Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6eP96z-Wb1_ra7dVIygo5lnELlc.roa
File: 6eP96z-Wb1_ra7dVIygo5lnELlc.roa (raw, json)
Hash identifier: Cv1SxjHNv8a6Kkl/sd4q42TbWDZjLuzITYO//iHRWLk=
Subject key identifier: E9:E3:FD:EB:3F:96:6F:5F:EB:6B:B7:55:23:28:28:E6:59:C4:2E:57
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4D8B1E00E0B62517E0743CD2C4B24
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6eP96z-Wb1_ra7dVIygo5lnELlc.roa
Signing time: Sun 01 Jan 2023 19:35:20 +0000
ROA not before: Sun 01 Jan 2023 19:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208121
IP address blocks: 139.28.84.0/23 maxlen: 23
139.28.86.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d8:b1:e0:0e:0b:62:51:7e:07:43:cd:2c:4b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9e3fdeb3f966f5feb6bb755232828e659c42e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:f8:fb:eb:b0:37:a2:25:27:94:f7:b1:da:
81:db:0a:ad:1e:0a:6c:36:5d:08:9d:b1:da:f8:b3:
9a:0e:5b:1c:11:82:f3:3c:ef:b1:bf:42:55:cb:c4:
0e:fe:08:39:a6:e6:aa:0e:07:55:ab:f3:c0:3e:03:
8e:6e:6f:69:a6:dc:ff:69:12:1d:e3:d4:b5:4b:38:
83:37:b0:f0:3b:72:0e:3c:e6:4d:0a:fb:e4:cf:99:
6a:7e:91:38:e4:dd:7f:6e:89:86:f7:6b:ea:0e:7d:
ea:57:02:5c:ef:a1:e5:75:d2:cf:e8:d9:f1:b3:d2:
6d:ef:4d:6b:f2:d4:a7:58:8e:42:38:d3:0a:7a:52:
2f:4b:b1:3f:c6:00:8d:7f:09:c5:71:bc:69:3c:fb:
d0:80:d4:44:cc:bf:e6:9b:d6:89:12:98:0e:c3:ce:
eb:b7:44:02:8e:74:92:a4:08:47:77:b1:ab:d8:ac:
c4:b5:3c:65:24:30:00:e5:64:7b:85:27:5c:44:98:
b3:15:6b:98:cf:36:fe:7d:ce:ca:bd:44:0a:3b:d2:
2b:82:77:85:c2:b6:0f:9d:74:9b:fd:88:d3:ec:5c:
8e:b8:a9:70:d0:e3:6a:3c:64:aa:34:0f:1b:2f:11:
77:16:4f:a3:1b:f9:26:52:d5:d8:61:f4:4c:55:6f:
2d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E3:FD:EB:3F:96:6F:5F:EB:6B:B7:55:23:28:28:E6:59:C4:2E:57
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6eP96z-Wb1_ra7dVIygo5lnELlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.84.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:9a:c0:c0:72:d4:c7:2c:24:69:43:d5:9d:a3:37:e5:5c:d6:
f5:cb:0f:e9:21:45:c9:01:61:da:67:6d:85:3f:32:b7:2b:3d:
6f:4f:92:23:bc:dc:de:c1:2c:2d:24:f7:76:84:1c:43:ee:86:
59:b0:de:e9:83:c0:3b:c5:aa:31:d4:a7:4a:42:f9:30:7c:30:
16:d2:bf:37:69:ea:b0:4b:b7:d5:1e:c5:f6:b8:0e:2d:52:78:
d2:26:26:61:90:eb:83:67:f8:35:83:2c:61:77:13:7a:17:5a:
4d:60:c6:fc:f3:50:8c:4d:a5:8e:01:6b:5a:6c:15:0f:44:ad:
08:d5:ee:27:47:4f:fc:83:c4:0a:32:e9:b1:af:17:87:15:74:
c0:81:65:60:04:bd:98:6f:89:88:b1:f5:ec:b3:65:95:aa:61:
8d:c0:14:00:95:20:96:7d:6d:8a:f8:f7:a1:f4:18:0d:e5:6d:
00:03:63:af:ad:c6:dc:9a:28:81:0e:d4:b0:24:8e:3d:5e:92:
1b:d4:1a:95:a1:63:db:a8:34:0a:54:06:fa:30:33:39:03:5c:
d4:69:a7:24:31:8b:47:59:de:51:e2:f2:2a:d5:ec:79:a9:99:
02:6d:9b:e1:b6:df:5e:9e:86:57:99:1a:f2:89:f4:d6:d6:dd:
bc:60:ca:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1Nix4A4LYlF+B0PNLEskMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMTAxMTkzNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWUzZmRlYjNmOTY2ZjVmZWI2YmI3NTUyMzI4MjhlNjU5YzQyZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqz4++uwN6IlJ5T3sdqB2wqtHgps
Nl0InbHa+LOaDlscEYLzPO+xv0JVy8QO/gg5puaqDgdVq/PAPgOObm9pptz/aRId
49S1SziDN7DwO3IOPOZNCvvkz5lqfpE45N1/bomG92vqDn3qVwJc76HlddLP6Nnx
s9Jt701r8tSnWI5CONMKelIvS7E/xgCNfwnFcbxpPPvQgNREzL/mm9aJEpgOw87r
t0QCjnSSpAhHd7Gr2KzEtTxlJDAA5WR7hSdcRJizFWuYzzb+fc7KvUQKO9IrgneF
wrYPnXSb/YjT7FyOuKlw0ONqPGSqNA8bLxF3Fk+jG/kmUtXYYfRMVW8tQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOnj/es/lm9f62u3VSMoKOZZxC5XMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvNmVQOTZ6LVdiMV9yYTdkVkl5Z281bG5FTGxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixxUMA0G
CSqGSIb3DQEBCwUAA4IBAQAOmsDActTHLCRpQ9WdozflXNb1yw/pIUXJAWHaZ22F
PzK3Kz1vT5IjvNzewSwtJPd2hBxD7oZZsN7pg8A7xaox1KdKQvkwfDAW0r83aeqw
S7fVHsX2uA4tUnjSJiZhkOuDZ/g1gyxhdxN6F1pNYMb881CMTaWOAWtabBUPRK0I
1e4nR0/8g8QKMumxrxeHFXTAgWVgBL2Yb4mIsfXss2WVqmGNwBQAlSCWfW2K+Peh
9BgN5W0AA2OvrcbcmiiBDtSwJI49XpIb1BqVoWPbqDQKVAb6MDM5A1zUaackMYtH
Wd5R4vIq1ex5qZkCbZvhtt9enoZXmRryifTW1t28YMoS
-----END CERTIFICATE-----
Generated at Mon Jul 24 18:33:20 2023 by rpki-client on console-ams.rpki-client.org