Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/1-6ZYS3yb_MMka0L91Bxj6h_VoxM.roa
File: 1-6ZYS3yb_MMka0L91Bxj6h_VoxM.roa (raw, json)
Hash identifier: kavGphjGDTe1ygUNmIrveCyqlFrbVYzMjGTRHpwcvI8=
Subject key identifier: FB:A6:58:4B:7C:9B:FC:C3:24:6B:42:FD:D4:1C:63:EA:1F:D5:A3:13
Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial: 0185708CBEA730C107749A1F9ECF188AB8DE
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/1-6ZYS3yb_MMka0L91Bxj6h_VoxM.roa
Signing time: Mon 02 Jan 2023 03:35:50 +0000
ROA not before: Mon 02 Jan 2023 03:35:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3491
IP address blocks: 193.24.65.0/24 maxlen: 25
139.123.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:be:a7:30:c1:07:74:9a:1f:9e:cf:18:8a:b8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Validity
Not Before: Jan 2 03:35:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fba6584b7c9bfcc3246b42fdd41c63ea1fd5a313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:2f:c0:dd:1d:c6:af:dc:1e:63:d3:75:89:
70:c4:9a:5a:57:c8:51:3a:55:c1:a1:54:b8:a3:f6:
ab:ab:db:b4:e7:5a:31:cd:34:eb:91:7d:44:93:89:
16:f4:10:30:fd:1c:dc:88:a4:c1:9f:13:3a:4a:c2:
26:51:6e:e7:f0:84:da:8d:bd:2f:8d:26:13:ca:4f:
75:54:b3:37:2a:2f:b9:d5:60:ab:42:2a:43:45:af:
78:63:64:ad:ec:b6:07:2b:66:78:d9:7a:9e:4d:6c:
11:bf:a8:b3:5d:68:eb:6c:af:59:57:d0:21:69:49:
1f:dd:a3:08:f6:8a:1f:54:b7:bb:84:d5:4c:cb:68:
09:1d:3e:66:f4:45:e8:ad:b2:c1:f5:5d:15:06:be:
50:ae:6c:cd:b9:23:a0:42:cc:25:ff:fb:2d:f4:8d:
49:ac:83:17:3a:4a:97:5f:40:42:32:9e:45:a8:40:
75:09:a8:88:1c:a2:80:73:b3:bf:05:59:52:b0:96:
d3:ee:15:55:0c:31:cf:dd:fa:92:77:5e:32:2e:be:
f7:3e:41:e9:51:78:d5:ac:fe:0a:2c:42:a1:26:f2:
a6:86:a9:f3:de:a9:ee:fa:95:e7:63:75:f4:6b:64:
87:5b:26:61:3a:09:bf:bc:37:be:eb:08:cb:7a:d9:
5a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A6:58:4B:7C:9B:FC:C3:24:6B:42:FD:D4:1C:63:EA:1F:D5:A3:13
X509v3 Authority Key Identifier:
keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/1-6ZYS3yb_MMka0L91Bxj6h_VoxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.123.232.0/24
193.24.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:1b:f4:19:a8:56:4a:b6:3e:43:ea:e2:ef:fc:91:e8:28:c7:
50:1f:15:56:26:ee:7c:df:e3:b6:6b:01:1c:3d:90:1a:e9:c4:
c8:26:e4:b6:f5:d2:1f:fd:e5:8b:63:dc:c9:e2:74:80:d6:27:
17:b8:f8:0d:fe:47:a8:07:98:3b:a8:c7:4e:1d:ef:e1:53:bb:
dc:d9:50:02:2a:1f:03:fa:c6:05:0d:d3:0f:ab:e9:d5:3e:8e:
61:33:d9:95:a9:20:2e:75:00:7c:3f:ab:a0:50:20:54:82:c1:
4e:7a:07:41:6c:52:e0:3e:cb:10:56:25:2a:99:ac:28:ca:c1:
6a:d1:0b:e1:4c:74:d7:2d:06:6c:33:e5:42:ef:36:27:c8:4f:
77:9c:98:19:2e:53:83:e5:87:31:20:ba:aa:e3:c8:b2:a5:5f:
e5:f0:b4:ad:52:d3:9e:63:c6:f3:55:0d:a5:b2:d2:ab:4f:22:
ca:96:da:14:5b:be:75:fd:8e:08:e7:14:49:b2:2c:3b:72:2b:
3b:1e:68:e5:11:de:c1:66:68:ac:92:94:e6:a6:79:44:67:c2:
11:03:dd:36:21:2c:6c:1c:22:2e:37:34:dd:77:51:54:cd:31:
5a:a9:77:ad:35:53:1c:e7:7f:bd:ec:bf:7a:dc:87:48:7d:d8:
56:47:03:9f
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYVwjL6nMMEHdJofns8YirjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NzcyYWFjMWI2MmI4N2Q2YjAxZDU3YTFhMDBhNmE3MmI4
YTdkYTYwHhcNMjMwMTAyMDMzNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmE2NTg0YjdjOWJmY2MzMjQ2YjQyZmRkNDFjNjNlYTFmZDVhMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6IvwN0dxq/cHmPTdYlwxJpaV8hR
OlXBoVS4o/arq9u051oxzTTrkX1Ek4kW9BAw/RzciKTBnxM6SsImUW7n8ITajb0v
jSYTyk91VLM3Ki+51WCrQipDRa94Y2St7LYHK2Z42XqeTWwRv6izXWjrbK9ZV9Ah
aUkf3aMI9oofVLe7hNVMy2gJHT5m9EXorbLB9V0VBr5QrmzNuSOgQswl//st9I1J
rIMXOkqXX0BCMp5FqEB1CaiIHKKAc7O/BVlSsJbT7hVVDDHP3fqSd14yLr73PkHp
UXjVrP4KLEKhJvKmhqnz3qnu+pXnY3X0a2SHWyZhOgm/vDe+6wjLetlanQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPumWEt8m/zDJGtC/dQcY+of1aMTMB8GA1UdIwQY
MBaAFNh3KqwbYrh9awHVehoApqcrin2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUt
MzMzYmVlY2ZmNmY0LzEvMS02WllTM3liX01Na2EwTDkxQnhqNmhfVm94TS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTMvNjE2YTU4LTUzNDItNDMyYy1hOWM1LTMzM2JlZWNmZjZm
NC8xLzJIY3FyQnRpdUgxckFkVjZHZ0NtcHl1S2ZhWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAIt76AME
AMEYQTANBgkqhkiG9w0BAQsFAAOCAQEAphv0GahWSrY+Q+ri7/yR6CjHUB8VVibu
fN/jtmsBHD2QGunEyCbktvXSH/3li2PcyeJ0gNYnF7j4Df5HqAeYO6jHTh3v4VO7
3NlQAiofA/rGBQ3TD6vp1T6OYTPZlakgLnUAfD+roFAgVILBTnoHQWxS4D7LEFYl
KpmsKMrBatEL4Ux01y0GbDPlQu82J8hPd5yYGS5Tg+WHMSC6quPIsqVf5fC0rVLT
nmPG81UNpbLSq08iypbaFFu+df2OCOcUSbIsO3IrOx5o5RHewWZorJKU5qZ5RGfC
EQPdNiEsbBwiLjc03XdRVM0xWql3rTVTHOd/vey/etyHSH3YVkcDnw==
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:10 2024 by rpki-client on console-fra.rpki-client.org