Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/VHrIRnaWJumRnhvDe1gfzfpVUgc.roa
File: VHrIRnaWJumRnhvDe1gfzfpVUgc.roa (raw, json)
Hash identifier: 1bgvlU90neR3NzFbzrscc0IMrgq+WQhSO8phrfQ0Sc0=
Subject key identifier: 54:7A:C8:46:76:96:26:E9:91:9E:1B:C3:7B:58:1F:CD:FA:55:52:07
Certificate issuer: /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Certificate serial: 01856F3908D40B725ED02BDA54DD623A4C2A
Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/VHrIRnaWJumRnhvDe1gfzfpVUgc.roa
Signing time: Sun 01 Jan 2023 21:24:46 +0000
ROA not before: Sun 01 Jan 2023 21:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30720
IP address blocks: 80.85.160.0/24 maxlen: 24
2a01:6a40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Jul 2023 13:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:08:d4:0b:72:5e:d0:2b:da:54:dd:62:3a:4c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Validity
Not Before: Jan 1 21:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=547ac846769626e9919e1bc37b581fcdfa555207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:6f:12:1b:2a:6a:64:77:92:59:15:65:9f:
1e:32:a7:f7:da:d3:a6:ba:0f:d5:c2:a5:10:58:cf:
cd:6a:45:6c:d6:e5:83:e1:99:26:d1:7f:0f:f7:e2:
ea:31:79:c2:8f:21:7b:4e:d8:4a:79:21:52:d6:cd:
82:ca:fc:be:cc:98:15:da:5c:24:05:2a:7f:b8:ff:
9b:a8:17:a8:01:9c:f8:13:d1:bc:1c:c8:35:54:57:
68:3e:e8:c8:ef:14:b5:ff:55:dd:98:be:0f:f2:45:
92:8c:f1:91:2c:52:d1:12:8a:23:15:a4:24:ac:d4:
a5:17:f1:cb:a5:96:29:2e:76:09:b2:7a:b8:d4:1d:
eb:70:90:31:22:f2:3f:cc:ab:6a:56:29:f7:68:b0:
4c:64:90:4a:a2:52:01:50:e7:73:26:f2:94:57:7a:
5a:d5:1c:75:a1:10:4d:49:e9:bd:d1:92:c2:ea:fd:
ba:9d:cf:22:f2:67:f8:93:60:b5:23:73:c7:8e:66:
4f:28:eb:bb:fb:2f:25:16:83:e8:eb:1e:43:50:43:
6a:07:2b:ba:08:d8:b2:e7:2d:69:2c:93:25:cb:cb:
a2:5b:ef:7b:bb:c6:c0:38:fc:26:34:ac:0c:65:f9:
14:ea:fa:3f:76:3e:98:8b:5e:5a:4b:8e:5a:5e:09:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7A:C8:46:76:96:26:E9:91:9E:1B:C3:7B:58:1F:CD:FA:55:52:07
X509v3 Authority Key Identifier:
keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/VHrIRnaWJumRnhvDe1gfzfpVUgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.160.0/24
IPv6:
2a01:6a40:1::/48
Signature Algorithm: sha256WithRSAEncryption
8d:89:ad:7e:14:99:01:3f:23:e6:14:91:df:94:71:34:41:ec:
e0:75:46:0f:cb:35:0e:8d:6b:f9:48:d9:13:47:d1:b3:49:bd:
83:b8:e4:f2:53:55:34:ab:7d:db:5f:b3:73:22:55:ab:7c:08:
f1:88:6a:31:c0:3c:9f:88:a5:2e:78:46:31:b5:74:e3:f8:a2:
be:8f:29:56:02:36:ec:80:ee:12:1b:3e:ff:0a:51:af:6a:57:
30:e9:f4:75:75:e2:f6:50:82:52:2a:af:5b:3f:48:3f:e6:63:
a1:26:a1:2a:57:7f:07:5f:80:86:96:7e:fe:0a:6c:34:e0:19:
4d:f5:d0:fb:c1:16:5e:c9:a4:51:4a:e9:a2:b5:cb:8a:ba:e0:
9f:0f:f8:6b:7a:2c:0a:b2:ff:b1:5e:99:95:7f:dd:26:78:ab:
90:c7:fd:d3:17:7a:9f:80:9e:35:40:9f:0a:35:22:67:2d:cb:
8f:7b:b7:0f:d2:57:4e:94:09:31:22:67:7c:66:4f:0b:94:01:
27:b3:4a:e5:0a:29:da:d8:92:5f:e4:ff:d4:00:93:9f:0f:07:
48:e3:96:c1:f2:05:4e:64:98:18:0c:16:c0:45:48:81:c7:1d:
f3:21:9c:a5:c3:b7:c8:ab:d0:b3:08:d7:12:5e:3f:bc:86:36:
a0:58:f5:81
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVvOQjUC3Je0CvaVN1iOkwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2FlODBjZWNiNTZmNWIzMDAzODgzYTk1ZTI2ZjQ0MWQ3
NDlmMmUwHhcNMjMwMTAxMjEyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDdhYzg0Njc2OTYyNmU5OTE5ZTFiYzM3YjU4MWZjZGZhNTU1MjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE9vEhsqamR3klkVZZ8eMqf32tOm
ug/VwqUQWM/NakVs1uWD4Zkm0X8P9+LqMXnCjyF7TthKeSFS1s2Cyvy+zJgV2lwk
BSp/uP+bqBeoAZz4E9G8HMg1VFdoPujI7xS1/1XdmL4P8kWSjPGRLFLREoojFaQk
rNSlF/HLpZYpLnYJsnq41B3rcJAxIvI/zKtqVin3aLBMZJBKolIBUOdzJvKUV3pa
1Rx1oRBNSem90ZLC6v26nc8i8mf4k2C1I3PHjmZPKOu7+y8lFoPo6x5DUENqByu6
CNiy5y1pLJMly8uiW+97u8bAOPwmNKwMZfkU6vo/dj6Yi15aS45aXgl3dwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFR6yEZ2libpkZ4bw3tYH836VVIHMB8GA1UdIwQY
MBaAFGs66AzstW9bMAOIOpXib0QddJ8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXpyb0RPeTFiMXN3QTRnNmxlSnZSQjEwbnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi82MzczNzctY2FkYy00ZmQ0LWI2NmQt
YzlhNTZjNWQzZTkxLzEvVkhySVJuYVdKdW1Sbmh2RGUxZ2Z6ZnBWVWdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi82MzczNzctY2FkYy00ZmQ0LWI2NmQtYzlhNTZjNWQzZTkx
LzEvYXpyb0RPeTFiMXN3QTRnNmxlSnZSQjEwbnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUFWgMA8E
AgACMAkDBwAqAWpAAAEwDQYJKoZIhvcNAQELBQADggEBAI2JrX4UmQE/I+YUkd+U
cTRB7OB1Rg/LNQ6Na/lI2RNH0bNJvYO45PJTVTSrfdtfs3MiVat8CPGIajHAPJ+I
pS54RjG1dOP4or6PKVYCNuyA7hIbPv8KUa9qVzDp9HV14vZQglIqr1s/SD/mY6Em
oSpXfwdfgIaWfv4KbDTgGU310PvBFl7JpFFK6aK1y4q64J8P+Gt6LAqy/7FemZV/
3SZ4q5DH/dMXep+AnjVAnwo1Imcty497tw/SV06UCTEiZ3xmTwuUASezSuUKKdrY
kl/k/9QAk58PB0jjlsHyBU5kmBgMFsBFSIHHHfMhnKXDt8ir0LMI1xJeP7yGNqBY
9YE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:21 2024 by rpki-client on console-ams.rpki-client.org