Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/o6o7ClJCZzH9-Ilwt7n4V9ojwWc.roa
File: o6o7ClJCZzH9-Ilwt7n4V9ojwWc.roa (raw, json)
Hash identifier: F/ZOrRduv/n2eYYbP5ybAY3pEVRW8Y0h8YleUIxzFe0=
Subject key identifier: A3:AA:3B:0A:52:42:67:31:FD:F8:89:70:B7:B9:F8:57:DA:23:C1:67
Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial: 01856BD33B31296EB70082FB9D955F95EDB1
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/o6o7ClJCZzH9-Ilwt7n4V9ojwWc.roa
Signing time: Sun 01 Jan 2023 05:34:43 +0000
ROA not before: Sun 01 Jan 2023 05:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51786
IP address blocks: 185.117.12.0/24 maxlen: 24
185.117.13.0/24 maxlen: 24
2a06:8280:10::/44 maxlen: 44
2a06:8280::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:3b:31:29:6e:b7:00:82:fb:9d:95:5f:95:ed:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Validity
Not Before: Jan 1 05:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3aa3b0a52426731fdf88970b7b9f857da23c167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:51:bb:21:43:7e:e5:e6:92:3b:03:49:e4:
77:77:9a:cf:84:19:53:ee:3a:91:f7:8c:c1:8f:98:
5e:a3:14:cd:05:e9:26:50:d9:aa:a9:97:37:d4:b6:
73:2f:33:49:c0:8f:be:9f:60:1e:76:77:06:28:31:
ff:c1:63:17:19:47:74:ca:13:10:6c:86:a1:9c:06:
8a:78:06:a3:60:55:45:5a:21:bc:97:e3:ae:99:8f:
b5:95:35:79:b1:d8:62:a3:27:a3:7f:7b:d8:c6:0c:
34:50:a9:4d:71:66:bf:e0:79:f9:c9:ea:0c:86:92:
04:9f:da:66:a1:90:75:4f:c0:b7:e0:ff:08:8c:d4:
21:dc:a1:3a:dd:68:eb:c3:3c:f0:7d:fb:ed:97:69:
7d:c1:d3:8f:97:cd:33:c7:92:76:52:a8:4c:9f:05:
20:67:1f:71:7e:46:87:9a:be:9b:ad:6f:86:e2:32:
c2:26:0e:34:2b:10:a8:f1:ff:09:ec:2d:9e:f8:3a:
32:e5:e9:b4:36:9f:5f:c5:d3:06:56:ad:b0:25:52:
bc:d1:e4:75:b8:f8:50:62:09:76:db:7e:bf:b7:eb:
d1:e2:b0:70:09:ec:f3:04:03:98:ab:65:5c:05:c5:
53:ba:36:e1:c0:b0:de:8a:07:bb:67:e4:bc:df:52:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:3B:0A:52:42:67:31:FD:F8:89:70:B7:B9:F8:57:DA:23:C1:67
X509v3 Authority Key Identifier:
keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/o6o7ClJCZzH9-Ilwt7n4V9ojwWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.12.0/23
IPv6:
2a06:8280::/43
Signature Algorithm: sha256WithRSAEncryption
ab:05:6c:ab:13:ea:aa:3b:2f:10:cd:64:c8:cf:66:f2:84:9e:
00:86:a3:77:a8:8f:2c:be:92:c7:db:a8:81:e4:56:25:7d:00:
d3:ed:6f:11:30:f4:6f:fd:96:87:f0:c9:32:9b:83:f5:1d:0c:
52:79:a9:17:4d:ad:20:33:28:cb:5b:cd:eb:35:29:bf:54:9e:
ab:e0:03:db:23:ff:b7:d4:6a:b1:49:03:11:7d:61:bc:88:88:
8f:2e:7c:fa:65:51:49:83:0e:d3:8c:c9:5e:95:2d:61:92:b0:
36:ab:26:18:e8:68:92:0d:7a:3a:98:67:11:f7:1e:4b:77:b7:
c0:bf:87:a4:4f:14:ea:5e:39:2f:fe:f5:88:8f:30:1e:8a:98:
07:ca:ba:93:50:5c:37:63:ee:4e:4f:75:28:9f:52:86:4a:13:
a2:35:bd:68:bc:2c:84:92:91:e6:a4:12:c1:00:d9:e1:04:77:
06:cb:d3:be:3c:00:05:2b:f1:c8:9e:00:d8:c5:ce:7b:f6:6e:
8a:5a:6c:72:f0:86:e3:e2:aa:9e:dd:11:69:e4:b2:d1:9b:3c:
5b:fd:c7:4c:3b:cd:66:ed:52:2e:04:a5:63:03:1b:d0:fc:24:
c1:f8:38:64:b8:6c:8d:30:2b:25:bf:51:dd:75:2b:be:ac:85:
3e:f4:7d:2d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVr0zsxKW63AIL7nZVfle2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGI5MTdkYzkwNDZhMDY1Njc4YWUwZGY0ZDNlMzAzNjlj
NTljNjkwHhcNMjMwMTAxMDUzNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2FhM2IwYTUyNDI2NzMxZmRmODg5NzBiN2I5Zjg1N2RhMjNjMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n9RuyFDfuXmkjsDSeR3d5rPhBlT
7jqR94zBj5heoxTNBekmUNmqqZc31LZzLzNJwI++n2AedncGKDH/wWMXGUd0yhMQ
bIahnAaKeAajYFVFWiG8l+OumY+1lTV5sdhioyejf3vYxgw0UKlNcWa/4Hn5yeoM
hpIEn9pmoZB1T8C34P8IjNQh3KE63Wjrwzzwffvtl2l9wdOPl80zx5J2UqhMnwUg
Zx9xfkaHmr6brW+G4jLCJg40KxCo8f8J7C2e+Doy5em0Np9fxdMGVq2wJVK80eR1
uPhQYgl2236/t+vR4rBwCezzBAOYq2VcBcVTujbhwLDeige7Z+S831I7WwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKOqOwpSQmcx/fiJcLe5+FfaI8FnMB8GA1UdIwQY
MBaAFHxLkX3JBGoGVniuDfTT4wNpxZxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjct
OTFjNzBmNjFhMDY3LzEvbzZvN0NsSkNaekg5LUlsd3Q3bjRWOW9qd1djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjctOTFjNzBmNjFhMDY3
LzEvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuXUMMA8E
AgACMAkDBwUqBoKAAAAwDQYJKoZIhvcNAQELBQADggEBAKsFbKsT6qo7LxDNZMjP
ZvKEngCGo3eojyy+ksfbqIHkViV9ANPtbxEw9G/9lofwyTKbg/UdDFJ5qRdNrSAz
KMtbzes1Kb9UnqvgA9sj/7fUarFJAxF9YbyIiI8ufPplUUmDDtOMyV6VLWGSsDar
JhjoaJINejqYZxH3Hkt3t8C/h6RPFOpeOS/+9YiPMB6KmAfKupNQXDdj7k5PdSif
UoZKE6I1vWi8LISSkeakEsEA2eEEdwbL0748AAUr8cieANjFznv2bopabHLwhuPi
qp7dEWnkstGbPFv9x0w7zWbtUi4EpWMDG9D8JMH4OGS4bI0wKyW/Ud11K76shT70
fS0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:53 2024 by rpki-client on console-ams.rpki-client.org