Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/6rDnNvAbkQs9UlPXvsxZ12_LLfo.roa
File: 6rDnNvAbkQs9UlPXvsxZ12_LLfo.roa (raw, json)
Hash identifier: YTmFNVRpHhLQw0OYFlCKQSDpFFhXPpQQ+0FKLyPvCcg=
Subject key identifier: EA:B0:E7:36:F0:1B:91:0B:3D:52:53:D7:BE:CC:59:D7:6F:CB:2D:FA
Certificate issuer: /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial: 018573038D9DB136484853D1976A766DA404
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/6rDnNvAbkQs9UlPXvsxZ12_LLfo.roa
Signing time: Mon 02 Jan 2023 15:04:50 +0000
ROA not before: Mon 02 Jan 2023 15:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3223
IP address blocks: 185.181.104.0/22 maxlen: 24
45.87.156.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:8d:9d:b1:36:48:48:53:d1:97:6a:76:6d:a4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
Validity
Not Before: Jan 2 15:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eab0e736f01b910b3d5253d7becc59d76fcb2dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:9e:36:a8:13:e4:56:61:42:9f:6e:b4:bf:
bb:a8:72:6e:42:bc:cd:cb:82:f1:7b:5f:64:98:69:
75:21:af:28:59:46:b8:d3:ca:23:53:3a:ad:19:d5:
b7:41:b4:a2:27:f4:ac:63:ec:8d:f7:86:8a:c5:97:
39:48:06:b0:d2:b4:88:d6:fa:81:89:3a:ec:c1:ce:
8e:70:e9:fd:91:5c:bb:f7:9c:d3:30:a6:e7:64:06:
c8:b3:55:e1:70:f4:72:e8:e8:24:91:8c:9d:93:e6:
ee:2b:b6:1a:36:b9:34:a2:3e:19:0b:ba:8d:eb:a6:
7d:5b:04:08:6e:00:08:e9:e4:ae:d1:4b:bf:bd:d5:
f3:e4:27:4f:56:43:ec:aa:fe:fd:81:e0:7b:d9:a7:
fd:55:03:93:1d:d6:a3:9c:63:3a:b8:f8:9a:74:ea:
16:cb:eb:8c:b7:19:b4:1c:d5:bd:04:0a:a2:3c:22:
ed:d9:a9:05:a8:b6:53:21:fb:23:e0:2b:6b:a7:18:
ad:90:9c:0d:5d:a5:ed:b7:04:f0:b3:7d:c9:c8:64:
44:5b:5b:19:21:42:c3:8e:9e:1a:7d:11:a9:ab:4e:
cb:8a:31:2e:8c:28:bd:c5:f5:39:18:79:69:b4:36:
f4:71:bb:56:be:1b:05:5a:e1:f6:f7:d8:36:2e:bf:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B0:E7:36:F0:1B:91:0B:3D:52:53:D7:BE:CC:59:D7:6F:CB:2D:FA
X509v3 Authority Key Identifier:
keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/6rDnNvAbkQs9UlPXvsxZ12_LLfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.156.0/22
185.181.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:c0:21:16:19:29:f8:cb:9e:1a:f9:f1:47:07:ba:fc:7b:6a:
37:84:81:70:e8:d4:c4:b7:2f:35:95:f2:ba:3f:71:3f:fe:bc:
fc:28:8c:79:7a:94:a8:cb:97:72:e1:b7:cc:7c:83:55:b2:86:
6b:6b:8a:a7:05:3b:84:a9:5c:d0:65:b0:b7:42:a3:94:e8:d3:
28:0f:04:f6:ac:3c:a3:e0:9e:a1:f9:cb:54:44:50:63:6b:58:
e4:23:69:19:f9:26:e9:05:0a:8e:a7:0b:ca:2d:8d:48:4b:7d:
a8:6d:23:57:9d:27:53:28:51:a6:81:58:24:b4:de:ff:17:dc:
d1:a1:b6:a1:27:8b:67:f6:91:38:4d:66:f8:ce:bb:dc:45:97:
e0:0d:65:ff:ce:92:d2:29:70:9c:c7:a7:34:bd:76:d8:2e:88:
00:86:e4:df:5c:f2:4c:a2:61:44:30:8a:a1:32:6c:97:ea:48:
a5:40:0d:88:8e:9a:f4:93:29:2b:bc:21:e2:f3:6e:10:12:da:
87:67:de:0b:9d:21:d8:39:61:02:76:29:d7:10:59:15:d0:17:
12:f7:e5:b8:18:c7:fc:59:8b:fd:c3:65:04:07:c9:50:ea:c0:
ee:ad:0b:b2:4d:23:3e:49:9f:bb:04:ab:a7:89:76:e0:75:81:
ea:6f:0c:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVzA42dsTZISFPRl2p2baQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MzU2YzZhODMxNjgwZTliOGI3Yzk1NTE0OTUzMDA3YTk0
MDdlODcwHhcNMjMwMTAyMTUwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWIwZTczNmYwMWI5MTBiM2Q1MjUzZDdiZWNjNTlkNzZmY2IyZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZKeNqgT5FZhQp9utL+7qHJuQrzN
y4Lxe19kmGl1Ia8oWUa408ojUzqtGdW3QbSiJ/SsY+yN94aKxZc5SAaw0rSI1vqB
iTrswc6OcOn9kVy795zTMKbnZAbIs1XhcPRy6OgkkYydk+buK7YaNrk0oj4ZC7qN
66Z9WwQIbgAI6eSu0Uu/vdXz5CdPVkPsqv79geB72af9VQOTHdajnGM6uPiadOoW
y+uMtxm0HNW9BAqiPCLt2akFqLZTIfsj4CtrpxitkJwNXaXttwTws33JyGREW1sZ
IULDjp4afRGpq07LijEujCi9xfU5GHlptDb0cbtWvhsFWuH299g2Lr9EQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOqw5zbwG5ELPVJT177MWddvyy36MB8GA1UdIwQY
MBaAFHg1bGqDFoDpuLfJVRSVMAepQH6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZURWc2FvTVdnT200dDhsVkZKVXdCNmxBZm9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84ZDkxMzYtMWNiMi00MzQ5LWFiODYt
NWRjMzkyZGU2MzdiLzEvNnJEbk52QWJrUXM5VWxQWHZzeFoxMl9MTGZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC84ZDkxMzYtMWNiMi00MzQ5LWFiODYtNWRjMzkyZGU2Mzdi
LzEvZURWc2FvTVdnT200dDhsVkZKVXdCNmxBZm9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVecAwQC
ubVoMA0GCSqGSIb3DQEBCwUAA4IBAQCMwCEWGSn4y54a+fFHB7r8e2o3hIFw6NTE
ty81lfK6P3E//rz8KIx5epSoy5dy4bfMfINVsoZra4qnBTuEqVzQZbC3QqOU6NMo
DwT2rDyj4J6h+ctURFBja1jkI2kZ+SbpBQqOpwvKLY1IS32obSNXnSdTKFGmgVgk
tN7/F9zRobahJ4tn9pE4TWb4zrvcRZfgDWX/zpLSKXCcx6c0vXbYLogAhuTfXPJM
omFEMIqhMmyX6kilQA2Ijpr0kykrvCHi824QEtqHZ94LnSHYOWECdinXEFkV0BcS
9+W4GMf8WYv9w2UEB8lQ6sDurQuyTSM+SZ+7BKuniXbgdYHqbwwP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:24 2024 by rpki-client on console-fra.rpki-client.org