Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/6mPKS_VT-e5W5H70k0yHUknSlp0.roa
File: 6mPKS_VT-e5W5H70k0yHUknSlp0.roa (raw, json)
Hash identifier: 9TIK98YWdopRunU5nVMNrLVIlBZVlX+VyA8R2ppOs3Y=
Subject key identifier: EA:63:CA:4B:F5:53:F9:EE:56:E4:7E:F4:93:4C:87:52:49:D2:96:9D
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018959EA40DD58E3BE633180B342A59CCF03
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/6mPKS_VT-e5W5H70k0yHUknSlp0.roa
Signing time: Sat 15 Jul 2023 14:17:51 +0000
ROA not before: Sat 15 Jul 2023 14:17:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35348
IP address blocks: 89.44.228.0/24 maxlen: 24
89.44.229.0/24 maxlen: 24
89.44.230.0/24 maxlen: 24
89.44.231.0/24 maxlen: 24
89.36.20.0/24 maxlen: 24
89.36.198.0/24 maxlen: 24
85.204.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:59:ea:40:dd:58:e3:be:63:31:80:b3:42:a5:9c:cf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 15 14:17:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea63ca4bf553f9ee56e47ef4934c875249d2969d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:17:3a:dd:4a:43:d9:b4:62:58:3c:9f:a5:
b2:b6:e6:35:64:81:69:54:61:c5:6b:4d:58:f5:da:
a7:b9:45:e9:16:ef:16:4a:07:76:62:85:a1:7a:51:
7f:10:69:fb:c3:bc:15:8a:81:49:89:13:5e:f0:06:
aa:d6:29:3b:e7:d3:c0:92:71:7b:7a:70:02:5b:ff:
ec:e9:a9:90:36:1f:35:cf:67:a6:15:f6:34:ad:75:
e5:5f:9a:46:3e:4f:78:c8:33:27:20:82:0c:60:e6:
5e:4c:35:51:aa:6b:fd:3a:5f:72:47:2a:4a:1e:ab:
6b:5a:01:ee:45:e6:3b:7b:aa:69:cf:64:69:cc:83:
a0:be:22:fa:b1:c3:c5:c8:c7:fb:cf:46:2e:fa:5f:
7d:b4:d2:73:98:e8:c2:fe:11:49:15:f2:38:61:34:
b4:a2:05:a7:7c:9e:a1:c3:48:89:93:b7:2a:f8:2e:
ea:57:f0:bb:7c:b5:73:b5:57:32:5e:63:88:06:39:
70:7c:e1:b6:2d:43:14:42:13:8b:ff:db:ed:04:25:
cb:07:cf:04:7a:89:d5:df:ea:93:4b:ad:69:cb:8f:
eb:49:7a:2a:05:06:c8:9e:0e:cf:7d:1c:c5:23:da:
9f:f1:57:04:9b:e5:d0:0b:94:23:88:8a:66:46:49:
37:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:63:CA:4B:F5:53:F9:EE:56:E4:7E:F4:93:4C:87:52:49:D2:96:9D
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/6mPKS_VT-e5W5H70k0yHUknSlp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.98.0/24
89.36.20.0/24
89.36.198.0/24
89.44.228.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:46:1d:7c:ad:59:f6:df:29:6c:e6:41:a4:16:d5:6a:46:15:
27:53:0c:ff:ca:49:5e:1a:1f:35:f9:88:44:99:e7:e4:10:d4:
09:8b:92:9c:45:c7:3a:4e:e7:a3:95:02:07:82:f0:69:84:fe:
a7:6a:f6:48:bb:b5:2f:14:0b:77:62:bd:9d:3f:d3:64:cf:0f:
f5:a1:6a:44:f3:7c:d7:a5:e1:d4:53:34:42:f7:0b:90:09:23:
2e:1b:86:59:41:a4:db:3c:1a:82:b3:f9:b4:8c:e2:8c:3e:8b:
72:76:03:d0:e1:03:6f:8b:87:0d:4a:b6:3f:8d:0e:7d:32:97:
37:d1:41:b6:a1:64:bd:85:36:d0:7e:de:f6:52:7e:36:a3:36:
c6:d9:8f:71:6e:38:16:4f:a5:b1:05:16:46:7a:a2:c2:fb:da:
16:6b:28:e3:a5:09:50:9b:45:de:b0:ce:85:86:1b:6f:fe:c4:
78:33:33:72:cb:90:d2:de:03:91:f1:93:2a:c2:8d:94:68:0d:
e4:a7:21:6d:50:63:37:5f:53:8e:40:94:7e:c3:2f:f3:3c:a5:
c1:b4:77:60:c0:38:38:c9:f9:33:24:f2:4c:26:1d:3b:77:0a:
2e:10:60:69:44:d8:f1:c7:73:70:90:9f:b4:4b:c6:5d:c4:53:
6d:a9:d5:25
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYlZ6kDdWOO+YzGAs0KlnM8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjMwNzE1MTQxNzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTYzY2E0YmY1NTNmOWVlNTZlNDdlZjQ5MzRjODc1MjQ5ZDI5NjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6MXOt1KQ9m0Ylg8n6WytuY1ZIFp
VGHFa01Y9dqnuUXpFu8WSgd2YoWhelF/EGn7w7wVioFJiRNe8Aaq1ik759PAknF7
enACW//s6amQNh81z2emFfY0rXXlX5pGPk94yDMnIIIMYOZeTDVRqmv9Ol9yRypK
HqtrWgHuReY7e6ppz2RpzIOgviL6scPFyMf7z0Yu+l99tNJzmOjC/hFJFfI4YTS0
ogWnfJ6hw0iJk7cq+C7qV/C7fLVztVcyXmOIBjlwfOG2LUMUQhOL/9vtBCXLB88E
eonV3+qTS61py4/rSXoqBQbIng7PfRzFI9qf8VcEm+XQC5QjiIpmRkk3jwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOpjykv1U/nuVuR+9JNMh1JJ0padMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvNm1QS1NfVlQtZTVXNUg3MGsweUhVa25TbHAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVcxiAwQA
WSQUAwQAWSTGAwQCWSzkMA0GCSqGSIb3DQEBCwUAA4IBAQCxRh18rVn23yls5kGk
FtVqRhUnUwz/ykleGh81+YhEmefkENQJi5KcRcc6TuejlQIHgvBphP6navZIu7Uv
FAt3Yr2dP9Nkzw/1oWpE83zXpeHUUzRC9wuQCSMuG4ZZQaTbPBqCs/m0jOKMPoty
dgPQ4QNvi4cNSrY/jQ59Mpc30UG2oWS9hTbQft72Un42ozbG2Y9xbjgWT6WxBRZG
eqLC+9oWayjjpQlQm0XesM6Fhhtv/sR4MzNyy5DS3gOR8ZMqwo2UaA3kpyFtUGM3
X1OOQJR+wy/zPKXBtHdgwDg4yfkzJPJMJh07dwouEGBpRNjxx3NwkJ+0S8ZdxFNt
qdUl
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org