Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6KVps790fOom8_L8F7e0jCM-SO4.roa
File: 6KVps790fOom8_L8F7e0jCM-SO4.roa (raw, json)
Hash identifier: 3Q2F9xXR9IV8qCBHr3wrooMRWfztc2tO/WCVuDbsC3M=
Subject key identifier: E8:A5:69:B3:BF:74:7C:EA:26:F3:F2:FC:17:B7:B4:8C:23:3E:48:EE
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A2EFE86CDF7F6AFFE4ABCE611AE9D
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6KVps790fOom8_L8F7e0jCM-SO4.roa
Signing time: Sun 01 Jan 2023 03:05:01 +0000
ROA not before: Sun 01 Jan 2023 03:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57489
IP address blocks: 141.101.236.0/24 maxlen: 24
46.243.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Feb 2023 13:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:2e:fe:86:cd:f7:f6:af:fe:4a:bc:e6:11:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8a569b3bf747cea26f3f2fc17b7b48c233e48ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:7a:10:38:a6:eb:f4:c5:a2:aa:c1:c5:ed:
ed:d3:2a:b1:f6:8b:1e:59:bd:24:0b:84:ec:2b:b4:
8b:05:dd:dc:61:56:23:5a:86:b6:13:c3:37:20:89:
db:55:24:46:4f:29:83:1e:68:7e:f1:88:6f:a5:26:
0b:08:f6:7b:a9:b0:3a:6d:d5:32:29:b3:e4:5c:e4:
76:f5:45:07:3c:0f:c9:6f:b2:5a:02:a4:9e:62:77:
cd:09:57:60:7e:91:d0:e5:7f:f9:e4:7c:d8:b1:20:
7e:d6:53:b8:d2:32:b8:f8:b8:52:6b:ae:da:4f:39:
c4:bf:d6:79:4c:d6:39:53:ad:76:39:5d:09:0b:f2:
05:68:18:cb:b4:13:36:f1:8c:c5:f4:ac:06:51:ee:
a4:43:49:b6:cb:dc:7a:70:8d:02:f9:c6:03:a3:eb:
5a:1c:36:7b:76:30:d2:12:fc:b3:9c:a8:0e:5b:b7:
8d:e2:75:d7:c1:a2:4a:29:e8:6d:fd:5c:a5:62:ba:
67:19:d8:72:01:e5:b4:ea:19:e5:47:2f:8a:12:b0:
ab:09:d9:54:ee:9a:4a:ca:ae:ed:09:50:02:6a:f1:
85:5d:1d:ac:ff:86:38:12:d4:38:fb:d3:28:8f:06:
41:90:e2:b4:a2:2d:79:e7:84:47:bf:14:24:09:ab:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A5:69:B3:BF:74:7C:EA:26:F3:F2:FC:17:B7:B4:8C:23:3E:48:EE
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6KVps790fOom8_L8F7e0jCM-SO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.253.0/24
141.101.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e9:16:39:40:ff:cf:3a:81:1c:ba:15:4d:13:e0:21:bf:5e:
c6:7b:10:96:a3:97:62:4c:dd:f7:c1:2d:0f:71:d6:38:70:09:
88:c4:8b:2a:e3:64:16:94:94:b6:b0:e3:1c:9b:34:d9:9f:7c:
57:26:d0:9e:44:34:0b:20:bd:7d:7b:13:2c:97:a0:05:f4:31:
1a:43:7d:7a:96:11:62:81:2a:e3:e2:3e:20:78:ec:6b:9a:75:
39:a4:1a:4b:40:33:4d:b0:a6:51:0f:53:cd:a2:9b:fa:a0:57:
9f:66:cd:40:43:04:c5:fc:9a:25:73:7c:72:34:a6:7b:b8:ba:
7a:0e:fc:3d:c3:cb:69:75:cd:d0:75:b7:d5:a8:d7:2b:14:1f:
d2:95:9f:3f:2c:14:83:56:c2:f5:51:6c:53:fd:bb:75:41:da:
ea:d3:23:37:2e:2f:d3:36:94:54:7a:9e:5e:48:8b:ab:87:e2:
48:ae:ad:d0:82:2a:78:69:a7:63:c7:4f:3f:72:c6:eb:ac:70:
14:c1:f6:8d:44:b1:6a:60:4c:f2:f2:33:6b:e9:39:d8:66:fb:
f3:b9:34:5a:1f:ef:b9:18:31:a8:63:be:9a:13:0d:59:2c:5a:
53:90:88:e3:d3:90:c3:07:32:d8:3f:19:02:9a:c9:28:05:be:
d0:7c:a4:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVrSi7+hs339q/+SrzmEa6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjMwMTAxMDMwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGE1NjliM2JmNzQ3Y2VhMjZmM2YyZmMxN2I3YjQ4YzIzM2U0OGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmV6EDim6/TFoqrBxe3t0yqx9ose
Wb0kC4TsK7SLBd3cYVYjWoa2E8M3IInbVSRGTymDHmh+8YhvpSYLCPZ7qbA6bdUy
KbPkXOR29UUHPA/Jb7JaAqSeYnfNCVdgfpHQ5X/55HzYsSB+1lO40jK4+LhSa67a
TznEv9Z5TNY5U612OV0JC/IFaBjLtBM28YzF9KwGUe6kQ0m2y9x6cI0C+cYDo+ta
HDZ7djDSEvyznKgOW7eN4nXXwaJKKeht/VylYrpnGdhyAeW06hnlRy+KErCrCdlU
7ppKyq7tCVACavGFXR2s/4Y4EtQ4+9MojwZBkOK0oi1554RHvxQkCauW6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOilabO/dHzqJvPy/Be3tIwjPkjuMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvNktWcHM3OTBmT29tOF9MOEY3ZTBqQ00tU080LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALvP9AwQA
jWXsMA0GCSqGSIb3DQEBCwUAA4IBAQAs6RY5QP/POoEcuhVNE+Ahv17GexCWo5di
TN33wS0PcdY4cAmIxIsq42QWlJS2sOMcmzTZn3xXJtCeRDQLIL19exMsl6AF9DEa
Q316lhFigSrj4j4geOxrmnU5pBpLQDNNsKZRD1PNopv6oFefZs1AQwTF/Jolc3xy
NKZ7uLp6Dvw9w8tpdc3QdbfVqNcrFB/SlZ8/LBSDVsL1UWxT/bt1Qdrq0yM3Li/T
NpRUep5eSIurh+JIrq3Qgip4aadjx08/csbrrHAUwfaNRLFqYEzy8jNr6TnYZvvz
uTRaH++5GDGoY76aEw1ZLFpTkIjj05DDBzLYPxkCmskoBb7QfKQv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org