Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6RXcase5zIIbXrtzEoZbUzgey1g.roa
File: 6RXcase5zIIbXrtzEoZbUzgey1g.roa (raw, json)
Hash identifier: kHwwD/i4BJjHsAlzMTxq5EjmQU9PXkaxRnwgppSNS8w=
Subject key identifier: E9:15:DC:6A:C7:B9:CC:82:1B:5E:BB:73:12:86:5B:53:38:1E:CB:58
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0192A9C1B516A6BCD2F00DBB19346803AE3F
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6RXcase5zIIbXrtzEoZbUzgey1g.roa
Signing time: Sun 20 Oct 2024 11:48:17 +0000
ROA not before: Sun 20 Oct 2024 11:48:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214567
IP address blocks: 178.239.147.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 17:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a9:c1:b5:16:a6:bc:d2:f0:0d:bb:19:34:68:03:ae:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 20 11:48:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e915dc6ac7b9cc821b5ebb7312865b53381ecb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:a8:33:bb:f9:59:e8:85:72:e6:40:72:a8:
27:8e:b0:2d:1f:9e:2a:02:46:25:79:8b:58:7e:30:
bb:91:6d:e5:1b:5f:93:cf:73:a1:ff:17:12:1d:a4:
f5:4b:a6:6f:3c:b3:7e:40:8f:bc:7c:98:ff:3a:66:
ab:6e:4f:af:8a:15:e2:71:8c:4a:51:57:f1:43:4b:
cd:7e:ec:6c:c6:c1:d1:09:3b:44:8a:46:68:3b:ff:
91:61:c9:03:76:d0:30:57:a5:42:ca:ae:4f:d0:a4:
69:1a:20:f6:28:66:97:1c:5c:02:cf:bc:4e:f4:7d:
5d:d6:2c:f8:25:05:fd:7f:18:35:6d:59:8a:38:29:
4c:8c:6f:63:f2:dd:a1:46:72:b7:74:b4:45:a7:be:
65:c5:55:5d:2a:38:0a:68:84:db:c8:82:fb:ee:84:
59:6f:ea:a6:13:9d:11:6b:c6:54:a4:58:02:c9:3f:
94:d9:53:c5:da:0f:f7:02:cb:38:78:04:c7:1c:37:
fe:b7:15:27:9c:8d:cb:98:5b:c5:25:f1:ef:16:24:
5b:ab:e4:a1:a5:46:f5:52:0d:47:05:5f:61:90:4e:
43:92:e7:95:5d:c2:50:76:88:ed:7d:03:94:c2:5b:
8b:1f:99:80:0c:3b:b3:cd:f1:1a:44:0a:86:46:d9:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:15:DC:6A:C7:B9:CC:82:1B:5E:BB:73:12:86:5B:53:38:1E:CB:58
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6RXcase5zIIbXrtzEoZbUzgey1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
178.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9c:3b:66:ad:3c:19:2f:25:7f:aa:32:e0:39:15:bd:ae:de:
f6:16:35:b8:38:fb:a6:a3:3b:15:5c:a8:a9:90:01:f9:ee:76:
12:e4:2c:de:1a:e1:c8:c1:80:bd:ac:ce:1b:5b:55:0f:13:e3:
04:8f:68:35:ec:00:27:cf:95:e6:c3:1f:1e:a3:44:ce:f6:7e:
7e:14:8b:d1:30:de:ae:15:aa:b4:36:6f:42:01:e7:79:10:09:
53:42:65:64:d9:1e:93:18:d5:fe:a9:ed:88:32:39:0c:40:2e:
88:21:bc:06:ac:87:48:d7:13:c8:80:4d:b0:bc:9e:ad:44:d9:
7b:2f:c9:8b:66:05:db:1a:73:19:58:cf:f2:d0:1d:5e:d5:0f:
dc:85:87:60:c8:bb:cb:32:73:aa:03:3e:7b:93:76:b5:76:4d:
26:2d:83:a4:d6:66:c0:1b:9a:b8:3a:7c:d3:c0:12:e2:d3:34:
17:ff:60:e2:d9:62:99:4f:50:c5:24:cd:1b:37:cd:97:ea:36:
2b:b2:5a:84:a9:3a:90:66:9a:62:aa:a2:42:67:6f:90:52:4d:
a9:74:e2:59:54:ed:2c:9a:d6:8b:0b:1b:73:9f:63:e3:9f:d0:
08:9d:29:d3:b6:51:02:f0:fa:0b:6e:e1:19:c1:65:02:2d:06:
14:56:64:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZKpwbUWprzS8A27GTRoA64/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjQxMDIwMTE0ODE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTE1ZGM2YWM3YjljYzgyMWI1ZWJiNzMxMjg2NWI1MzM4MWVjYjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYKoM7v5WeiFcuZAcqgnjrAtH54q
AkYleYtYfjC7kW3lG1+Tz3Oh/xcSHaT1S6ZvPLN+QI+8fJj/Omarbk+vihXicYxK
UVfxQ0vNfuxsxsHRCTtEikZoO/+RYckDdtAwV6VCyq5P0KRpGiD2KGaXHFwCz7xO
9H1d1iz4JQX9fxg1bVmKOClMjG9j8t2hRnK3dLRFp75lxVVdKjgKaITbyIL77oRZ
b+qmE50Ra8ZUpFgCyT+U2VPF2g/3Ass4eATHHDf+txUnnI3LmFvFJfHvFiRbq+Sh
pUb1Ug1HBV9hkE5DkueVXcJQdojtfQOUwluLH5mADDuzzfEaRAqGRtl90wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOkV3GrHucyCG167cxKGW1M4HstYMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvNlJYY2FzZTV6SUliWHJ0ekVvWmJVemdleTFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsu+TAwQA
su+WMA0GCSqGSIb3DQEBCwUAA4IBAQCEnDtmrTwZLyV/qjLgORW9rt72FjW4OPum
ozsVXKipkAH57nYS5CzeGuHIwYC9rM4bW1UPE+MEj2g17AAnz5Xmwx8eo0TO9n5+
FIvRMN6uFaq0Nm9CAed5EAlTQmVk2R6TGNX+qe2IMjkMQC6IIbwGrIdI1xPIgE2w
vJ6tRNl7L8mLZgXbGnMZWM/y0B1e1Q/chYdgyLvLMnOqAz57k3a1dk0mLYOk1mbA
G5q4OnzTwBLi0zQX/2Di2WKZT1DFJM0bN82X6jYrslqEqTqQZppiqqJCZ2+QUk2p
dOJZVO0smtaLCxtzn2Pjn9AInSnTtlEC8PoLbuEZwWUCLQYUVmQ0
-----END CERTIFICATE-----
Generated at Sun Nov 3 20:02:30 2024 by rpki-client on console-ams.rpki-client.org