Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6kE4CQ5UvJ1biQf-Lmp2Y2VVT7Y.roa
File: 6kE4CQ5UvJ1biQf-Lmp2Y2VVT7Y.roa (raw, json)
Hash identifier: dyxlWByWKcmAk/WIKygEwmF0/B9KUyQAkpT9DMhysrY=
Subject key identifier: EA:41:38:09:0E:54:BC:9D:5B:89:07:FE:2E:6A:76:63:65:55:4F:B6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC4933DB93704DCADCA21CC9897F51FE2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6kE4CQ5UvJ1biQf-Lmp2Y2VVT7Y.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201949
IP address blocks: 89.40.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 10:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3d:b9:37:04:dc:ad:ca:21:cc:98:97:f5:1f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea4138090e54bc9d5b8907fe2e6a766365554fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:33:4b:9d:26:94:3d:6a:01:3f:15:d4:49:
35:09:90:82:31:c4:97:6a:c5:3c:28:30:e7:76:94:
7a:b7:f6:35:f0:b4:1f:84:db:32:97:35:66:f0:f5:
1e:6f:34:42:4a:9c:1c:a7:2a:20:b6:f6:d2:64:bd:
c0:df:e0:20:8e:bb:b5:47:fd:e7:3f:c3:60:e6:99:
52:fa:62:d2:32:06:04:b9:68:22:8b:86:b8:db:3a:
f4:7c:b3:93:6e:75:a5:02:34:ca:b0:90:a6:17:eb:
43:2f:71:42:44:50:6b:ae:8f:d9:33:8f:62:86:4c:
b7:bf:ff:57:cc:82:f1:86:95:89:2a:fa:59:15:7e:
c6:25:d5:a2:9b:89:1d:7a:ca:9a:d9:fe:be:61:0d:
1c:da:42:e4:de:45:e9:69:6e:b8:85:67:de:fe:6b:
27:2c:7e:3e:d4:55:00:29:83:7e:e3:b9:3a:35:ef:
a2:b7:22:ac:ba:4d:13:5e:b1:7f:a1:25:0c:e6:00:
68:84:f3:5a:09:dc:6a:e3:b0:73:25:04:0f:04:bc:
0c:ba:29:cd:62:28:59:61:4d:11:ca:7a:f3:1c:f1:
ab:89:76:95:ec:c2:cc:92:1e:34:2f:eb:52:02:4c:
e2:52:10:ac:b3:98:a1:60:97:9e:3f:d1:d4:0c:cd:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:41:38:09:0E:54:BC:9D:5B:89:07:FE:2E:6A:76:63:65:55:4F:B6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6kE4CQ5UvJ1biQf-Lmp2Y2VVT7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.70.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f4:7f:43:0e:b6:b5:ca:32:f8:79:8f:60:60:16:68:4f:27:
1d:31:2b:85:20:c4:59:98:d2:d7:0a:2b:fc:af:28:b4:bf:8c:
e1:1b:ce:80:7e:b8:09:77:8c:6b:5f:f5:f7:f5:76:b3:14:54:
d3:8d:09:d6:6b:d5:f4:c3:87:1e:e2:cd:a8:57:ea:6d:e3:96:
f7:c2:1c:61:4d:61:1d:81:9d:64:41:a6:92:de:45:40:bb:a5:
46:9c:d0:46:ba:ad:64:e7:b2:39:e6:a9:d3:84:8e:dc:4b:bf:
4f:fc:2a:98:7b:04:65:82:94:fe:29:aa:3d:d6:2e:4e:f6:ee:
9c:4b:bf:48:cd:fe:41:d2:29:dd:17:b1:0b:58:17:77:62:92:
9a:b7:2c:d3:c5:6a:6a:2d:e0:ab:3c:91:66:96:0d:0b:2b:65:
67:90:85:70:f8:27:d7:fc:68:5b:bb:d5:0f:70:af:77:b9:f1:
d8:a4:a6:47:c1:74:7b:b8:1a:9a:77:a1:45:19:56:6e:b6:a7:
1f:37:f1:be:8f:1c:c8:e3:0b:fd:1e:72:1f:96:07:4f:47:a5:
ef:57:d3:0d:80:c2:ea:52:96:76:2d:26:5d:f0:74:1b:3c:59:
48:6d:b9:d3:d5:40:a6:f8:77:44:2b:be:8d:f9:37:8f:08:f2:
de:74:45:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkz25NwTcrcohzJiX9R/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwMTAxMTAzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTQxMzgwOTBlNTRiYzlkNWI4OTA3ZmUyZTZhNzY2MzY1NTU0ZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGozS50mlD1qAT8V1Ek1CZCCMcSX
asU8KDDndpR6t/Y18LQfhNsylzVm8PUebzRCSpwcpyogtvbSZL3A3+Agjru1R/3n
P8Ng5plS+mLSMgYEuWgii4a42zr0fLOTbnWlAjTKsJCmF+tDL3FCRFBrro/ZM49i
hky3v/9XzILxhpWJKvpZFX7GJdWim4kdesqa2f6+YQ0c2kLk3kXpaW64hWfe/msn
LH4+1FUAKYN+47k6Ne+ityKsuk0TXrF/oSUM5gBohPNaCdxq47BzJQQPBLwMuinN
YihZYU0RynrzHPGriXaV7MLMkh40L+tSAkziUhCss5ihYJeeP9HUDM2b7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpBOAkOVLydW4kH/i5qdmNlVU+2MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNmtFNENRNVV2SjFiaVFmLUxtcDJZMlZWVDdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWShGMA0G
CSqGSIb3DQEBCwUAA4IBAQAW9H9DDra1yjL4eY9gYBZoTycdMSuFIMRZmNLXCiv8
ryi0v4zhG86AfrgJd4xrX/X39XazFFTTjQnWa9X0w4ce4s2oV+pt45b3whxhTWEd
gZ1kQaaS3kVAu6VGnNBGuq1k57I55qnThI7cS79P/CqYewRlgpT+Kao91i5O9u6c
S79Izf5B0indF7ELWBd3YpKatyzTxWpqLeCrPJFmlg0LK2VnkIVw+CfX/Ghbu9UP
cK93ufHYpKZHwXR7uBqad6FFGVZutqcfN/G+jxzI4wv9HnIflgdPR6XvV9MNgMLq
UpZ2LSZd8HQbPFlIbbnT1UCm+HdEK76N+TePCPLedEXD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org