Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/rXsnGrCCEQi6qwL3f8XK46h5NKQ.roa
File: rXsnGrCCEQi6qwL3f8XK46h5NKQ.roa (raw, json)
Hash identifier: m38omKJRD0L49aCT1/jhvf/0IQ0Vl+4ebZjPOi5hpMg=
Subject key identifier: AD:7B:27:1A:B0:82:11:08:BA:AB:02:F7:7F:C5:CA:E3:A8:79:34:A4
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018C5E5EE485FB57E25D1AFE2125B65E0A47
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/rXsnGrCCEQi6qwL3f8XK46h5NKQ.roa
Signing time: Tue 12 Dec 2023 14:12:06 +0000
ROA not before: Tue 12 Dec 2023 14:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 217.144.176.0/22 maxlen: 32
94.141.100.0/22 maxlen: 32
92.246.132.0/22 maxlen: 32
Validation: Failed, certificate revoked on Thu 14 Dec 2023 09:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:5e:e4:85:fb:57:e2:5d:1a:fe:21:25:b6:5e:0a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Dec 12 14:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad7b271ab0821108baab02f77fc5cae3a87934a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7a:86:c5:cc:7d:65:16:4d:25:7d:23:24:8a:
36:ab:b1:1f:3e:69:da:e9:5f:6f:ef:cc:c3:5a:c8:
0e:b1:35:02:bb:77:fa:c9:11:e2:90:8d:d8:e3:bd:
42:3a:1d:c1:80:e7:10:3e:b7:c8:43:6b:30:be:b1:
af:62:a6:e2:05:b7:92:d7:29:7d:e8:f7:92:f3:db:
ef:f4:84:60:e3:72:95:62:d8:4d:15:1e:7f:9e:75:
05:16:28:8d:0b:57:a6:e1:d4:94:26:69:6e:97:07:
fb:86:d5:09:9e:1f:b6:a3:ff:17:73:bb:b0:a7:62:
62:22:e2:99:a6:3f:be:57:58:aa:5a:50:4c:8c:cb:
27:63:3e:0f:78:fc:c1:6f:02:28:04:00:75:0c:93:
9e:41:92:65:ad:4d:51:97:6b:25:23:60:b8:37:15:
9f:df:e8:66:15:45:07:80:56:90:15:52:2e:9a:69:
4e:ab:90:84:b4:3b:b4:fb:69:f3:48:ee:45:3b:af:
c1:65:74:64:45:d5:19:de:d1:14:ec:b2:f2:2e:84:
a9:e9:48:77:a5:77:1b:b1:76:6e:a1:a6:af:87:37:
3a:92:e0:92:b5:d2:ea:6e:7a:d5:93:42:0d:4c:ac:
b4:c3:20:38:19:55:21:24:85:d6:b7:97:5d:6c:12:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7B:27:1A:B0:82:11:08:BA:AB:02:F7:7F:C5:CA:E3:A8:79:34:A4
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/rXsnGrCCEQi6qwL3f8XK46h5NKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.132.0/22
94.141.100.0/22
217.144.176.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:6f:88:55:57:12:93:ed:9a:8d:20:48:02:d0:ab:b4:fe:19:
93:ff:8d:6e:45:5e:c9:38:01:b1:20:32:e0:71:72:f9:3b:6e:
d9:1c:8a:6f:3d:44:ff:2b:c4:67:29:6c:32:22:a3:15:6e:7c:
07:f3:f3:ec:33:e3:9e:17:7f:38:e4:91:61:b7:0e:33:45:95:
ae:16:94:0c:62:47:17:36:d6:90:ea:bd:c4:84:a3:93:2d:25:
a0:5c:a7:a4:80:45:aa:af:4f:2a:d4:67:4e:53:27:6a:eb:84:
c0:42:55:9a:42:86:35:84:b1:d3:e8:e5:a7:af:5f:bd:8d:9a:
28:2f:f6:9e:0d:75:c3:7c:f6:3a:d3:00:1e:53:a5:27:eb:4f:
d5:4d:91:4f:1f:43:bb:28:aa:08:0a:aa:7e:9c:57:12:c9:fb:
f0:e5:31:37:c6:54:2b:a9:87:ec:a3:35:99:ec:bd:4e:4f:a9:
b6:8e:0e:d9:2a:8a:38:f6:fa:13:6e:3f:cd:18:95:8b:83:08:
ff:ea:8d:75:c9:e6:0d:78:19:c8:fe:50:25:6c:e3:d5:e4:84:
d9:82:2c:4c:c6:b8:f6:64:ad:55:3a:46:b8:52:cb:5e:d6:35:
41:da:52:4c:58:53:12:f5:46:76:0a:86:4e:cb:4d:5b:2c:ff:
f3:56:d7:9d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYxeXuSF+1fiXRr+ISW2XgpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5
M2NiZWEwHhcNMjMxMjEyMTQxMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDdiMjcxYWIwODIxMTA4YmFhYjAyZjc3ZmM1Y2FlM2E4NzkzNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHqGxcx9ZRZNJX0jJIo2q7EfPmna
6V9v78zDWsgOsTUCu3f6yRHikI3Y471COh3BgOcQPrfIQ2swvrGvYqbiBbeS1yl9
6PeS89vv9IRg43KVYthNFR5/nnUFFiiNC1em4dSUJmlulwf7htUJnh+2o/8Xc7uw
p2JiIuKZpj++V1iqWlBMjMsnYz4PePzBbwIoBAB1DJOeQZJlrU1Rl2slI2C4NxWf
3+hmFUUHgFaQFVIummlOq5CEtDu0+2nzSO5FO6/BZXRkRdUZ3tEU7LLyLoSp6Uh3
pXcbsXZuoaavhzc6kuCStdLqbnrVk0INTKy0wyA4GVUhJIXWt5ddbBKpMwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK17JxqwghEIuqsC93/FyuOoeTSkMB8GA1UdIwQY
MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt
ZGJmOWQ0MWYxNzk4LzEvclhzbkdyQ0NFUWk2cXdMM2Y4WEs0Nmg1TktRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4
LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCXPaEAwQC
Xo1kAwQC2ZCwMA0GCSqGSIb3DQEBCwUAA4IBAQAcb4hVVxKT7ZqNIEgC0Ku0/hmT
/41uRV7JOAGxIDLgcXL5O27ZHIpvPUT/K8RnKWwyIqMVbnwH8/PsM+OeF3845JFh
tw4zRZWuFpQMYkcXNtaQ6r3EhKOTLSWgXKekgEWqr08q1GdOUydq64TAQlWaQoY1
hLHT6OWnr1+9jZooL/aeDXXDfPY60wAeU6Un60/VTZFPH0O7KKoICqp+nFcSyfvw
5TE3xlQrqYfsozWZ7L1OT6m2jg7ZKoo49voTbj/NGJWLgwj/6o11yeYNeBnI/lAl
bOPV5ITZgixMxrj2ZK1VOka4Uste1jVB2lJMWFMS9UZ2CoZOy01bLP/zVted
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:08 2024 by rpki-client on console-ams.rpki-client.org