Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/6jBZ2J3xKJbBmalUjAKS0RBcsB0.roa
File: 6jBZ2J3xKJbBmalUjAKS0RBcsB0.roa (raw, json)
Hash identifier: KdsSycInGjRKq9mbfofcr1bA0m864x5uw+UTud3S2Gw=
Subject key identifier: EA:30:59:D8:9D:F1:28:96:C1:99:A9:54:8C:02:92:D1:10:5C:B0:1D
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018BA3ECF02DB95CDD6B5C58393E67965A06
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/6jBZ2J3xKJbBmalUjAKS0RBcsB0.roa
Signing time: Mon 06 Nov 2023 09:18:16 +0000
ROA not before: Mon 06 Nov 2023 09:18:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
89.46.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:ec:f0:2d:b9:5c:dd:6b:5c:58:39:3e:67:96:5a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Nov 6 09:18:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea3059d89df12896c199a9548c0292d1105cb01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:b5:e9:a2:7a:df:b7:af:27:4f:7a:76:2c:
30:bc:8d:ab:c7:41:2b:a1:b2:21:28:24:e3:71:f7:
11:48:02:31:12:ba:b5:8c:cf:7f:92:5f:25:29:fc:
a1:c4:c7:21:78:53:fd:a8:4c:fe:18:22:47:4c:a7:
b3:e9:30:9f:1a:19:3c:aa:a7:1f:40:e0:ac:be:d4:
b3:33:76:a7:81:19:13:23:e9:ad:29:c8:14:0d:8e:
76:ce:d4:31:50:e7:2b:e1:de:d1:3f:40:2c:21:d1:
bc:f6:70:6d:a9:90:a7:06:8e:68:9b:45:1f:dc:2f:
fd:a4:a3:40:c0:60:bd:38:54:23:cc:7e:e8:ee:e9:
51:d1:9a:28:f2:30:7b:d3:13:ef:4d:15:65:57:d5:
4f:37:c5:9b:0c:9b:6e:72:80:b5:8f:a5:c3:bb:3b:
df:e7:88:0f:4a:0e:1d:cc:4c:17:3c:dc:a6:05:65:
aa:18:b4:91:f9:a3:b1:19:c6:50:bd:09:f5:42:57:
5a:f5:f3:9e:96:78:95:2c:fd:34:e6:e1:b2:e6:f7:
8c:9f:c1:cd:cb:b4:07:ee:6c:0c:3e:8c:9a:16:03:
31:03:38:23:be:8a:39:c4:10:41:e7:a3:e5:ea:35:
28:2d:8b:11:44:e1:2c:86:40:7f:47:ce:8c:e3:88:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:30:59:D8:9D:F1:28:96:C1:99:A9:54:8C:02:92:D1:10:5C:B0:1D
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/6jBZ2J3xKJbBmalUjAKS0RBcsB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
93.114.61.0/24
185.81.180.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:f3:95:80:f0:27:67:fc:36:dc:84:2b:66:2d:c7:46:e9:27:
43:2f:e4:23:24:e9:c0:5f:2f:2e:83:d5:f8:09:0f:5b:85:34:
c1:48:94:a1:17:68:ab:5f:c2:95:31:1f:26:57:f7:55:5b:d4:
4e:86:18:fb:4c:c4:cf:c6:76:23:16:c6:47:1e:33:1c:ff:2b:
9f:12:b5:f1:54:c1:87:59:a5:be:8a:6b:69:2a:c5:79:2b:d3:
0a:bc:36:f7:86:41:84:31:86:85:af:d8:8f:f6:27:b4:75:d9:
59:45:a8:f7:92:b8:06:ce:b8:d2:78:4d:e4:d1:07:54:87:c3:
f9:fe:dc:b4:41:5c:b7:92:80:49:8a:b6:4e:e6:fc:3a:2c:ed:
3e:63:b3:db:17:d9:71:52:e8:1d:36:49:2f:45:ca:43:93:d6:
ed:39:50:51:af:00:bc:06:72:70:c7:26:75:3f:31:15:bf:94:
fa:40:2c:59:9c:71:05:b0:3b:8c:fb:cd:bd:2f:a2:80:4e:d4:
95:fc:4b:c3:64:b3:12:3a:65:cf:5b:5e:aa:3b:19:2b:b4:e4:
e9:df:1b:a0:da:76:c6:c3:c7:eb:7e:5e:60:40:e6:f7:28:2d:
a9:8c:73:40:fd:c2:79:e0:68:e5:b9:31:a0:34:34:e9:09:e7:
22:19:4d:43
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYuj7PAtuVzda1xYOT5nlloGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMxMTA2MDkxODE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTMwNTlkODlkZjEyODk2YzE5OWE5NTQ4YzAyOTJkMTEwNWNiMDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6216aJ637evJ096diwwvI2rx0Er
obIhKCTjcfcRSAIxErq1jM9/kl8lKfyhxMcheFP9qEz+GCJHTKez6TCfGhk8qqcf
QOCsvtSzM3angRkTI+mtKcgUDY52ztQxUOcr4d7RP0AsIdG89nBtqZCnBo5om0Uf
3C/9pKNAwGC9OFQjzH7o7ulR0Zoo8jB70xPvTRVlV9VPN8WbDJtucoC1j6XDuzvf
54gPSg4dzEwXPNymBWWqGLSR+aOxGcZQvQn1Qlda9fOelniVLP005uGy5veMn8HN
y7QH7mwMPoyaFgMxAzgjvoo5xBBB56Pl6jUoLYsRROEshkB/R86M44gnzwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOowWdid8SiWwZmpVIwCktEQXLAdMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvNmpCWjJKM3hLSmJCbWFsVWpBS1MwUkJjc0IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWS4KAwQA
XXI9AwQBuVG0MA0GCSqGSIb3DQEBCwUAA4IBAQBf85WA8Cdn/DbchCtmLcdG6SdD
L+QjJOnAXy8ug9X4CQ9bhTTBSJShF2irX8KVMR8mV/dVW9ROhhj7TMTPxnYjFsZH
HjMc/yufErXxVMGHWaW+imtpKsV5K9MKvDb3hkGEMYaFr9iP9ie0ddlZRaj3krgG
zrjSeE3k0QdUh8P5/ty0QVy3koBJirZO5vw6LO0+Y7PbF9lxUugdNkkvRcpDk9bt
OVBRrwC8BnJwxyZ1PzEVv5T6QCxZnHEFsDuM+829L6KATtSV/EvDZLMSOmXPW16q
OxkrtOTp3xug2nbGw8frfl5gQOb3KC2pjHNA/cJ54GjluTGgNDTpCeciGU1D
-----END CERTIFICATE-----
Generated at Tue Nov 7 11:45:50 2023 by rpki-client on console-ams.rpki-client.org