Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/6r1vHMETMkeIEwA1ofrj5_Z59zE.roa
File: 6r1vHMETMkeIEwA1ofrj5_Z59zE.roa (raw, json)
Hash identifier: F/SXouIMCxw72pf/5Dj18GZV7cfHal/eVSjQzmMFpwk=
Subject key identifier: EA:BD:6F:1C:C1:13:32:47:88:13:00:35:A1:FA:E3:E7:F6:79:F7:31
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 0185B6508467E805C2D5B609BAAA6829BBD5
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/6r1vHMETMkeIEwA1ofrj5_Z59zE.roa
Signing time: Sun 15 Jan 2023 16:43:28 +0000
ROA not before: Sun 15 Jan 2023 16:43:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202777
IP address blocks: 185.124.148.0/24 maxlen: 24
185.124.149.0/24 maxlen: 24
185.124.150.0/24 maxlen: 24
185.124.151.0/24 maxlen: 24
2a06:ee80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b6:50:84:67:e8:05:c2:d5:b6:09:ba:aa:68:29:bb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Jan 15 16:43:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eabd6f1cc113324788130035a1fae3e7f679f731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9e:92:ff:21:5c:3e:ef:22:f5:ca:77:17:26:
4c:9a:d9:ae:e7:94:e2:e8:d4:1e:eb:2c:94:d8:61:
bc:92:c1:b9:2b:9e:14:1d:80:10:36:9e:0d:9c:c2:
c3:ad:f5:64:38:e5:92:21:1f:77:98:9b:d3:b5:f1:
fa:54:54:eb:45:cd:63:1e:ad:f3:96:67:fd:19:bf:
22:ee:2e:3d:63:b3:77:91:50:a2:3d:52:fd:7d:75:
bf:af:84:71:d6:8b:f4:84:4f:6d:3d:b6:7e:89:d3:
39:b5:a5:33:90:2e:ed:72:46:7b:9f:54:f0:ba:e7:
2b:fc:f8:85:2d:8c:23:16:ac:11:53:45:10:dc:57:
34:17:ac:9e:ea:30:0d:bf:67:e8:0c:d3:e6:71:10:
22:d5:7e:71:0c:24:17:6c:d2:0a:0c:1f:6f:c5:d8:
a5:b2:38:8b:df:b4:e6:57:9c:48:7d:06:3e:35:fb:
37:b3:d9:e5:98:f5:c6:35:26:cb:e1:d2:7d:14:b5:
e4:9f:fe:f1:86:7f:cf:3d:f1:42:2f:f9:f8:32:6d:
85:f0:03:6f:c9:c8:56:d0:fe:4d:66:4f:76:69:50:
97:c4:64:5f:c3:63:8a:09:2c:97:dc:d0:48:16:82:
68:3b:4e:00:89:81:e0:54:dd:44:c1:47:4b:bd:8a:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BD:6F:1C:C1:13:32:47:88:13:00:35:A1:FA:E3:E7:F6:79:F7:31
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/6r1vHMETMkeIEwA1ofrj5_Z59zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.148.0/22
IPv6:
2a06:ee80::/29
Signature Algorithm: sha256WithRSAEncryption
85:63:78:3a:49:7f:f1:09:db:cd:f8:63:39:94:39:04:ae:18:
aa:f6:bb:36:f6:f3:db:60:26:7f:41:70:f2:27:63:cb:93:2b:
b3:df:8c:af:7e:eb:e6:41:95:d4:ce:d7:65:32:ed:a9:17:86:
f5:33:b4:d6:f7:0b:c7:2c:a8:18:3e:fe:ae:e9:41:4a:4a:6c:
67:a8:8d:9d:e8:83:06:8c:b0:e7:0f:66:cf:22:37:1d:08:72:
96:6b:ac:cc:f4:80:4d:09:51:e4:99:2d:6a:c3:b1:83:4a:94:
d9:7c:0d:47:cd:fe:c5:af:27:7d:45:dc:59:42:26:f8:9c:ea:
bf:db:37:31:46:f0:2e:4c:c6:3f:f0:17:60:71:e2:47:2c:70:
42:fd:ce:47:3d:49:8d:73:58:f3:2a:1a:68:14:87:72:f1:b7:
bd:f4:a4:7a:79:37:28:38:d6:ab:f6:1e:36:72:d1:9c:31:7e:
fa:c1:24:f2:2b:88:25:b5:d6:16:05:af:14:79:8a:61:c1:64:
7f:93:6e:11:4c:ab:cb:85:13:2d:c0:69:47:cd:72:8c:65:10:
ea:e0:4f:3a:1d:e7:f7:63:b4:47:6c:0c:ac:13:56:70:4b:4e:
0d:80:19:f6:47:26:4b:0e:1a:0d:6e:86:8e:57:68:38:67:45:
15:b4:dc:3c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYW2UIRn6AXC1bYJuqpoKbvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMmY4YjJiOTQ3MjFlOTI4ZjYxODhiNWNmMTUwNTMxNDRk
ZWRmOGMwHhcNMjMwMTE1MTY0MzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWJkNmYxY2MxMTMzMjQ3ODgxMzAwMzVhMWZhZTNlN2Y2NzlmNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg56S/yFcPu8i9cp3FyZMmtmu55Ti
6NQe6yyU2GG8ksG5K54UHYAQNp4NnMLDrfVkOOWSIR93mJvTtfH6VFTrRc1jHq3z
lmf9Gb8i7i49Y7N3kVCiPVL9fXW/r4Rx1ov0hE9tPbZ+idM5taUzkC7tckZ7n1Tw
uucr/PiFLYwjFqwRU0UQ3Fc0F6ye6jANv2foDNPmcRAi1X5xDCQXbNIKDB9vxdil
sjiL37TmV5xIfQY+Nfs3s9nlmPXGNSbL4dJ9FLXkn/7xhn/PPfFCL/n4Mm2F8ANv
ychW0P5NZk92aVCXxGRfw2OKCSyX3NBIFoJoO04AiYHgVN1EwUdLvYp66QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOq9bxzBEzJHiBMANaH64+f2efcxMB8GA1UdIwQY
MBaAFA8viyuUch6Sj2GItc8VBTFE3t+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2Mt
NzIyNmE4ODQ1ZTAxLzEvNnIxdkhNRVRNa2VJRXdBMW9mcmo1X1o1OXpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2MtNzIyNmE4ODQ1ZTAx
LzEvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXyUMA0E
AgACMAcDBQMqBu6AMA0GCSqGSIb3DQEBCwUAA4IBAQCFY3g6SX/xCdvN+GM5lDkE
rhiq9rs29vPbYCZ/QXDyJ2PLkyuz34yvfuvmQZXUztdlMu2pF4b1M7TW9wvHLKgY
Pv6u6UFKSmxnqI2d6IMGjLDnD2bPIjcdCHKWa6zM9IBNCVHkmS1qw7GDSpTZfA1H
zf7Fryd9RdxZQib4nOq/2zcxRvAuTMY/8BdgceJHLHBC/c5HPUmNc1jzKhpoFIdy
8be99KR6eTcoONar9h42ctGcMX76wSTyK4gltdYWBa8UeYphwWR/k24RTKvLhRMt
wGlHzXKMZRDq4E86Hef3Y7RHbAysE1ZwS04NgBn2RyZLDhoNboaOV2g4Z0UVtNw8
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-ams.rpki-client.org