Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/6_GtzPEm1Ruk-kzFDsIw6JjHp2w.roa
File: 6_GtzPEm1Ruk-kzFDsIw6JjHp2w.roa (raw, json)
Hash identifier: q9GeAwe4A44UfontxZcK81h1q+1ZLA1/LlCrYbIW2Zs=
Subject key identifier: EB:F1:AD:CC:F1:26:D5:1B:A4:FA:4C:C5:0E:C2:30:E8:98:C7:A7:6C
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0185730CD8062D08FCB81C23DD2FF82676EE
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/6_GtzPEm1Ruk-kzFDsIw6JjHp2w.roa
Signing time: Mon 02 Jan 2023 15:14:59 +0000
ROA not before: Mon 02 Jan 2023 15:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208465
IP address blocks: 147.234.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:d8:06:2d:08:fc:b8:1c:23:dd:2f:f8:26:76:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebf1adccf126d51ba4fa4cc50ec230e898c7a76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:a6:64:bd:55:9b:d7:b8:fa:ff:52:0d:88:
6b:0e:57:7e:88:35:af:b0:d2:74:28:84:83:7f:a5:
0f:31:19:c3:d8:0d:eb:03:0d:3e:9e:f3:32:ff:5d:
00:17:c5:ce:fc:89:f7:e8:fd:32:9b:c7:d9:e0:e8:
22:04:ba:eb:25:4e:9e:e4:6a:8d:90:b1:4e:04:ec:
55:ff:7f:d3:23:60:c1:8b:30:72:64:83:b7:02:c0:
fe:10:3e:7d:37:db:26:c2:6c:23:11:e0:51:52:d4:
1e:43:b1:5d:be:eb:d3:0c:32:81:82:75:4f:fd:05:
f8:58:a6:e9:07:8b:7e:4e:bf:50:39:87:b4:e3:de:
1e:56:a8:1b:5c:50:a4:e1:97:e1:9c:fe:6d:ce:bb:
0b:0a:0b:5f:83:9f:e0:df:bc:51:e3:ee:5c:82:56:
ee:01:ee:ba:07:ad:d6:f2:a7:9d:41:10:e7:de:84:
75:b3:2c:e9:30:57:37:7a:8e:17:be:0b:9f:0d:54:
1d:31:95:5d:2a:05:8e:31:74:63:7c:24:7c:8b:94:
46:ae:55:1f:25:ba:bb:e1:3f:fd:ea:d1:68:6b:f6:
1a:55:83:5c:95:40:fb:7d:e0:fe:8f:2e:a1:2f:3b:
2e:3b:98:ff:3a:97:43:c4:7d:d3:19:25:8f:aa:7c:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F1:AD:CC:F1:26:D5:1B:A4:FA:4C:C5:0E:C2:30:E8:98:C7:A7:6C
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/6_GtzPEm1Ruk-kzFDsIw6JjHp2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.29.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:87:17:29:76:ca:7f:45:e8:4c:f5:ec:95:38:59:ba:c6:0a:
83:59:45:67:50:11:8e:d8:17:ad:62:d1:90:51:2a:9a:03:04:
69:f4:94:b9:34:d1:27:79:82:c3:a8:11:b1:ca:3a:19:99:57:
64:68:dc:c0:96:e5:d4:6d:ef:a7:f5:63:04:8c:14:a6:17:82:
11:8d:ac:83:a2:f0:4b:d7:a0:3d:20:de:c9:9b:a6:c7:a2:f0:
90:10:7c:a2:0c:d9:fc:92:f5:64:49:46:c8:d3:f7:e0:60:89:
65:51:61:aa:8d:bc:00:63:e5:19:e8:6f:81:23:13:c6:59:29:
ea:d6:2e:1a:fe:92:c9:2b:38:27:e2:b3:ad:10:7a:82:29:24:
21:df:31:af:68:77:b0:dc:e8:d6:31:4b:26:76:e1:3b:fe:95:
65:a3:2b:ae:6f:7d:0d:22:28:1b:88:41:3d:06:19:20:1a:9e:
40:49:eb:d8:44:f9:c1:40:ea:69:53:dc:7a:93:0f:68:26:9a:
a3:f6:5d:cf:d3:d4:f0:4d:26:fe:78:86:24:5c:b1:4e:63:9c:
51:94:cd:cc:87:e8:f3:6c:3b:fb:5b:00:03:b0:79:1b:c6:72:
48:b5:7e:f1:99:9c:67:c0:1f:b9:05:e6:77:ed:4f:85:82:3e:
32:de:37:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzDNgGLQj8uBwj3S/4JnbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjMwMTAyMTUxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmYxYWRjY2YxMjZkNTFiYTRmYTRjYzUwZWMyMzBlODk4YzdhNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoSmZL1Vm9e4+v9SDYhrDld+iDWv
sNJ0KISDf6UPMRnD2A3rAw0+nvMy/10AF8XO/In36P0ym8fZ4OgiBLrrJU6e5GqN
kLFOBOxV/3/TI2DBizByZIO3AsD+ED59N9smwmwjEeBRUtQeQ7FdvuvTDDKBgnVP
/QX4WKbpB4t+Tr9QOYe0494eVqgbXFCk4ZfhnP5tzrsLCgtfg5/g37xR4+5cglbu
Ae66B63W8qedQRDn3oR1syzpMFc3eo4XvgufDVQdMZVdKgWOMXRjfCR8i5RGrlUf
Jbq74T/96tFoa/YaVYNclUD7feD+jy6hLzsuO5j/OpdDxH3TGSWPqnxEIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvxrczxJtUbpPpMxQ7CMOiYx6dsMB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvNl9HdHpQRW0xUnVrLWt6RkRzSXc2SmpIcDJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+odMA0G
CSqGSIb3DQEBCwUAA4IBAQB+hxcpdsp/RehM9eyVOFm6xgqDWUVnUBGO2BetYtGQ
USqaAwRp9JS5NNEneYLDqBGxyjoZmVdkaNzAluXUbe+n9WMEjBSmF4IRjayDovBL
16A9IN7Jm6bHovCQEHyiDNn8kvVkSUbI0/fgYIllUWGqjbwAY+UZ6G+BIxPGWSnq
1i4a/pLJKzgn4rOtEHqCKSQh3zGvaHew3OjWMUsmduE7/pVloyuub30NIigbiEE9
BhkgGp5ASevYRPnBQOppU9x6kw9oJpqj9l3P09TwTSb+eIYkXLFOY5xRlM3Mh+jz
bDv7WwADsHkbxnJItX7xmZxnwB+5BeZ37U+Fgj4y3jfL
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:32 2024 by rpki-client on console-fra.rpki-client.org