Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/6HXfQtVX8FGUXCSIXmY24HwnFoA.roa
File: 6HXfQtVX8FGUXCSIXmY24HwnFoA.roa (raw, json)
Hash identifier: yAzG2q+TOe5kLQaxlqMPFkCdQP2tymVh/XfRarO3v/I=
Subject key identifier: E8:75:DF:42:D5:57:F0:51:94:5C:24:88:5E:66:36:E0:7C:27:16:80
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 0185704BB1443D23199720C34F5DF29710FA
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/6HXfQtVX8FGUXCSIXmY24HwnFoA.roa
Signing time: Mon 02 Jan 2023 02:24:46 +0000
ROA not before: Mon 02 Jan 2023 02:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49624
IP address blocks: 188.93.170.0/23 maxlen: 23
2001:7f8:4c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:b1:44:3d:23:19:97:20:c3:4f:5d:f2:97:10:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Jan 2 02:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e875df42d557f051945c24885e6636e07c271680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:21:ff:74:75:29:fb:30:fa:09:62:08:50:
8a:1c:d1:1c:2e:94:78:32:3e:11:aa:9b:ed:ec:5f:
1d:fd:e3:5d:7a:b4:20:c0:e3:64:35:0d:c4:5c:fa:
65:de:a1:a3:e4:c5:4c:1d:88:3a:c5:4a:b0:ad:61:
11:a7:8e:e0:7d:96:bb:3e:99:eb:13:c7:ce:17:64:
65:a5:d4:48:93:7f:27:30:3c:63:9c:1c:2c:43:25:
68:41:07:49:36:39:12:9e:a6:be:1d:bf:3b:85:68:
61:01:59:57:ac:77:d4:39:0d:6a:c5:af:db:9c:80:
9d:ee:48:7d:e0:b5:02:7b:b4:75:10:89:d0:5d:c3:
c9:e9:1b:fb:cd:f0:53:13:96:41:a9:91:91:93:8a:
ae:2c:93:6f:b3:31:10:cc:20:e2:5c:e1:45:50:7f:
f1:00:ee:31:d8:e9:0f:03:82:7b:43:08:4e:c4:62:
78:66:75:e7:bd:f3:17:8f:e2:05:8b:86:f6:6c:32:
0b:66:8a:84:29:75:56:e5:4f:8f:63:72:e6:4b:92:
e8:43:84:fd:cf:3b:99:0e:dd:8e:90:46:26:fe:f9:
61:1c:bd:ca:13:e7:80:09:bf:e9:4c:76:56:bb:45:
ed:8b:de:56:03:ce:cf:67:11:46:4e:09:36:dc:ed:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:75:DF:42:D5:57:F0:51:94:5C:24:88:5E:66:36:E0:7C:27:16:80
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/6HXfQtVX8FGUXCSIXmY24HwnFoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.170.0/23
IPv6:
2001:7f8:4c::/48
Signature Algorithm: sha256WithRSAEncryption
af:13:53:82:14:00:66:cb:07:5c:7a:0a:fe:e1:88:67:65:a1:
2f:5e:01:80:15:97:d0:f8:9c:a6:bd:7f:9f:13:65:09:b1:b9:
10:62:bb:bc:61:65:da:ac:e1:27:99:a6:fc:dc:e9:d8:b8:4f:
8a:a9:ee:2f:6a:51:8b:36:f2:0c:35:d9:b8:84:1e:b0:77:b2:
40:61:71:30:a6:00:4a:9d:d7:aa:1e:89:c9:24:50:a4:d1:1f:
7e:fd:5c:06:f2:42:37:2d:25:5a:48:5b:11:a2:53:e9:b3:43:
35:2b:b0:ff:ae:8b:7d:7a:48:a3:42:4d:8f:e4:fb:65:48:35:
f8:5b:84:9e:4e:2e:93:8d:24:1f:10:6f:ee:e1:1d:c9:55:9c:
87:93:b4:96:97:ad:22:da:88:b1:92:2f:15:91:ec:b1:a5:45:
88:01:34:cd:fc:ce:06:ff:ae:e1:12:32:53:19:78:ec:70:31:
c5:dc:54:69:ed:b5:44:8c:54:e9:98:de:68:d0:3a:2c:59:76:
93:c7:cc:48:23:94:2e:bb:38:54:f6:6d:44:a6:de:e9:88:f5:
cc:54:19:4f:ee:1f:ba:ca:20:c5:fd:eb:b2:e2:3e:75:71:00:
69:c5:d5:37:a0:e8:82:f1:3a:06:82:63:d7:d2:5d:19:d5:c8:
8e:fe:dd:f9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVwS7FEPSMZlyDDT13ylxD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTVjYjg2NTg2Y2JmZDI0NjJhZmEwNTJjOTZhMjVjMTYy
ODMwYTgwHhcNMjMwMTAyMDIyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODc1ZGY0MmQ1NTdmMDUxOTQ1YzI0ODg1ZTY2MzZlMDdjMjcxNjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQIh/3R1Kfsw+gliCFCKHNEcLpR4
Mj4Rqpvt7F8d/eNderQgwONkNQ3EXPpl3qGj5MVMHYg6xUqwrWERp47gfZa7Ppnr
E8fOF2RlpdRIk38nMDxjnBwsQyVoQQdJNjkSnqa+Hb87hWhhAVlXrHfUOQ1qxa/b
nICd7kh94LUCe7R1EInQXcPJ6Rv7zfBTE5ZBqZGRk4quLJNvszEQzCDiXOFFUH/x
AO4x2OkPA4J7QwhOxGJ4ZnXnvfMXj+IFi4b2bDILZoqEKXVW5U+PY3LmS5LoQ4T9
zzuZDt2OkEYm/vlhHL3KE+eACb/pTHZWu0Xti95WA87PZxFGTgk23O1x/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOh130LVV/BRlFwkiF5mNuB8JxaAMB8GA1UdIwQY
MBaAFNaVy4ZYbL/SRir6BSyWolwWKDCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTkt
YTVjZDgxYjVlMDBiLzEvNkhYZlF0Vlg4RkdVWENTSVhtWTI0SHduRm9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTktYTVjZDgxYjVlMDBi
LzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBvF2qMA8E
AgACMAkDBwAgAQf4AEwwDQYJKoZIhvcNAQELBQADggEBAK8TU4IUAGbLB1x6Cv7h
iGdloS9eAYAVl9D4nKa9f58TZQmxuRBiu7xhZdqs4SeZpvzc6di4T4qp7i9qUYs2
8gw12biEHrB3skBhcTCmAEqd16oeickkUKTRH379XAbyQjctJVpIWxGiU+mzQzUr
sP+ui316SKNCTY/k+2VINfhbhJ5OLpONJB8Qb+7hHclVnIeTtJaXrSLaiLGSLxWR
7LGlRYgBNM38zgb/ruESMlMZeOxwMcXcVGnttUSMVOmY3mjQOixZdpPHzEgjlC67
OFT2bUSm3umI9cxUGU/uH7rKIMX967LiPnVxAGnF1Teg6ILxOgaCY9fSXRnVyI7+
3fk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:40 2024 by rpki-client on console-ams.rpki-client.org