Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/6Kor6ccuQfzhj8cx9o2OV8JFbPI.roa
File: 6Kor6ccuQfzhj8cx9o2OV8JFbPI.roa (raw, json)
Hash identifier: 47fBOqOwUiTCAOqCwEK7ij1aDX+Ia9Pr3qTuu+tfJow=
Subject key identifier: E8:AA:2B:E9:C7:2E:41:FC:E1:8F:C7:31:F6:8D:8E:57:C2:45:6C:F2
Certificate issuer: /CN=dc9c7e17781e628ef6eb1c44bcdcb2e335621d2f
Certificate serial: 018A44FDE54BEF0A7B552673E7ACE0821888
Authority key identifier: DC:9C:7E:17:78:1E:62:8E:F6:EB:1C:44:BC:DC:B2:E3:35:62:1D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Jx-F3geYo726xxEvNyy4zViHS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/6Kor6ccuQfzhj8cx9o2OV8JFbPI.roa
Signing time: Wed 30 Aug 2023 05:50:04 +0000
ROA not before: Wed 30 Aug 2023 05:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34558
IP address blocks: 62.173.0.0/20 maxlen: 20
62.173.0.0/19 maxlen: 22
62.173.16.0/21 maxlen: 21
62.173.13.0/24 maxlen: 24
62.173.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:44:fd:e5:4b:ef:0a:7b:55:26:73:e7:ac:e0:82:18:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9c7e17781e628ef6eb1c44bcdcb2e335621d2f
Validity
Not Before: Aug 30 05:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8aa2be9c72e41fce18fc731f68d8e57c2456cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:8f:dc:9c:86:86:4f:9d:21:b0:b6:78:54:
02:ca:a6:02:a2:5f:d2:6d:55:7b:2f:ba:86:15:e4:
3a:f3:fc:ef:c5:95:62:1e:a9:2e:b3:71:bd:ee:a2:
76:0d:f9:2b:f0:33:6a:6e:f5:16:4d:54:d2:ef:b8:
b4:0f:ad:80:38:f3:58:7b:23:58:43:c8:26:a7:a5:
8c:2c:db:c7:14:8e:89:28:b7:80:6e:c3:c3:56:b3:
ce:42:ef:d5:f4:3c:01:24:70:49:39:26:78:f0:6f:
81:52:1d:ed:0e:ee:4c:af:ab:2b:a3:79:7d:c4:aa:
58:9a:3d:09:82:a8:9b:d5:e0:86:2c:14:0a:0b:95:
6f:a2:21:ce:aa:1e:92:3e:a2:46:0d:eb:de:5c:36:
2f:81:11:1d:c3:78:83:e2:b3:42:26:83:5f:e8:73:
95:bf:f8:3c:ba:dd:55:f1:e0:e2:5b:4e:4e:04:18:
60:30:a8:ea:63:0b:5c:38:04:6e:31:a0:70:b7:4a:
ab:68:51:fc:8a:ae:a0:85:f3:11:f1:4f:fb:53:8d:
c1:7b:7b:34:0a:bc:af:3d:5f:3c:52:99:74:2b:ee:
e8:cf:cc:5f:10:03:34:82:2d:23:15:24:50:e8:e9:
13:02:1a:e7:06:14:ba:79:34:e5:48:a6:9a:d2:bd:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AA:2B:E9:C7:2E:41:FC:E1:8F:C7:31:F6:8D:8E:57:C2:45:6C:F2
X509v3 Authority Key Identifier:
keyid:DC:9C:7E:17:78:1E:62:8E:F6:EB:1C:44:BC:DC:B2:E3:35:62:1D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Jx-F3geYo726xxEvNyy4zViHS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/6Kor6ccuQfzhj8cx9o2OV8JFbPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/3Jx-F3geYo726xxEvNyy4zViHS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.173.0.0/19
Signature Algorithm: sha256WithRSAEncryption
cb:0f:08:68:2b:5b:17:8c:5d:87:ac:7f:02:db:5c:3e:07:0e:
4f:b2:9b:f2:2d:15:18:3c:46:44:6e:17:55:f3:ac:a5:7e:ba:
8a:20:6a:25:3a:d3:d6:93:3b:bc:8f:ba:01:37:1d:a6:dd:98:
30:e3:c8:10:18:07:73:bb:57:47:06:1e:fd:cd:d6:dd:4b:bf:
ac:af:45:5a:19:b3:23:44:4d:1d:8e:d2:c5:19:1b:b9:a1:ce:
f4:99:e8:3d:2f:e7:9d:35:8f:03:87:b4:6a:ed:52:3b:94:91:
73:02:11:91:e7:cf:2b:de:ab:61:fb:2c:1c:a2:98:e4:3c:48:
82:2d:63:0e:d6:99:7a:7f:10:64:e2:b1:84:af:b2:39:99:56:
a7:36:58:16:91:20:71:db:c3:de:9c:f2:de:6e:61:69:6c:c6:
23:73:aa:29:98:55:b5:f9:ec:09:c9:cb:36:03:f2:03:67:77:
92:b2:83:3e:43:77:0e:30:86:b0:2f:a4:37:9f:b9:48:47:6a:
88:76:cd:4f:fd:49:73:01:da:5b:ff:76:61:d0:f9:de:7c:78:
d8:b9:31:23:6e:e6:62:e5:a9:85:7d:8b:58:55:8c:29:6c:12:
43:ba:ee:6a:ac:91:25:08:35:ee:29:68:84:93:be:40:ff:cc:
17:db:62:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpE/eVL7wp7VSZz56zgghiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOWM3ZTE3NzgxZTYyOGVmNmViMWM0NGJjZGNiMmUzMzU2
MjFkMmYwHhcNMjMwODMwMDU1MDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGFhMmJlOWM3MmU0MWZjZTE4ZmM3MzFmNjhkOGU1N2MyNDU2Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD6P3JyGhk+dIbC2eFQCyqYCol/S
bVV7L7qGFeQ68/zvxZViHqkus3G97qJ2Dfkr8DNqbvUWTVTS77i0D62AOPNYeyNY
Q8gmp6WMLNvHFI6JKLeAbsPDVrPOQu/V9DwBJHBJOSZ48G+BUh3tDu5Mr6sro3l9
xKpYmj0Jgqib1eCGLBQKC5VvoiHOqh6SPqJGDeveXDYvgREdw3iD4rNCJoNf6HOV
v/g8ut1V8eDiW05OBBhgMKjqYwtcOARuMaBwt0qraFH8iq6ghfMR8U/7U43Be3s0
CryvPV88Upl0K+7oz8xfEAM0gi0jFSRQ6OkTAhrnBhS6eTTlSKaa0r2cRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOiqK+nHLkH84Y/HMfaNjlfCRWzyMB8GA1UdIwQY
MBaAFNycfhd4HmKO9uscRLzcsuM1Yh0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0p4LUYzZ2VZbzcyNnh4RXZOeXk0elZpSFM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ODNjODQtYWM1My00ZmU2LWEwNmEt
NjkxNzc3ZWY2NGI3LzEvNktvcjZjY3VRZnpoajhjeDlvMk9WOEpGYlBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85ODNjODQtYWM1My00ZmU2LWEwNmEtNjkxNzc3ZWY2NGI3
LzEvM0p4LUYzZ2VZbzcyNnh4RXZOeXk0elZpSFM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPq0AMA0G
CSqGSIb3DQEBCwUAA4IBAQDLDwhoK1sXjF2HrH8C21w+Bw5PspvyLRUYPEZEbhdV
86ylfrqKIGolOtPWkzu8j7oBNx2m3Zgw48gQGAdzu1dHBh79zdbdS7+sr0VaGbMj
RE0djtLFGRu5oc70meg9L+edNY8Dh7Rq7VI7lJFzAhGR588r3qth+ywcopjkPEiC
LWMO1pl6fxBk4rGEr7I5mVanNlgWkSBx28PenPLebmFpbMYjc6opmFW1+ewJycs2
A/IDZ3eSsoM+Q3cOMIawL6Q3n7lIR2qIds1P/UlzAdpb/3Zh0PnefHjYuTEjbuZi
5amFfYtYVYwpbBJDuu5qrJElCDXuKWiEk75A/8wX22Kq
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:10 2024 by rpki-client on console-fra.rpki-client.org