Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/bj6CD0m6Kg4qOmjwGX0-fxfl0Ms.roa
File: bj6CD0m6Kg4qOmjwGX0-fxfl0Ms.roa (raw, json)
Hash identifier: 9dOSwpBiaB+ltVKWdej3FH5Jf80gnlyJQ82H8lvEZbA=
Subject key identifier: 6E:3E:82:0F:49:BA:2A:0E:2A:3A:68:F0:19:7D:3E:7F:17:E5:D0:CB
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 01856CF877C981D96CF3EDB6D5A23EE97CCC
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/bj6CD0m6Kg4qOmjwGX0-fxfl0Ms.roa
Signing time: Sun 01 Jan 2023 10:55:01 +0000
ROA not before: Sun 01 Jan 2023 10:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.1.180.0/24 maxlen: 24
2001:7f8:fd::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:77:c9:81:d9:6c:f3:ed:b6:d5:a2:3e:e9:7c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 10:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e3e820f49ba2a0e2a3a68f0197d3e7f17e5d0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:83:ab:3e:68:b5:e5:65:07:a4:25:03:b3:
97:f7:98:4a:88:ab:e3:d5:c3:22:7b:96:3a:3d:1a:
b0:f7:c8:2d:1a:fa:52:90:d7:a5:c2:90:1b:db:49:
64:a3:0a:10:99:80:d7:80:e9:f6:09:b7:f6:9b:ac:
71:48:02:f9:c7:a3:08:b5:db:70:c7:6e:69:42:4e:
f6:17:8e:17:ff:8d:40:0a:09:06:8a:f3:f4:2f:e5:
85:1c:a1:48:cb:30:60:9b:85:af:30:09:b4:e8:3c:
6d:a8:49:b7:52:ed:09:a7:b1:00:dc:e1:63:44:13:
e9:d6:64:64:ac:e1:c2:8f:c8:da:82:c1:65:4c:7e:
60:eb:8f:31:2f:a7:24:8e:82:ca:40:15:45:24:ea:
55:21:ff:d5:8a:0f:25:30:4c:f1:b2:8e:d8:0b:7e:
0e:3d:a0:ae:0c:2b:da:20:0e:c0:8c:38:8f:8d:70:
cd:a1:d7:df:d5:2b:6c:6d:d7:6a:23:a9:61:11:ce:
6e:6a:87:89:0a:59:e2:a8:49:16:7f:5f:78:85:fb:
38:78:7e:ec:5c:f7:2b:7b:44:f7:1a:c9:1e:d4:40:
62:1f:79:8f:4a:73:e0:59:eb:41:97:bd:ab:ae:40:
a2:a1:68:ec:dd:73:e8:81:c1:46:fd:49:78:3e:ae:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3E:82:0F:49:BA:2A:0E:2A:3A:68:F0:19:7D:3E:7F:17:E5:D0:CB
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/bj6CD0m6Kg4qOmjwGX0-fxfl0Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.180.0/24
IPv6:
2001:7f8:fd::/48
Signature Algorithm: sha256WithRSAEncryption
07:87:84:96:14:01:09:1c:57:af:d5:47:1f:88:c0:07:b5:89:
d4:72:e6:80:5a:04:d4:90:07:6e:d7:5b:27:7e:fb:ef:e2:1d:
ae:e7:7d:07:85:e4:0b:d1:b3:7e:ff:1c:5f:14:30:e4:2a:35:
dd:63:67:bb:53:48:ec:90:52:d6:5d:af:99:b2:e6:40:75:9e:
e0:c1:05:92:e7:d7:fe:8c:b1:23:a8:e7:70:88:53:fd:a8:24:
23:a4:57:1f:ba:c9:cb:8f:45:e5:7c:87:cf:e2:b6:8e:4a:a6:
b4:a1:c4:4f:c4:ab:28:30:8a:e1:2b:3d:16:69:a7:fb:97:a6:
0e:28:33:6c:1a:59:79:46:d9:ab:72:f6:5c:b4:7a:08:f5:f0:
55:ea:21:cb:32:d1:83:b5:5a:a9:9c:4d:4a:bf:40:f7:a1:ce:
9a:66:bd:ec:03:8b:d2:c5:6b:e8:a7:1d:32:f5:3e:61:91:e9:
51:cc:41:02:65:52:df:97:50:6c:e9:5e:1d:dd:21:c8:d7:f3:
67:cb:1a:05:b8:4c:86:5a:c6:a0:84:04:fd:03:44:7f:6d:fc:
65:8e:19:70:68:6a:17:85:05:1f:8e:ab:e3:ad:b1:b9:e9:c2:
cb:c7:af:c4:84:0d:28:c2:f6:07:b8:94:37:2c:16:c4:4a:12:
7b:0a:7a:04
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVs+HfJgdls8+221aI+6XzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx
MzJhNmIwHhcNMjMwMTAxMTA1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTNlODIwZjQ5YmEyYTBlMmEzYTY4ZjAxOTdkM2U3ZjE3ZTVkMGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeuDqz5oteVlB6QlA7OX95hKiKvj
1cMie5Y6PRqw98gtGvpSkNelwpAb20lkowoQmYDXgOn2Cbf2m6xxSAL5x6MItdtw
x25pQk72F44X/41ACgkGivP0L+WFHKFIyzBgm4WvMAm06DxtqEm3Uu0Jp7EA3OFj
RBPp1mRkrOHCj8jagsFlTH5g648xL6ckjoLKQBVFJOpVIf/Vig8lMEzxso7YC34O
PaCuDCvaIA7AjDiPjXDNodff1StsbddqI6lhEc5uaoeJClniqEkWf194hfs4eH7s
XPcre0T3Gske1EBiH3mPSnPgWetBl72rrkCioWjs3XPogcFG/Ul4Pq6hGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG4+gg9JuioOKjpo8Bl9Pn8X5dDLMB8GA1UdIwQY
MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt
OWY1YmY3MzY3MjBlLzEvYmo2Q0QwbTZLZzRxT21qd0dYMC1meGZsME1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl
LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQG0MA8E
AgACMAkDBwAgAQf4AP0wDQYJKoZIhvcNAQELBQADggEBAAeHhJYUAQkcV6/VRx+I
wAe1idRy5oBaBNSQB27XWyd+++/iHa7nfQeF5AvRs37/HF8UMOQqNd1jZ7tTSOyQ
UtZdr5my5kB1nuDBBZLn1/6MsSOo53CIU/2oJCOkVx+6ycuPReV8h8/ito5KprSh
xE/EqygwiuErPRZpp/uXpg4oM2waWXlG2aty9ly0egj18FXqIcsy0YO1WqmcTUq/
QPehzppmvewDi9LFa+inHTL1PmGR6VHMQQJlUt+XUGzpXh3dIcjX82fLGgW4TIZa
xqCEBP0DRH9t/GWOGXBoaheFBR+Oq+OtsbnpwsvHr8SEDSjC9ge4lDcsFsRKEnsK
egQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:48 2024 by rpki-client on console-fra.rpki-client.org