJl
LzEvalprbkdSa2FpVTBHamJxTkNoQUc2ZjZ0cW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT9VMA0G
CSqGSIb3DQEBCwUAA4IBAQByfq+f4lqV52Vsvm4xX38lq9aMjsDgMBBUGauOufoG
pgEc2WQwnk/ywFUQ2Rk64nw8HDVfzm3eLjOGPpekCPSxFwdhq+1cnI1t9LaSUV/c
rU4ZIgBhGY5HqjhMGntELz3bQsyeg+wmt0IdznrqwWC3eMYJHMIHwz80WgAy8NsK
sFwW5IQ4ziDcLqIjzz7l/+ICLesS8YEWw7FuOFu0m5dAmYG8Bh/98ADdmEE/gIL4
4cO98XGfopwR/FoZhd/l6h8W/vvZn2p/fPghcky1EHZ41npvWdBYrK2Aezxger/c
gPY1FcuV9Y8mBNFFztaNAuf98JP5nDnDkwAlUc9mcrRT
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:18 2024 by rpki-client on console-ams.rpki-client.org