Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6CxrSEltHxpIYHaDnARogl6H3kA.roa
File: 6CxrSEltHxpIYHaDnARogl6H3kA.roa (raw, json)
Hash identifier: vo7qS+0JngyZbrh114S68VWm+ZJY12KDTyLvP/5/cGM=
Subject key identifier: E8:2C:6B:48:49:6D:1F:1A:48:60:76:83:9C:04:68:82:5E:87:DE:40
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 01856E01C72034500E16C2AB44A2FADB4505
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6CxrSEltHxpIYHaDnARogl6H3kA.roa
Signing time: Sun 01 Jan 2023 15:44:48 +0000
ROA not before: Sun 01 Jan 2023 15:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16251
IP address blocks: 193.11.48.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c7:20:34:50:0e:16:c2:ab:44:a2:fa:db:45:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e82c6b48496d1f1a486076839c0468825e87de40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:2f:fb:36:28:d5:e0:0a:2c:dd:97:06:12:
7b:0d:4d:c0:9d:90:93:1b:a1:fc:f5:16:ca:77:ff:
7f:f0:71:13:f3:2f:3c:04:82:50:ff:d9:c8:e5:a0:
70:91:b1:f7:0b:5e:07:37:23:87:15:43:0a:51:7a:
9b:52:29:81:71:10:a3:b7:a7:c1:d5:bf:de:2d:05:
8c:37:08:ae:ef:e6:28:d2:ac:cb:bb:e7:bb:eb:c4:
43:99:96:5f:c9:54:1f:3d:7e:7f:25:7c:6a:40:32:
d6:00:80:e2:d0:8c:e6:e9:5f:e0:ab:60:e4:68:bb:
04:93:62:34:80:ef:e3:df:83:2a:31:7d:a2:f5:31:
eb:50:06:47:04:4f:bb:7d:ec:25:59:ea:41:b6:8b:
53:a8:0f:b2:f9:6c:74:d5:02:f8:f9:5d:07:95:4c:
0b:b2:fe:37:c3:49:cf:af:9f:1c:ff:26:29:92:b6:
80:da:5e:e2:ee:de:97:35:34:6a:50:9c:c4:10:21:
28:7c:06:fb:b7:5c:68:ba:8e:9e:50:8f:34:54:77:
af:92:f5:48:b9:87:23:d3:d6:28:55:e2:e9:ab:37:
7a:c5:f3:2f:52:9c:8c:63:a9:f8:ca:f3:f0:58:25:
1f:97:db:bb:11:48:1b:1d:41:de:99:46:a3:43:c0:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:6B:48:49:6D:1F:1A:48:60:76:83:9C:04:68:82:5E:87:DE:40
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6CxrSEltHxpIYHaDnARogl6H3kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.11.48.0/20
Signature Algorithm: sha256WithRSAEncryption
79:4e:10:32:ae:fb:4a:2f:74:15:34:dd:e6:9c:30:a8:8f:7d:
e5:56:0c:fa:67:b0:13:d3:6e:18:ea:f1:e4:f6:4d:70:ea:59:
ee:73:d6:52:4a:2e:9b:76:c2:f8:42:85:6c:e1:82:49:ae:61:
96:d8:fb:a1:5b:08:92:aa:ed:8b:20:3d:b8:b4:ae:cc:a0:16:
b6:3c:1c:1f:08:8c:43:0c:74:eb:28:3e:c3:d5:6f:3a:30:28:
28:0e:4b:e2:3a:05:5f:20:3b:44:47:31:20:37:9b:89:f2:6a:
14:bb:75:dc:b1:fc:7b:30:0e:71:b9:c9:c7:4a:5e:cb:07:41:
b5:04:4b:9e:bd:b4:51:da:36:83:38:47:15:3f:a0:fe:3a:47:
f6:08:37:c3:c1:ef:9a:07:e0:89:b6:a6:2c:b6:f3:16:00:62:
be:30:9b:56:81:33:61:5a:c3:13:b7:51:50:9a:5e:35:47:e9:
43:d0:ab:89:87:08:d3:85:6d:ee:3f:f5:2e:8e:6e:e1:92:bd:
ce:c5:9c:4e:13:a0:25:8d:cf:f3:92:00:d4:a2:b2:5b:1e:fd:
35:6e:d7:ba:78:ec:f4:c0:eb:1e:1f:a0:1e:84:17:39:91:92:
cb:bf:4f:7f:ca:e7:e8:0a:2c:fd:74:c2:95:82:98:ca:ca:4a:
df:d7:7d:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuAccgNFAOFsKrRKL620UFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5
NGM1ZjIwHhcNMjMwMTAxMTU0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODJjNmI0ODQ5NmQxZjFhNDg2MDc2ODM5YzA0Njg4MjVlODdkZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNcv+zYo1eAKLN2XBhJ7DU3AnZCT
G6H89RbKd/9/8HET8y88BIJQ/9nI5aBwkbH3C14HNyOHFUMKUXqbUimBcRCjt6fB
1b/eLQWMNwiu7+Yo0qzLu+e768RDmZZfyVQfPX5/JXxqQDLWAIDi0Izm6V/gq2Dk
aLsEk2I0gO/j34MqMX2i9THrUAZHBE+7fewlWepBtotTqA+y+Wx01QL4+V0HlUwL
sv43w0nPr58c/yYpkraA2l7i7t6XNTRqUJzEECEofAb7t1xouo6eUI80VHevkvVI
uYcj09YoVeLpqzd6xfMvUpyMY6n4yvPwWCUfl9u7EUgbHUHemUajQ8AWdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgsa0hJbR8aSGB2g5wEaIJeh95AMB8GA1UdIwQY
MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt
NDY0ZWIxODNiNTY4LzEvNkN4clNFbHRIeHBJWUhhRG5BUm9nbDZIM2tBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4
LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwQswMA0G
CSqGSIb3DQEBCwUAA4IBAQB5ThAyrvtKL3QVNN3mnDCoj33lVgz6Z7AT024Y6vHk
9k1w6lnuc9ZSSi6bdsL4QoVs4YJJrmGW2PuhWwiSqu2LID24tK7MoBa2PBwfCIxD
DHTrKD7D1W86MCgoDkviOgVfIDtERzEgN5uJ8moUu3Xcsfx7MA5xucnHSl7LB0G1
BEuevbRR2jaDOEcVP6D+Okf2CDfDwe+aB+CJtqYstvMWAGK+MJtWgTNhWsMTt1FQ
ml41R+lD0KuJhwjThW3uP/Uujm7hkr3OxZxOE6Aljc/zkgDUorJbHv01bte6eOz0
wOseH6AehBc5kZLLv09/yufoCiz9dMKVgpjKykrf132X
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:12 2024 by rpki-client on console-ams.rpki-client.org