Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/6GQDSuI6YYRcDPLoMvq-uqDtZuc.roa
File: 6GQDSuI6YYRcDPLoMvq-uqDtZuc.roa (raw, json)
Hash identifier: 8nRZKTKtHhsviotJPpPvlrdfodF93U+NU7HOAGFsP24=
Subject key identifier: E8:64:03:4A:E2:3A:61:84:5C:0C:F2:E8:32:FA:BE:BA:A0:ED:66:E7
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0185BAF56102B935F085A2C8C6ACB1465653
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/6GQDSuI6YYRcDPLoMvq-uqDtZuc.roa
Signing time: Mon 16 Jan 2023 14:22:01 +0000
ROA not before: Mon 16 Jan 2023 14:22:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16190
IP address blocks: 5.134.84.0/22 maxlen: 24
217.113.0.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:f5:61:02:b9:35:f0:85:a2:c8:c6:ac:b1:46:56:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 16 14:22:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e864034ae23a61845c0cf2e832fabebaa0ed66e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d6:c5:1e:2f:e3:c5:0d:9b:fa:ea:70:02:8c:
5b:1d:4a:61:fa:55:01:0e:8b:6f:84:38:bb:70:9a:
3b:35:7e:ac:e1:b9:27:96:fa:c5:2c:c9:31:89:d4:
36:52:cb:71:66:78:d6:79:1b:a0:5f:25:41:95:e2:
a5:f1:f3:37:91:0b:c7:bb:e1:b2:ca:0d:4e:5f:4d:
68:d7:5c:29:60:69:c9:e2:e3:1b:43:75:8f:fe:b1:
b4:e0:93:e6:17:a0:85:87:f4:59:e7:66:92:6f:ab:
0c:bf:ca:a9:be:6e:ed:3d:ad:f6:8d:7c:3c:70:ae:
e3:54:bb:a6:33:36:58:51:0a:a5:67:bc:f0:14:37:
2e:a4:4f:6a:f8:5d:a6:6a:05:a7:70:3b:13:e4:5d:
56:e9:e0:60:d0:09:dc:b6:2e:7f:2f:a3:94:63:bf:
94:3f:55:6c:c1:21:5e:55:63:9f:2d:d2:ce:12:9b:
43:9d:8c:54:9f:77:1a:df:c0:52:89:ed:e3:10:51:
60:11:8c:06:2f:d5:df:ee:88:30:35:de:36:61:ba:
14:eb:20:08:cc:15:72:76:81:c0:3a:c9:86:54:8e:
06:d8:62:86:b4:f3:a8:ed:92:e7:cb:ca:01:be:88:
53:b8:b8:24:f9:05:ba:58:ad:7e:2d:69:b8:97:84:
05:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:64:03:4A:E2:3A:61:84:5C:0C:F2:E8:32:FA:BE:BA:A0:ED:66:E7
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/6GQDSuI6YYRcDPLoMvq-uqDtZuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.84.0/22
217.113.0.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:c6:fc:15:ed:a5:c1:3d:d8:44:fd:b1:9d:26:b9:7e:3f:1e:
54:43:5b:c7:3b:68:70:de:10:60:b0:26:64:25:ae:74:27:8f:
6f:94:91:67:7d:b4:85:d5:37:ad:aa:09:65:c4:c7:74:17:4a:
af:e9:65:ce:cb:18:2f:25:7e:41:3a:7d:5e:91:29:b6:65:f5:
43:86:db:d8:3f:7f:40:ce:5f:1d:8f:c6:0e:93:28:0c:d8:24:
de:32:a0:c6:9f:0c:e6:37:5b:bb:f1:da:76:22:59:8d:37:2d:
31:8e:a4:8d:54:f6:67:c4:9e:59:24:53:be:65:12:44:01:5b:
2c:86:8c:1f:02:8c:b5:13:19:3e:a5:ba:c1:b5:63:26:fb:af:
78:e8:04:f9:b9:ab:a9:a1:9d:fb:e7:10:ad:68:d1:72:14:3a:
a4:79:eb:45:3a:b1:c4:b4:8a:0e:8e:f3:75:c5:50:7f:39:14:
69:3e:2d:f1:49:28:57:a9:13:9e:46:62:73:1b:f8:0b:e6:4c:
c7:aa:34:20:34:a5:ce:95:09:49:47:a3:14:d6:76:4a:12:bf:
1f:73:44:2b:a3:e6:45:97:75:74:5b:52:6f:9a:c2:a8:fa:c6:
c5:df:8e:6b:31:f7:8b:06:89:53:08:92:ed:3f:c9:60:cc:8c:
a2:26:35:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYW69WECuTXwhaLIxqyxRlZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwMTE2MTQyMjAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODY0MDM0YWUyM2E2MTg0NWMwY2YyZTgzMmZhYmViYWEwZWQ2NmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNbFHi/jxQ2b+upwAoxbHUph+lUB
DotvhDi7cJo7NX6s4bknlvrFLMkxidQ2UstxZnjWeRugXyVBleKl8fM3kQvHu+Gy
yg1OX01o11wpYGnJ4uMbQ3WP/rG04JPmF6CFh/RZ52aSb6sMv8qpvm7tPa32jXw8
cK7jVLumMzZYUQqlZ7zwFDcupE9q+F2magWncDsT5F1W6eBg0Ancti5/L6OUY7+U
P1VswSFeVWOfLdLOEptDnYxUn3ca38BSie3jEFFgEYwGL9Xf7ogwNd42YboU6yAI
zBVydoHAOsmGVI4G2GKGtPOo7ZLny8oBvohTuLgk+QW6WK1+LWm4l4QFCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOhkA0riOmGEXAzy6DL6vrqg7WbnMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvNkdRRFN1STZZWVJjRFBMb012cS11cUR0WnVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBYZUAwQD
2XEAMA0GCSqGSIb3DQEBCwUAA4IBAQAKxvwV7aXBPdhE/bGdJrl+Px5UQ1vHO2hw
3hBgsCZkJa50J49vlJFnfbSF1TetqgllxMd0F0qv6WXOyxgvJX5BOn1ekSm2ZfVD
htvYP39Azl8dj8YOkygM2CTeMqDGnwzmN1u78dp2IlmNNy0xjqSNVPZnxJ5ZJFO+
ZRJEAVsshowfAoy1Exk+pbrBtWMm+6946AT5uaupoZ375xCtaNFyFDqkeetFOrHE
tIoOjvN1xVB/ORRpPi3xSShXqROeRmJzG/gL5kzHqjQgNKXOlQlJR6MU1nZKEr8f
c0Qro+ZFl3V0W1JvmsKo+sbF345rMfeLBolTCJLtP8lgzIyiJjU0
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:23 2023 by rpki-client on console-ams.rpki-client.org