Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/6wAqvYvYwqE_IkPde-Sfdi3u4bM.roa
File: 6wAqvYvYwqE_IkPde-Sfdi3u4bM.roa (raw, json)
Hash identifier: HLV03x0oluuByApX1t1pZF5ucoiqaS9JKzv4ULmjfKU=
Subject key identifier: EB:00:2A:BD:8B:D8:C2:A1:3F:22:43:DD:7B:E4:9F:76:2D:EE:E1:B3
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0189FD72298ABD4073644AE793D5EE7A688D
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/6wAqvYvYwqE_IkPde-Sfdi3u4bM.roa
Signing time: Wed 16 Aug 2023 08:24:24 +0000
ROA not before: Wed 16 Aug 2023 08:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
176.221.24.0/21 maxlen: 24
109.111.56.0/22 maxlen: 24
37.128.252.0/22 maxlen: 24
37.128.252.0/23 maxlen: 23
37.128.248.0/22 maxlen: 24
37.128.248.0/23 maxlen: 24
37.128.254.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 08:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:72:29:8a:bd:40:73:64:4a:e7:93:d5:ee:7a:68:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 16 08:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb002abd8bd8c2a13f2243dd7be49f762deee1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:60:51:d4:1c:49:27:5c:3a:23:55:66:b0:
c2:13:19:96:06:71:a3:6f:cd:01:ab:9d:fa:02:78:
b0:e4:e6:36:57:ef:bc:62:2b:1d:3d:2a:8a:fb:3e:
89:fd:b3:62:ec:74:ca:0a:c5:39:65:25:2e:c5:ba:
61:8f:2d:16:3d:27:67:b6:ec:05:7e:65:f8:e2:81:
de:41:d3:cc:f7:1e:94:13:c3:af:9d:8e:d6:74:e5:
4a:eb:45:ee:11:bd:92:d2:99:ed:7e:a2:7c:12:87:
c5:1d:18:78:52:c8:22:75:4c:46:1b:5c:26:e0:4f:
1c:e2:9c:50:36:53:e8:57:6a:aa:b9:ef:84:ff:6f:
f5:fb:e2:c8:22:0b:11:d5:8d:b8:33:8b:a0:9c:4d:
fa:70:8f:c8:f7:a5:5d:93:c4:95:56:9e:e6:ab:92:
90:b3:06:40:1d:f5:15:cc:79:3a:d9:ee:41:8a:64:
81:cc:29:09:27:cc:1b:ff:c6:2b:88:25:82:74:c9:
f9:50:f2:9c:88:32:df:68:9b:e8:19:4b:49:c4:5a:
77:3a:e2:7b:7c:04:2c:95:6f:0e:d1:28:a9:e8:22:
9f:b4:91:5f:67:38:d3:e6:47:aa:11:12:a8:3e:8b:
d3:a9:87:78:bd:85:60:fa:6c:60:6e:34:ba:00:2b:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:00:2A:BD:8B:D8:C2:A1:3F:22:43:DD:7B:E4:9F:76:2D:EE:E1:B3
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/6wAqvYvYwqE_IkPde-Sfdi3u4bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/21
95.82.0.0/21
109.111.56.0/22
176.221.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:da:9f:b2:ce:c6:75:c6:f0:38:93:9f:cf:86:11:90:b1:2a:
64:e0:ed:f6:a7:b3:1c:b1:de:4c:00:44:5f:d5:7e:33:9a:83:
d0:cf:94:d6:d9:08:08:c2:d3:09:2e:01:b3:07:ee:8f:20:a1:
a9:f1:31:ba:3f:56:96:33:9b:92:b6:1c:0d:28:9a:79:4c:b7:
e1:52:11:3a:c4:5b:06:ed:59:65:38:d9:da:0b:15:07:ab:25:
8d:bc:fa:b8:5a:ef:5c:47:71:9a:2c:ca:1d:37:2f:a9:df:3b:
44:69:a9:f5:9d:f2:6b:de:47:4f:fd:d8:9d:b7:e2:5b:90:4c:
97:84:88:84:01:a2:fb:06:0e:f6:eb:6d:d2:0e:d5:24:b8:8f:
df:ac:2f:f0:2b:3e:b8:d0:e7:21:7e:5b:b7:1b:54:ee:97:02:
88:0c:13:ef:58:c4:95:23:1f:f1:24:1f:79:83:f9:25:35:26:
7f:18:47:3f:6a:f5:64:29:6a:c2:91:9f:29:33:19:cc:b8:77:
3e:d0:48:dd:f1:05:7d:68:5f:4a:90:46:07:ff:28:59:a5:ea:
f9:a9:75:d7:be:82:8e:0d:0d:30:01:10:95:83:22:be:9c:2b:
2f:20:30:89:23:a9:7c:b1:1a:78:8f:60:2f:7f:65:91:56:01:
c7:c3:04:2a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYn9cimKvUBzZErnk9XuemiNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjMwODE2MDgyNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjAwMmFiZDhiZDhjMmExM2YyMjQzZGQ3YmU0OWY3NjJkZWVlMWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoFgUdQcSSdcOiNVZrDCExmWBnGj
b80Bq536Aniw5OY2V++8YisdPSqK+z6J/bNi7HTKCsU5ZSUuxbphjy0WPSdntuwF
fmX44oHeQdPM9x6UE8OvnY7WdOVK60XuEb2S0pntfqJ8EofFHRh4UsgidUxGG1wm
4E8c4pxQNlPoV2qque+E/2/1++LIIgsR1Y24M4ugnE36cI/I96Vdk8SVVp7mq5KQ
swZAHfUVzHk62e5BimSBzCkJJ8wb/8YriCWCdMn5UPKciDLfaJvoGUtJxFp3OuJ7
fAQslW8O0Sip6CKftJFfZzjT5keqERKoPovTqYd4vYVg+mxgbjS6ACv+WwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOsAKr2L2MKhPyJD3Xvkn3Yt7uGzMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvNndBcXZZdll3cUVfSWtQZGUtU2ZkaTN1NGJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDJYD4AwQD
X1IAAwQCbW84AwQDsN0YMA0GCSqGSIb3DQEBCwUAA4IBAQBt2p+yzsZ1xvA4k5/P
hhGQsSpk4O32p7Mcsd5MAERf1X4zmoPQz5TW2QgIwtMJLgGzB+6PIKGp8TG6P1aW
M5uSthwNKJp5TLfhUhE6xFsG7VllONnaCxUHqyWNvPq4Wu9cR3GaLModNy+p3ztE
aan1nfJr3kdP/didt+JbkEyXhIiEAaL7Bg72623SDtUkuI/frC/wKz640Ochflu3
G1TulwKIDBPvWMSVIx/xJB95g/klNSZ/GEc/avVkKWrCkZ8pMxnMuHc+0Ejd8QV9
aF9KkEYH/yhZper5qXXXvoKODQ0wARCVgyK+nCsvIDCJI6l8sRp4j2Avf2WRVgHH
wwQq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:24 2024 by rpki-client on console-ams.rpki-client.org