Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/b6oFFIYKU7hrs7BXPzPtOcQ7zf8.roa
File: b6oFFIYKU7hrs7BXPzPtOcQ7zf8.roa (raw, json)
Hash identifier: 3UOSwCDxwDDv4/JnknBR0WPhQDFQRsNswb7V0o6rq7c=
Subject key identifier: 6F:AA:05:14:86:0A:53:B8:6B:B3:B0:57:3F:33:ED:39:C4:3B:CD:FF
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 018CC9BBE8CA1783B384CC8348BB68EE54DB
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/b6oFFIYKU7hrs7BXPzPtOcQ7zf8.roa
Signing time: Tue 02 Jan 2024 10:33:04 +0000
ROA not before: Tue 02 Jan 2024 10:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8788
IP address blocks: 193.138.87.0/24 maxlen: 24
212.26.128.0/19 maxlen: 19
194.32.109.0/24 maxlen: 24
194.32.110.0/24 maxlen: 24
178.211.96.0/19 maxlen: 20
194.32.108.0/24 maxlen: 24
194.32.108.0/23 maxlen: 23
212.26.140.0/24 maxlen: 24
212.80.32.0/19 maxlen: 20
2a00:e780:2::/48 maxlen: 48
2a00:e780::/32 maxlen: 32
2a00:e780:a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Jan 2024 08:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:e8:ca:17:83:b3:84:cc:83:48:bb:68:ee:54:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Jan 2 10:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6faa0514860a53b86bb3b0573f33ed39c43bcdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:b6:81:c4:6d:c3:f1:90:86:8e:3b:d5:44:
f7:fe:ae:18:4b:d0:53:d9:4e:c1:7b:33:32:42:0e:
e0:f4:ca:31:55:bc:8c:26:80:7a:9c:ab:81:6d:c3:
fa:c0:b7:b4:9e:9b:16:21:65:59:c0:44:44:02:4b:
52:99:a2:b3:78:4f:eb:56:bc:33:7d:b9:14:0a:3b:
89:c2:97:3a:29:d8:86:56:29:6a:af:ec:a0:29:c5:
4b:27:9a:0f:9d:71:5a:f3:b7:f5:af:6c:e2:57:97:
76:89:e6:c0:d0:56:9b:b1:a0:ac:72:a1:78:90:11:
9d:d3:9e:27:87:c9:ee:0f:2e:3e:cd:9f:06:81:a4:
ef:7e:b9:9d:98:56:70:d0:ea:40:22:b6:90:d3:2e:
63:d4:65:6b:a6:98:ec:0e:34:9a:d1:8c:e3:54:d4:
b3:44:f3:c2:90:f4:f7:49:a6:4a:36:ac:88:d9:e1:
41:a7:56:15:5c:b6:aa:d6:14:1e:08:fa:31:2e:70:
15:9d:c3:96:a8:8b:90:de:c3:a6:a2:ad:f9:6b:79:
8e:59:4e:56:eb:b8:50:35:28:8c:42:27:06:b0:3e:
71:4a:b8:c3:d0:9c:23:be:d4:2b:2c:c8:c8:f1:52:
33:ee:7f:05:03:f8:30:4d:57:00:17:05:32:75:22:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AA:05:14:86:0A:53:B8:6B:B3:B0:57:3F:33:ED:39:C4:3B:CD:FF
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/b6oFFIYKU7hrs7BXPzPtOcQ7zf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.96.0/19
193.138.87.0/24
194.32.108.0-194.32.110.255
212.26.128.0/19
212.80.32.0/19
IPv6:
2a00:e780::/32
Signature Algorithm: sha256WithRSAEncryption
5f:b8:63:be:a4:11:e4:3d:3a:15:c6:c1:18:1f:55:5b:af:b1:
a5:a1:a7:d7:a8:18:bb:14:c9:e3:98:fc:f3:94:88:72:06:66:
8b:0a:e1:5d:77:f0:0e:8e:05:98:d5:4a:2a:5a:20:a3:58:e8:
a4:74:b3:3a:02:6f:21:02:14:38:a1:22:44:73:7e:b4:4c:0b:
a9:5a:8c:d4:f3:35:39:9d:a6:0c:f9:3a:13:5c:54:7c:00:dd:
6a:0d:46:c5:49:f6:ac:42:a0:0e:76:e0:06:a7:fe:be:43:b9:
de:f6:34:88:99:19:69:28:d5:9b:6f:f3:d2:81:0c:c6:2e:a5:
09:e4:9f:71:62:1e:08:29:4a:c0:54:3b:ff:d7:88:f4:00:80:
c0:fc:0b:37:c3:93:06:81:1c:25:63:c8:d4:2c:47:36:96:b1:
9b:ea:98:21:e0:b5:84:ef:2c:f8:54:5e:dd:3c:56:82:7d:98:
ea:d8:99:82:df:0b:77:89:34:4c:a5:ff:6c:8f:8f:ba:ed:64:
76:f8:47:81:c0:3b:52:aa:89:91:5b:69:53:98:6e:90:2a:3f:
f1:ae:33:a0:ba:62:95:55:b9:94:10:d3:61:83:d3:e1:1b:bd:
75:49:50:da:0c:22:de:14:03:81:35:72:f7:73:18:2f:f6:81:
32:bc:e4:b8
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYzJu+jKF4OzhMyDSLto7lTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYTE5YzkyZTk2Njc3ZjVmOTZmNjhmMWNhMGFhZDlmYTMx
MWViNDUwHhcNMjQwMTAyMTAzMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmFhMDUxNDg2MGE1M2I4NmJiM2IwNTczZjMzZWQzOWM0M2JjZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDy2gcRtw/GQho471UT3/q4YS9BT
2U7BezMyQg7g9MoxVbyMJoB6nKuBbcP6wLe0npsWIWVZwEREAktSmaKzeE/rVrwz
fbkUCjuJwpc6KdiGVilqr+ygKcVLJ5oPnXFa87f1r2ziV5d2iebA0FabsaCscqF4
kBGd054nh8nuDy4+zZ8GgaTvfrmdmFZw0OpAIraQ0y5j1GVrppjsDjSa0YzjVNSz
RPPCkPT3SaZKNqyI2eFBp1YVXLaq1hQeCPoxLnAVncOWqIuQ3sOmoq35a3mOWU5W
67hQNSiMQicGsD5xSrjD0JwjvtQrLMjI8VIz7n8FA/gwTVcAFwUydSJfBQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFG+qBRSGClO4a7OwVz8z7TnEO83/MB8GA1UdIwQY
MBaAFBqhnJLpZnf1+W9o8coKrZ+jEetFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wMGFkYjAtODkwZC00N2FkLWExOGMt
NGFkMGFiZWMyNzVlLzEvYjZvRkZJWUtVN2hyczdCWFB6UHRPY1E3emY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8wMGFkYjAtODkwZC00N2FkLWExOGMtNGFkMGFiZWMyNzVl
LzEvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQFstNgAwQA
wYpXMAwDBALCIGwDBADCIG4DBAXUGoADBAXUUCAwDQQCAAIwBwMFACoA54AwDQYJ
KoZIhvcNAQELBQADggEBAF+4Y76kEeQ9OhXGwRgfVVuvsaWhp9eoGLsUyeOY/POU
iHIGZosK4V138A6OBZjVSipaIKNY6KR0szoCbyECFDihIkRzfrRMC6lajNTzNTmd
pgz5OhNcVHwA3WoNRsVJ9qxCoA524Aan/r5Dud72NIiZGWko1Ztv89KBDMYupQnk
n3FiHggpSsBUO//XiPQAgMD8CzfDkwaBHCVjyNQsRzaWsZvqmCHgtYTvLPhUXt08
VoJ9mOrYmYLfC3eJNEyl/2yPj7rtZHb4R4HAO1KqiZFbaVOYbpAqP/GuM6C6YpVV
uZQQ02GD0+EbvXVJUNoMIt4UA4E1cvdzGC/2gTK85Lg=
-----END CERTIFICATE-----
Generated at Mon Jan 8 12:45:26 2024 by rpki-client on console-fra.rpki-client.org