Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/6zsMOzLX41-uCC-cmaMjwfTCnr0.roa
File: 6zsMOzLX41-uCC-cmaMjwfTCnr0.roa (raw, json)
Hash identifier: RJ9wVt5uOZVbwx6sfsoOFANnUiG7wQwf0pg3r5PC25E=
Subject key identifier: EB:3B:0C:3B:32:D7:E3:5F:AE:08:2F:9C:99:A3:23:C1:F4:C2:9E:BD
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 01856F8B8EDF9666CB0DB7B69756A4AC8A63
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/6zsMOzLX41-uCC-cmaMjwfTCnr0.roa
Signing time: Sun 01 Jan 2023 22:54:55 +0000
ROA not before: Sun 01 Jan 2023 22:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205513
IP address blocks: 185.190.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:8e:df:96:66:cb:0d:b7:b6:97:56:a4:ac:8a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 1 22:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb3b0c3b32d7e35fae082f9c99a323c1f4c29ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:ec:d2:71:3f:a0:70:42:66:77:b4:c6:57:
9d:f5:9c:76:33:4f:32:c4:b8:9e:0d:b1:76:d0:cb:
34:ad:28:bc:2e:f3:6c:63:ac:2a:a0:26:79:00:f6:
d0:02:12:a7:52:f2:4c:75:b8:7e:03:6a:79:4e:df:
38:03:8a:ae:32:48:c5:8a:96:ed:9b:18:dd:db:52:
b0:59:62:e8:ee:0c:5b:d7:f7:a0:70:3b:9d:b8:21:
ab:40:e2:b8:8b:e1:aa:25:3d:85:51:73:cc:fb:d3:
d9:00:fd:f2:38:96:3e:bb:a2:44:d8:4f:b1:fa:15:
f6:5a:ba:1b:ab:bb:48:cf:c6:b2:7d:35:df:56:64:
42:c5:3f:79:98:08:d9:e8:f3:55:4f:21:57:9c:ef:
61:95:20:09:4e:c3:a8:ed:79:47:a0:7a:e9:a5:68:
ad:73:a7:6f:b0:e8:0f:f0:4f:80:d9:aa:ca:d3:1c:
b3:63:21:8f:ec:79:a7:cd:1c:9e:92:38:8b:c4:20:
c3:17:d3:4f:0f:94:4d:a8:82:72:fe:a3:ad:66:e5:
e3:a2:00:19:d0:18:dd:5f:9b:5f:38:0d:22:3b:a0:
09:3b:d6:b8:05:20:6d:9b:73:06:0f:8b:a9:68:e5:
c2:8d:f2:af:a3:7f:8d:e1:10:eb:03:5b:cb:9d:50:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3B:0C:3B:32:D7:E3:5F:AE:08:2F:9C:99:A3:23:C1:F4:C2:9E:BD
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/6zsMOzLX41-uCC-cmaMjwfTCnr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.151.0/24
Signature Algorithm: sha256WithRSAEncryption
25:68:94:5e:95:e9:40:1d:2a:2f:bd:8e:e6:7a:ab:f8:90:cd:
40:9f:91:44:07:72:78:cb:df:63:63:1a:23:6a:96:32:e6:63:
d1:6e:f6:7d:ea:6a:e2:be:b9:b5:0f:05:8b:d2:4c:7e:b7:dc:
96:29:c7:e9:b5:ac:20:82:13:81:17:69:3a:8c:04:46:51:d5:
50:6f:4f:46:5d:ba:16:c6:73:ab:e5:c1:2b:67:83:25:92:e1:
21:b9:54:0b:79:0c:ac:2d:69:3e:6d:56:34:78:b1:ed:aa:a4:
af:93:f4:33:b0:96:64:8d:ad:78:2e:39:15:6b:c3:4a:cf:fd:
34:63:10:d2:90:df:60:54:02:17:55:11:64:7d:40:6e:19:ca:
bf:7e:03:7b:f7:3d:d7:c0:9b:88:53:3e:2d:51:ad:25:56:68:
b9:8f:99:c2:98:40:98:2d:33:83:a5:9a:73:aa:d0:fc:d1:93:
93:de:2c:a5:7a:27:3a:8a:9f:a8:82:44:e4:fe:c4:60:3c:7b:
21:3d:f8:90:67:2e:07:2b:6e:41:3a:59:02:fc:82:60:37:d6:
2c:a7:cc:03:15:2a:c5:ab:ae:d4:05:d4:f6:aa:a5:37:ef:e4:
c0:67:e9:6d:ed:29:ff:18:e9:7c:5b:c2:c9:80:bc:16:5a:9d:
23:eb:84:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvi47flmbLDbe2l1akrIpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx
YmQyMTIwHhcNMjMwMTAxMjI1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjNiMGMzYjMyZDdlMzVmYWUwODJmOWM5OWEzMjNjMWY0YzI5ZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkrs0nE/oHBCZne0xled9Zx2M08y
xLieDbF20Ms0rSi8LvNsY6wqoCZ5APbQAhKnUvJMdbh+A2p5Tt84A4quMkjFipbt
mxjd21KwWWLo7gxb1/egcDuduCGrQOK4i+GqJT2FUXPM+9PZAP3yOJY+u6JE2E+x
+hX2Wrobq7tIz8ayfTXfVmRCxT95mAjZ6PNVTyFXnO9hlSAJTsOo7XlHoHrppWit
c6dvsOgP8E+A2arK0xyzYyGP7HmnzRyekjiLxCDDF9NPD5RNqIJy/qOtZuXjogAZ
0BjdX5tfOA0iO6AJO9a4BSBtm3MGD4upaOXCjfKvo3+N4RDrA1vLnVC+4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOs7DDsy1+NfrggvnJmjI8H0wp69MB8GA1UdIwQY
MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt
Mzk5M2FhMzI0ZTFmLzEvNnpzTU96TFg0MS11Q0MtY21hTWp3ZlRDbnIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm
LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub6XMA0G
CSqGSIb3DQEBCwUAA4IBAQAlaJRelelAHSovvY7meqv4kM1An5FEB3J4y99jYxoj
apYy5mPRbvZ96mrivrm1DwWL0kx+t9yWKcfptawgghOBF2k6jARGUdVQb09GXboW
xnOr5cErZ4MlkuEhuVQLeQysLWk+bVY0eLHtqqSvk/QzsJZkja14LjkVa8NKz/00
YxDSkN9gVAIXVRFkfUBuGcq/fgN79z3XwJuIUz4tUa0lVmi5j5nCmECYLTODpZpz
qtD80ZOT3iyleic6ip+ogkTk/sRgPHshPfiQZy4HK25BOlkC/IJgN9Ysp8wDFSrF
q67UBdT2qqU37+TAZ+lt7Sn/GOl8W8LJgLwWWp0j64R7
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:38 2024 by rpki-client on console-ams.rpki-client.org