Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/6BdV2YOJ3Fa1nYQb8D7eLW5CXsE.roa
File: 6BdV2YOJ3Fa1nYQb8D7eLW5CXsE.roa (raw, json)
Hash identifier: 4tyYNVyGoHUeT5xFWyfyCK2TNmhhBqd6r9ZwPXcLHnY=
Subject key identifier: E8:17:55:D9:83:89:DC:56:B5:9D:84:1B:F0:3E:DE:2D:6E:42:5E:C1
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 01856FD521100EC47B975FEFF9910A396A7B
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/6BdV2YOJ3Fa1nYQb8D7eLW5CXsE.roa
Signing time: Mon 02 Jan 2023 00:15:16 +0000
ROA not before: Mon 02 Jan 2023 00:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13039
IP address blocks: 192.54.45.0/24 maxlen: 24
192.109.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:21:10:0e:c4:7b:97:5f:ef:f9:91:0a:39:6a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Jan 2 00:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e81755d98389dc56b59d841bf03ede2d6e425ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:65:8e:ff:e5:41:da:03:72:70:88:98:9e:
7d:db:d3:f2:9b:dd:8c:1e:44:75:d7:28:b2:23:06:
43:a1:dd:5d:56:60:c7:c5:bf:5d:1f:08:d9:82:bf:
43:4c:6d:fc:d1:4a:62:45:89:7e:83:9f:b8:a6:e6:
3e:9f:9b:fe:a5:d7:2f:24:9e:59:26:29:87:ad:81:
c5:a4:c4:e6:60:93:09:f0:27:af:25:ab:3b:04:9c:
62:f9:af:13:10:68:01:40:c8:00:35:f7:46:73:50:
85:c5:16:7c:0e:bd:d7:f9:f3:6a:17:c0:a5:78:fa:
00:b9:a8:5a:bf:2f:30:1c:57:04:4e:f1:6c:40:da:
a7:16:c2:c4:29:30:1a:83:98:20:05:9e:0b:75:06:
22:db:e0:7e:b9:8c:0a:8a:9a:a4:59:ba:a6:0b:d6:
60:07:3d:c6:7b:c7:14:b5:25:26:dc:b6:a4:58:dd:
e2:73:58:ae:fa:6b:d0:71:c9:ab:98:b2:78:c0:2e:
cd:3c:29:c0:91:36:32:74:a6:69:a3:6f:c4:11:b4:
81:24:22:5e:ab:2d:08:eb:48:0c:fc:d2:61:4d:bb:
f5:fb:84:a6:14:29:18:a5:3a:80:22:6b:96:22:a9:
9c:58:f8:24:b5:2e:3d:65:46:22:2c:6c:f4:62:ae:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:17:55:D9:83:89:DC:56:B5:9D:84:1B:F0:3E:DE:2D:6E:42:5E:C1
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/6BdV2YOJ3Fa1nYQb8D7eLW5CXsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.54.45.0/24
192.109.252.0/24
Signature Algorithm: sha256WithRSAEncryption
06:49:91:e7:30:44:23:c7:c6:72:2e:25:b1:67:8c:79:b6:c1:
39:89:3a:06:f0:4b:ad:a0:a1:76:43:6e:0a:91:51:af:88:93:
88:55:2b:07:e0:8f:bd:8c:2b:a1:3b:6d:e2:cd:37:b8:56:1e:
74:f4:26:ea:53:41:8c:ad:ad:8f:65:4a:83:9a:f2:07:4e:c3:
b0:1e:4c:7e:bd:ac:32:73:8a:d3:ff:a8:73:db:13:35:9f:19:
14:f9:80:04:d7:fa:29:b3:39:ec:b9:a6:bb:58:4f:83:ed:01:
2d:b0:5c:73:48:91:ac:b9:1c:42:31:a5:a6:fa:c0:c3:fc:a8:
77:ef:2a:40:40:64:fc:f0:3a:44:c6:02:62:6b:af:a9:63:13:
0f:cc:0f:82:fe:60:05:b2:81:39:ae:1b:2c:4d:95:8c:f6:8b:
5c:90:8d:f0:06:2e:21:8d:1e:7d:e8:a7:1a:d0:a1:59:86:c3:
0c:14:b3:0b:6b:9f:86:b0:a4:03:59:31:36:f0:05:df:50:19:
1b:02:62:5f:ef:45:e4:b9:3c:67:98:5d:21:3a:c7:1f:a4:5e:
64:ba:50:00:eb:06:1e:4a:dd:00:cc:27:be:7c:ba:6f:04:dc:
da:b7:40:89:3b:14:c2:78:db:ed:45:04:1b:0d:77:51:3d:d9:
05:0b:e3:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVv1SEQDsR7l1/v+ZEKOWp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGQ0MDUxN2E4NzNiN2RjMmFlYjI4ZDBlZDZhMmY5OTNh
M2Q3NGQwHhcNMjMwMTAyMDAxNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODE3NTVkOTgzODlkYzU2YjU5ZDg0MWJmMDNlZGUyZDZlNDI1ZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApApljv/lQdoDcnCImJ5929Pym92M
HkR11yiyIwZDod1dVmDHxb9dHwjZgr9DTG380UpiRYl+g5+4puY+n5v+pdcvJJ5Z
JimHrYHFpMTmYJMJ8CevJas7BJxi+a8TEGgBQMgANfdGc1CFxRZ8Dr3X+fNqF8Cl
ePoAuahavy8wHFcETvFsQNqnFsLEKTAag5ggBZ4LdQYi2+B+uYwKipqkWbqmC9Zg
Bz3Ge8cUtSUm3LakWN3ic1iu+mvQccmrmLJ4wC7NPCnAkTYydKZpo2/EEbSBJCJe
qy0I60gM/NJhTbv1+4SmFCkYpTqAImuWIqmcWPgktS49ZUYiLGz0Yq5g8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOgXVdmDidxWtZ2EG/A+3i1uQl7BMB8GA1UdIwQY
MBaAFC4NQFF6hzt9wq6yjQ7WovmTo9dNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDct
NTc3ODY5NTFiNzhmLzEvNkJkVjJZT0ozRmExbllRYjhEN2VMVzVDWHNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDctNTc3ODY5NTFiNzhm
LzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwDYtAwQA
wG38MA0GCSqGSIb3DQEBCwUAA4IBAQAGSZHnMEQjx8ZyLiWxZ4x5tsE5iToG8Eut
oKF2Q24KkVGviJOIVSsH4I+9jCuhO23izTe4Vh509CbqU0GMra2PZUqDmvIHTsOw
Hkx+vawyc4rT/6hz2xM1nxkU+YAE1/opsznsuaa7WE+D7QEtsFxzSJGsuRxCMaWm
+sDD/Kh37ypAQGT88DpExgJia6+pYxMPzA+C/mAFsoE5rhssTZWM9otckI3wBi4h
jR596Kca0KFZhsMMFLMLa5+GsKQDWTE28AXfUBkbAmJf70XkuTxnmF0hOscfpF5k
ulAA6wYeSt0AzCe+fLpvBNzat0CJOxTCeNvtRQQbDXdRPdkFC+O/
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:35 2024 by rpki-client on console-ams.rpki-client.org