Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/6i7AzP2vHOus25jfkzPDECQsZbI.roa
File: 6i7AzP2vHOus25jfkzPDECQsZbI.roa (raw, json)
Hash identifier: zB3dXGG1I1i96KH5aB/VbA7CC+/+leC9QTQ6sYs3YQE=
Subject key identifier: EA:2E:C0:CC:FD:AF:1C:EB:AC:DB:98:DF:93:33:C3:10:24:2C:65:B2
Certificate issuer: /CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Certificate serial: 018573B18570938AC84374766321D339220B
Authority key identifier: DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/6i7AzP2vHOus25jfkzPDECQsZbI.roa
Signing time: Mon 02 Jan 2023 18:14:51 +0000
ROA not before: Mon 02 Jan 2023 18:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20647
IP address blocks: 185.231.124.0/22 maxlen: 22
2a0c:5f00::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:85:70:93:8a:c8:43:74:76:63:21:d3:39:22:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Validity
Not Before: Jan 2 18:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea2ec0ccfdaf1cebacdb98df9333c310242c65b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:1b:71:3d:10:14:93:12:9c:ea:71:02:c2:
92:f1:d3:2e:ad:d6:72:fc:49:62:00:02:64:a5:48:
eb:34:76:88:0b:53:6e:26:34:8b:c1:f8:e9:37:34:
fa:67:5a:af:1b:a9:6a:50:4e:da:08:f8:3e:b6:71:
65:a3:af:19:6e:6f:7f:b6:92:c4:e4:e5:08:20:ce:
be:05:c5:e7:d2:33:d3:15:45:8a:6b:4f:c8:08:81:
9d:bd:32:70:35:70:f6:2d:a0:e6:cb:08:fd:1c:cd:
d9:e3:43:82:c7:8c:b8:39:7b:a1:ce:cc:61:72:d2:
0c:75:13:c2:c4:71:e6:d1:55:e3:9f:8d:5e:86:62:
3d:44:04:c8:af:25:e6:b5:e9:06:b8:09:95:4f:61:
ee:c9:ba:3f:91:be:1d:c9:34:5f:b8:29:19:cd:5d:
51:23:c5:b7:10:19:4c:16:4f:9d:c6:76:f3:01:36:
3e:33:c1:3b:e1:51:0b:69:13:25:3c:b0:1c:20:a6:
50:01:46:51:26:62:84:ba:e0:78:29:d1:78:99:fd:
59:fe:67:46:d5:93:ec:d2:f4:9a:3b:3f:cb:5f:a7:
e3:7b:0d:5e:ba:0c:e4:12:93:69:07:cc:95:60:4c:
e3:0e:3d:cd:fb:26:61:8e:bf:f9:4a:24:38:01:0c:
f1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2E:C0:CC:FD:AF:1C:EB:AC:DB:98:DF:93:33:C3:10:24:2C:65:B2
X509v3 Authority Key Identifier:
keyid:DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/6i7AzP2vHOus25jfkzPDECQsZbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.124.0/22
IPv6:
2a0c:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
95:af:d7:6f:e4:b0:1a:83:33:61:01:27:cb:b1:64:ca:ec:1f:
62:51:06:7b:03:13:54:f9:22:50:39:ce:c6:ea:3e:d3:38:2a:
ec:47:20:71:5b:c2:9f:21:0b:fc:c7:67:be:03:ab:9c:d0:36:
64:a3:a7:e5:c5:cc:59:b0:08:73:08:72:55:23:72:a3:e0:53:
c7:4d:80:6b:74:00:9e:a5:39:7f:1c:3f:24:e4:be:f8:6f:89:
90:49:e1:42:10:cc:9f:de:a4:25:3c:96:fe:7a:ed:d9:c8:1f:
34:69:81:68:1d:0b:04:19:01:f4:ba:94:89:42:c1:8f:5f:92:
87:79:9e:a2:4e:d2:09:de:c1:22:23:a1:ce:b0:04:20:2b:65:
e8:83:52:44:bf:37:ea:d6:1a:0b:80:7d:51:20:c9:a8:2d:44:
c8:d3:4e:2b:5b:a4:3a:54:f2:f1:6f:b3:4b:41:61:c1:c7:a6:
17:ab:1a:81:25:f8:6d:44:f2:75:a1:eb:ec:20:fc:6b:cf:b2:
3e:ca:a0:cc:d2:10:38:26:ca:1a:82:bb:63:3e:25:5a:da:50:
0c:a4:e4:0e:14:86:d3:e9:67:9a:68:14:75:4d:16:10:e6:62:
db:2f:0d:55:72:ee:9e:f4:62:ac:82:d5:6b:3f:b0:b8:69:13:
28:53:4e:4b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVzsYVwk4rIQ3R2YyHTOSILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYWM2MjhhNGM1Y2M2ZTU3MGY0ZjQxYzRlMGQ2Mzk1NDkx
YjRkN2YwHhcNMjMwMTAyMTgxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTJlYzBjY2ZkYWYxY2ViYWNkYjk4ZGY5MzMzYzMxMDI0MmM2NWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqobcT0QFJMSnOpxAsKS8dMurdZy
/EliAAJkpUjrNHaIC1NuJjSLwfjpNzT6Z1qvG6lqUE7aCPg+tnFlo68Zbm9/tpLE
5OUIIM6+BcXn0jPTFUWKa0/ICIGdvTJwNXD2LaDmywj9HM3Z40OCx4y4OXuhzsxh
ctIMdRPCxHHm0VXjn41ehmI9RATIryXmtekGuAmVT2Huybo/kb4dyTRfuCkZzV1R
I8W3EBlMFk+dxnbzATY+M8E74VELaRMlPLAcIKZQAUZRJmKEuuB4KdF4mf1Z/mdG
1ZPs0vSaOz/LX6fjew1eugzkEpNpB8yVYEzjDj3N+yZhjr/5SiQ4AQzxaQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOouwMz9rxzrrNuY35MzwxAkLGWyMB8GA1UdIwQY
MBaAFN+sYopMXMblcPT0HE4NY5VJG01/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzZ4aWlreGN4dVZ3OVBRY1RnMWpsVWtiVFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wODBiZjItN2IyZS00NjVlLWFlOWMt
YzRhZGJlYjVhZGMwLzEvNmk3QXpQMnZIT3VzMjVqZmt6UERFQ1FzWmJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wODBiZjItN2IyZS00NjVlLWFlOWMtYzRhZGJlYjVhZGMw
LzEvMzZ4aWlreGN4dVZ3OVBRY1RnMWpsVWtiVFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCued8MA0E
AgACMAcDBQAqDF8AMA0GCSqGSIb3DQEBCwUAA4IBAQCVr9dv5LAagzNhASfLsWTK
7B9iUQZ7AxNU+SJQOc7G6j7TOCrsRyBxW8KfIQv8x2e+A6uc0DZko6flxcxZsAhz
CHJVI3Kj4FPHTYBrdACepTl/HD8k5L74b4mQSeFCEMyf3qQlPJb+eu3ZyB80aYFo
HQsEGQH0upSJQsGPX5KHeZ6iTtIJ3sEiI6HOsAQgK2Xog1JEvzfq1hoLgH1RIMmo
LUTI004rW6Q6VPLxb7NLQWHBx6YXqxqBJfhtRPJ1oevsIPxrz7I+yqDM0hA4Jsoa
grtjPiVa2lAMpOQOFIbT6WeaaBR1TRYQ5mLbLw1Vcu6e9GKsgtVrP7C4aRMoU05L
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-fra.rpki-client.org