Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/6LyI4942aos2hLEYAQPUQYA6lwI.roa
File: 6LyI4942aos2hLEYAQPUQYA6lwI.roa (raw, json)
Hash identifier: vGuvv40qsFTxfO5/RQgjxSr2U+sst+9324dAnB64Tvw=
Subject key identifier: E8:BC:88:E3:DE:36:6A:8B:36:84:B1:18:01:03:D4:41:80:3A:97:02
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 01856BA59358530315D7E7967A6E7784B5AB
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/6LyI4942aos2hLEYAQPUQYA6lwI.roa
Signing time: Sun 01 Jan 2023 04:44:51 +0000
ROA not before: Sun 01 Jan 2023 04:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44066
IP address blocks: 185.197.165.0/24 maxlen: 24
185.197.166.0/24 maxlen: 24
185.197.167.0/24 maxlen: 24
2a0a:7bc7::/32 maxlen: 32
2a0a:7bc0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:93:58:53:03:15:d7:e7:96:7a:6e:77:84:b5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Jan 1 04:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8bc88e3de366a8b3684b1180103d441803a9702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:dd:c9:a5:66:93:ff:d6:8c:49:34:0d:07:
39:ed:80:03:c1:9a:c2:36:d1:68:1e:0b:5d:fd:d8:
8f:73:b8:ff:da:31:dd:d7:ff:eb:24:82:46:eb:bc:
7a:cf:22:6e:88:75:1a:89:0c:d8:84:da:5e:16:64:
97:71:3e:c7:66:8c:1f:42:42:91:95:cc:a6:71:b4:
cf:a7:fc:bb:08:c4:f1:39:47:bc:9c:da:78:6d:e7:
3f:01:84:58:7b:d9:13:5c:6a:cc:25:cd:c0:33:18:
b0:94:c7:d8:95:a1:37:3b:55:8e:53:90:05:8d:26:
0a:52:43:9d:06:de:77:07:58:be:2d:4e:5c:3a:19:
d6:45:f8:01:8c:3f:35:3b:b7:d1:8a:25:27:95:91:
89:35:5e:64:10:71:ec:85:22:77:09:31:02:cc:c9:
7b:f0:2a:13:34:ee:45:be:8d:15:87:4e:e5:65:db:
85:ee:48:fc:0e:3a:13:37:aa:3b:7a:28:cc:d3:2d:
dd:bb:05:fa:0e:0c:a8:3c:e3:d3:ae:f0:e7:25:7f:
9d:e4:6c:93:52:53:cd:b4:5a:43:4e:7b:fe:5a:70:
ec:8c:6a:bb:c4:9c:98:c7:63:02:63:bd:ed:12:26:
3c:68:ea:73:c3:10:7e:7f:32:79:3d:f5:b8:4d:00:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BC:88:E3:DE:36:6A:8B:36:84:B1:18:01:03:D4:41:80:3A:97:02
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/6LyI4942aos2hLEYAQPUQYA6lwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.165.0-185.197.167.255
IPv6:
2a0a:7bc0::/32
2a0a:7bc7::/32
Signature Algorithm: sha256WithRSAEncryption
49:49:25:45:ee:1d:a9:f1:ec:f1:da:35:ae:81:97:48:6f:09:
ab:4a:9c:7f:84:15:9d:a6:ac:ea:26:ab:76:ce:e9:bb:70:7b:
ea:88:b1:b2:3e:6b:ec:7e:90:13:5b:e9:09:8c:4e:e3:3d:7c:
19:7a:b6:fa:b8:10:ac:b0:c3:0c:e3:58:13:07:49:0c:5f:e1:
04:aa:13:b3:97:9f:a9:14:ab:42:fc:48:8e:66:e7:45:31:ef:
7a:f5:47:cf:b8:af:7a:23:a6:a1:4c:6d:77:b3:2e:a1:2b:b3:
3c:2a:81:4c:9b:ee:4b:53:82:3f:57:57:bb:5f:15:99:ed:51:
69:ff:6b:93:17:b4:54:65:da:6b:a8:10:ec:03:93:99:ba:5f:
97:10:f3:dd:04:49:23:37:91:11:7f:24:4c:96:ed:78:c5:93:
70:94:85:14:99:a5:8e:22:08:fa:b5:c7:94:5d:a9:2b:53:81:
53:af:57:e8:8f:ad:2a:5e:99:ad:a6:1c:95:1e:9c:8f:4f:ba:
26:fe:ea:9a:e9:e9:7a:3f:6b:f7:b1:db:a8:c7:34:0a:08:d3:
9c:40:d2:89:2c:57:55:3d:4a:a3:b7:38:4f:9c:aa:47:6a:bf:
02:3a:09:50:58:d2:11:30:c5:4e:b7:f6:a0:69:b8:c1:1f:04:
fa:0d:a4:75
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVrpZNYUwMV1+eWem53hLWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzFjMjQ2NWI0Zjk3M2ZiNGIwY2I2NjI4YTk4YjNiNTg4
OTZkNDgwHhcNMjMwMTAxMDQ0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGJjODhlM2RlMzY2YThiMzY4NGIxMTgwMTAzZDQ0MTgwM2E5NzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdTdyaVmk//WjEk0DQc57YADwZrC
NtFoHgtd/diPc7j/2jHd1//rJIJG67x6zyJuiHUaiQzYhNpeFmSXcT7HZowfQkKR
lcymcbTPp/y7CMTxOUe8nNp4bec/AYRYe9kTXGrMJc3AMxiwlMfYlaE3O1WOU5AF
jSYKUkOdBt53B1i+LU5cOhnWRfgBjD81O7fRiiUnlZGJNV5kEHHshSJ3CTECzMl7
8CoTNO5Fvo0Vh07lZduF7kj8DjoTN6o7eijM0y3duwX6DgyoPOPTrvDnJX+d5GyT
UlPNtFpDTnv+WnDsjGq7xJyYx2MCY73tEiY8aOpzwxB+fzJ5PfW4TQDCkwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFOi8iOPeNmqLNoSxGAED1EGAOpcCMB8GA1UdIwQY
MBaAFNbBwkZbT5c/tLDLZiipiztYiW1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2Mt
ZTQ5YTllMDZjNzAwLzEvNkx5STQ5NDJhb3MyaExFWUFRUFVRWUE2bHdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2MtZTQ5YTllMDZjNzAw
LzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAUBAIAATAOMAwDBAC5xaUD
BAO5xaAwFAQCAAIwDgMFACoKe8ADBQAqCnvHMA0GCSqGSIb3DQEBCwUAA4IBAQBJ
SSVF7h2p8ezx2jWugZdIbwmrSpx/hBWdpqzqJqt2zum7cHvqiLGyPmvsfpATW+kJ
jE7jPXwZerb6uBCssMMM41gTB0kMX+EEqhOzl5+pFKtC/EiOZudFMe969UfPuK96
I6ahTG13sy6hK7M8KoFMm+5LU4I/V1e7XxWZ7VFp/2uTF7RUZdprqBDsA5OZul+X
EPPdBEkjN5ERfyRMlu14xZNwlIUUmaWOIgj6tceUXakrU4FTr1foj60qXpmtphyV
HpyPT7om/uqa6el6P2v3sduoxzQKCNOcQNKJLFdVPUqjtzhPnKpHar8COglQWNIR
MMVOt/agabjBHwT6DaR1
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:46 2024 by rpki-client on console-ams.rpki-client.org