Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/S6uiDOvNe3YnL-yxf9OzgrzrLkM.roa
File: S6uiDOvNe3YnL-yxf9OzgrzrLkM.roa (raw, json)
Hash identifier: 6tr33c7KJaC5/lAp3vaH2HQ/lUGqqKCVIX/M66GfyOY=
Subject key identifier: 4B:AB:A2:0C:EB:CD:7B:76:27:2F:EC:B1:7F:D3:B3:82:BC:EB:2E:43
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D663E998997F81F111295714778FB28
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/S6uiDOvNe3YnL-yxf9OzgrzrLkM.roa
Signing time: Sun 01 Jan 2023 12:54:55 +0000
ROA not before: Sun 01 Jan 2023 12:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14969
IP address blocks: 84.207.206.0/24 maxlen: 24
83.126.61.0/24 maxlen: 24
84.207.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:3e:99:89:97:f8:1f:11:12:95:71:47:78:fb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4baba20cebcd7b76272fecb17fd3b382bceb2e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:9c:1c:2b:dc:a6:5b:68:f0:48:1a:1c:fb:
05:6d:9f:c7:05:45:c7:28:12:6b:2d:d4:18:59:e0:
d0:fa:e5:a6:53:00:96:6c:54:37:fb:69:2f:48:8e:
a0:29:07:e4:03:b6:05:dd:ea:bc:cd:54:58:55:70:
16:77:c0:34:8a:e0:2f:f6:ae:89:83:69:28:8d:18:
ed:84:a8:1c:5c:03:e4:db:fa:ed:66:0a:d8:fc:0a:
b4:09:48:13:9e:50:b5:a1:d3:aa:e4:03:e1:d1:c0:
80:12:53:83:fb:e3:a8:b5:a5:1b:2a:58:d1:9c:66:
15:73:81:f1:71:14:b2:f9:bd:87:03:53:c7:66:4c:
ab:5f:2a:5c:73:a4:ec:8f:69:0c:d1:ce:88:4f:a5:
df:05:cd:c7:c6:61:64:bd:f6:09:4a:d4:55:1a:bb:
17:8b:f4:20:5f:81:cc:79:9c:0a:a5:ac:6f:34:7e:
8e:29:f3:54:77:de:13:49:e7:56:5f:41:2b:1d:83:
fc:97:22:49:72:0d:5c:ca:53:ca:86:a2:c6:70:35:
bc:d6:dc:a2:d6:8f:1f:76:96:66:29:3d:50:16:db:
85:c9:bd:d9:16:dc:a8:99:48:50:a7:87:a5:a7:14:
47:30:e2:fe:12:00:90:6a:2a:27:16:48:75:bb:5f:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:A2:0C:EB:CD:7B:76:27:2F:EC:B1:7F:D3:B3:82:BC:EB:2E:43
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/S6uiDOvNe3YnL-yxf9OzgrzrLkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.126.61.0/24
84.207.206.0/24
84.207.234.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ec:d0:f0:fd:2e:13:cf:d2:c8:06:13:09:d2:d5:6a:aa:d3:
35:77:10:89:97:bf:44:46:e9:40:1f:17:d7:be:4f:fa:c4:a1:
a6:02:4f:f6:a8:71:38:f9:cb:66:45:ba:02:b5:66:94:cd:1f:
9a:12:53:c4:de:ca:24:90:3c:b6:42:ce:98:d2:ca:d1:cd:81:
7d:97:94:e5:7f:54:e3:27:f1:8c:62:ce:43:b9:17:af:0f:38:
64:eb:68:a5:bd:2b:87:25:89:11:42:7d:06:e1:3e:86:e8:95:
ed:32:3f:ee:e0:58:dc:7a:d6:a0:fb:70:da:8f:aa:c2:d7:88:
b2:ae:0c:66:60:2f:82:eb:37:75:85:e9:7a:b1:06:76:f2:0f:
b9:26:59:6b:eb:f3:95:7a:d8:ac:61:04:dc:c5:27:9a:be:b0:
62:b6:94:c7:8e:5c:0a:19:63:e3:cf:8f:6c:35:c9:ec:89:fe:
b9:28:ae:6c:7d:2c:4e:0d:46:49:d0:aa:19:9a:29:14:b0:25:
63:90:66:15:88:d7:21:19:02:db:85:48:ef:a2:f6:f4:57:3a:
47:20:82:6e:1d:c2:3e:82:cb:60:92:dd:f4:48:cd:8c:ce:60:
44:9e:72:93:f1:55:39:c0:e7:d5:48:1f:f9:5c:9d:56:f1:58:
3e:a3:53:71
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVtZj6ZiZf4HxESlXFHePsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx
NzFmYmEwHhcNMjMwMTAxMTI1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmFiYTIwY2ViY2Q3Yjc2MjcyZmVjYjE3ZmQzYjM4MmJjZWIyZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEKcHCvcplto8EgaHPsFbZ/HBUXH
KBJrLdQYWeDQ+uWmUwCWbFQ3+2kvSI6gKQfkA7YF3eq8zVRYVXAWd8A0iuAv9q6J
g2kojRjthKgcXAPk2/rtZgrY/Aq0CUgTnlC1odOq5APh0cCAElOD++OotaUbKljR
nGYVc4HxcRSy+b2HA1PHZkyrXypcc6Tsj2kM0c6IT6XfBc3HxmFkvfYJStRVGrsX
i/QgX4HMeZwKpaxvNH6OKfNUd94TSedWX0ErHYP8lyJJcg1cylPKhqLGcDW81tyi
1o8fdpZmKT1QFtuFyb3ZFtyomUhQp4elpxRHMOL+EgCQaionFkh1u1/7IQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEurogzrzXt2Jy/ssX/Ts4K86y5DMB8GA1UdIwQY
MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt
MjM3NzJlN2Y5MmUzLzEvUzZ1aURPdk5lM1luTC15eGY5T3pncnpyTGtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz
LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU349AwQA
VM/OAwQAVM/qMA0GCSqGSIb3DQEBCwUAA4IBAQAF7NDw/S4Tz9LIBhMJ0tVqqtM1
dxCJl79ERulAHxfXvk/6xKGmAk/2qHE4+ctmRboCtWaUzR+aElPE3sokkDy2Qs6Y
0srRzYF9l5Tlf1TjJ/GMYs5DuRevDzhk62ilvSuHJYkRQn0G4T6G6JXtMj/u4Fjc
etag+3Daj6rC14iyrgxmYC+C6zd1hel6sQZ28g+5Jllr6/OVetisYQTcxSeavrBi
tpTHjlwKGWPjz49sNcnsif65KK5sfSxODUZJ0KoZmikUsCVjkGYViNchGQLbhUjv
ovb0VzpHIIJuHcI+gstgkt30SM2MzmBEnnKT8VU5wOfVSB/5XJ1W8Vg+o1Nx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:11 2024 by rpki-client on console-ams.rpki-client.org