Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/6NGf0wIJOZAKa9VQUAwGmnJINPg.roa
File: 6NGf0wIJOZAKa9VQUAwGmnJINPg.roa (raw, json)
Hash identifier: qx5CIeSIJhYaKP+xHHPFSX00fbbTPPfhgP8BaxN4xag=
Subject key identifier: E8:D1:9F:D3:02:09:39:90:0A:6B:D5:50:50:0C:06:9A:72:48:34:F8
Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial: 018CC86FBAE657805D95BB6485290E40751A
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/6NGf0wIJOZAKa9VQUAwGmnJINPg.roa
Signing time: Tue 02 Jan 2024 04:30:14 +0000
ROA not before: Tue 02 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49136
IP address blocks: 109.229.96.0/19 maxlen: 19
94.231.128.0/20 maxlen: 20
94.231.135.0/24 maxlen: 24
94.231.136.0/24 maxlen: 24
94.231.139.0/24 maxlen: 24
81.162.32.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 29 Aug 2024 04:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:ba:e6:57:80:5d:95:bb:64:85:29:0e:40:75:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Validity
Not Before: Jan 2 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8d19fd3020939900a6bd550500c069a724834f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:1d:12:de:30:e2:73:20:e9:ba:8d:ae:e9:
79:e2:8c:b4:09:35:62:a5:bd:a2:95:37:17:37:e6:
d9:43:9c:0e:ed:22:63:d0:1d:58:4b:9f:77:eb:32:
98:35:34:9f:82:66:8f:a0:88:5c:e6:8f:da:1a:6a:
71:34:47:cc:07:fb:2a:5e:4d:9d:86:78:73:e0:67:
58:52:51:0d:ae:fb:2a:69:d1:6b:c2:be:20:e4:10:
b2:9e:17:f2:03:4d:bd:1d:fc:ad:f8:35:56:18:12:
0c:13:35:44:af:fe:5e:c0:74:bc:02:7f:1a:d0:82:
3b:90:77:1e:85:b3:28:ff:9e:31:98:22:24:e9:36:
e8:10:58:4f:7b:b2:75:79:eb:77:c2:44:08:69:7b:
86:68:5b:f3:9c:b4:cb:2a:f5:bf:bf:7d:e7:9b:de:
eb:ea:3b:67:04:21:4b:d4:f8:9d:7e:18:eb:96:e4:
9b:2a:14:1f:4d:fb:6f:51:73:36:cf:2a:df:51:02:
fb:4f:f1:49:f8:4c:56:e8:79:51:f5:7b:a9:0d:2e:
f3:93:60:5c:dd:a2:69:18:76:9f:88:ae:21:3b:bf:
db:29:e8:b8:86:b9:63:4b:33:5d:69:02:2c:68:7d:
62:66:72:39:96:38:9f:96:c3:0c:19:39:93:7e:80:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:9F:D3:02:09:39:90:0A:6B:D5:50:50:0C:06:9A:72:48:34:F8
X509v3 Authority Key Identifier:
keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/6NGf0wIJOZAKa9VQUAwGmnJINPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.32.0/20
94.231.128.0/20
109.229.96.0/19
Signature Algorithm: sha256WithRSAEncryption
75:01:5e:eb:98:d9:82:62:d8:19:07:78:84:aa:ed:f8:31:54:
16:40:2a:1d:fd:05:5d:8e:00:0f:9e:69:08:e5:86:0b:40:83:
39:ed:17:56:bb:c0:09:7a:bc:b7:59:07:42:2a:5e:08:4b:6e:
21:7c:96:bd:3b:10:ef:91:34:d0:9b:dc:ca:6f:28:79:8d:ea:
98:61:d1:92:a2:ae:98:04:04:d3:3f:a6:d9:80:1f:16:19:96:
d4:91:d9:79:ba:42:92:94:15:d2:c2:92:51:f7:cd:d2:e6:f0:
e8:20:a6:55:75:6d:33:2b:c7:20:b0:42:ec:ea:ca:9b:97:41:
54:b6:5a:39:dd:85:e5:38:1a:e7:d4:42:75:e9:f8:8d:ce:8d:
23:90:f3:7f:a9:15:7b:20:75:64:a9:66:ae:07:b0:4b:7a:18:
d2:79:0d:81:00:e3:02:25:4c:20:6a:ca:19:ce:3c:22:20:4f:
df:16:e8:66:72:fc:5b:9f:c8:19:64:01:be:21:12:75:ad:81:
f5:89:00:25:d1:f5:59:d0:38:18:8d:63:9e:d0:47:05:93:ad:
20:f8:99:ef:6a:45:da:f0:14:93:15:c6:c4:e4:5e:75:0a:a6:
b8:7a:56:61:da:68:48:a8:22:d0:34:7a:c2:2c:2a:d7:b9:c3:
f4:63:cb:51
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzIb7rmV4BdlbtkhSkOQHUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWM5NjUyNTU3OTg3YTJhMDU4MGNjNWM2NWUzNjQ2YjAx
ZGEzYmIwHhcNMjQwMTAyMDQzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGQxOWZkMzAyMDkzOTkwMGE2YmQ1NTA1MDBjMDY5YTcyNDgzNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMYdEt4w4nMg6bqNrul54oy0CTVi
pb2ilTcXN+bZQ5wO7SJj0B1YS5936zKYNTSfgmaPoIhc5o/aGmpxNEfMB/sqXk2d
hnhz4GdYUlENrvsqadFrwr4g5BCynhfyA029Hfyt+DVWGBIMEzVEr/5ewHS8An8a
0II7kHcehbMo/54xmCIk6TboEFhPe7J1eet3wkQIaXuGaFvznLTLKvW/v33nm97r
6jtnBCFL1PidfhjrluSbKhQfTftvUXM2zyrfUQL7T/FJ+ExW6HlR9XupDS7zk2Bc
3aJpGHafiK4hO7/bKei4hrljSzNdaQIsaH1iZnI5ljiflsMMGTmTfoADHQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOjRn9MCCTmQCmvVUFAMBppySDT4MB8GA1UdIwQY
MBaAFLgcllJVeYeioFgMxcZeNkawHaO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYWIwNTQtZWQ1MC00YWE2LWFjZWUt
ZmEwZDJlNDdlNmYxLzEvNk5HZjB3SUpPWkFLYTlWUVVBd0dtbkpJTlBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hYWIwNTQtZWQ1MC00YWE2LWFjZWUtZmEwZDJlNDdlNmYx
LzEvdUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEUaIgAwQE
XueAAwQFbeVgMA0GCSqGSIb3DQEBCwUAA4IBAQB1AV7rmNmCYtgZB3iEqu34MVQW
QCod/QVdjgAPnmkI5YYLQIM57RdWu8AJery3WQdCKl4IS24hfJa9OxDvkTTQm9zK
byh5jeqYYdGSoq6YBATTP6bZgB8WGZbUkdl5ukKSlBXSwpJR983S5vDoIKZVdW0z
K8cgsELs6sqbl0FUtlo53YXlOBrn1EJ16fiNzo0jkPN/qRV7IHVkqWauB7BLehjS
eQ2BAOMCJUwgasoZzjwiIE/fFuhmcvxbn8gZZAG+IRJ1rYH1iQAl0fVZ0DgYjWOe
0EcFk60g+JnvakXa8BSTFcbE5F51Cqa4elZh2mhIqCLQNHrCLCrXucP0Y8tR
-----END CERTIFICATE-----
Generated at Thu Aug 29 06:39:32 2024 by rpki-client on console-fra.rpki-client.org