Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/6Dxu3KCkdylbe317VjhAkvtehso.roa
File: 6Dxu3KCkdylbe317VjhAkvtehso.roa (raw, json)
Hash identifier: PfSpWL8WlmdQ0fxwLIQU1lMt8XdpvbUX17ywDk9c8p8=
Subject key identifier: E8:3C:6E:DC:A0:A4:77:29:5B:7B:7D:7B:56:38:40:92:FB:5E:86:CA
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 01856C0A2D5FD39419A463F93F62D58D3195
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/6Dxu3KCkdylbe317VjhAkvtehso.roa
Signing time: Sun 01 Jan 2023 06:34:44 +0000
ROA not before: Sun 01 Jan 2023 06:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.167.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:2d:5f:d3:94:19:a4:63:f9:3f:62:d5:8d:31:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Jan 1 06:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e83c6edca0a477295b7b7d7b56384092fb5e86ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c8:40:8b:5e:1d:13:a1:4c:ee:9e:fd:55:6b:
67:1c:4a:7f:4a:45:db:09:ac:50:4f:7f:ef:5f:4d:
d1:3a:d4:7e:06:71:af:f8:8d:da:d3:f8:f2:18:9d:
cb:18:4c:9c:af:5b:0c:8e:8a:2a:f2:84:22:ee:9f:
95:e4:d7:ae:2e:b3:49:a5:5c:5b:9e:23:ac:13:ad:
88:b8:8b:b4:79:2f:bd:53:a8:95:39:b3:81:04:f7:
36:b5:a0:83:ef:18:45:b3:81:f3:ad:35:0e:c4:d2:
51:18:5d:e6:7b:07:30:72:fe:e8:d3:80:d5:87:3d:
1a:4a:dd:73:d1:af:1c:55:a0:1b:c7:05:74:dd:35:
a7:7a:bb:16:c5:e7:f8:af:4d:54:22:0d:b9:4c:e7:
33:f5:14:bf:c5:fc:e9:53:62:9c:b6:b6:9f:a0:1e:
94:29:6f:d1:42:fc:71:b2:d1:e3:b1:dd:de:ad:2c:
91:dd:ad:17:46:28:ce:78:f4:43:50:f9:a3:06:58:
8d:58:23:f2:87:e9:08:a3:00:22:fe:b3:52:dd:9a:
c9:30:d1:5c:80:de:c0:9a:0a:5b:56:50:8b:21:7f:
3f:ad:68:86:c7:92:5b:2a:f4:93:a6:21:d8:cc:37:
6a:5b:d4:95:82:3a:f8:83:52:82:98:8a:5d:6e:4b:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3C:6E:DC:A0:A4:77:29:5B:7B:7D:7B:56:38:40:92:FB:5E:86:CA
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/6Dxu3KCkdylbe317VjhAkvtehso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.234.0/24
Signature Algorithm: sha256WithRSAEncryption
26:eb:b8:ee:36:a7:6c:f4:77:a3:11:ea:aa:3c:81:1e:3d:d7:
5f:32:9b:3a:d0:54:13:10:a5:f2:9c:fd:f7:2a:84:c2:90:ac:
59:2e:cd:02:1f:fe:18:ff:18:78:92:94:86:e4:fe:8a:1a:91:
8d:e5:b6:0e:64:d2:76:e0:56:90:43:ac:7b:d6:f1:63:93:e1:
91:e8:81:c7:30:91:82:3a:4d:70:a2:fc:7d:eb:3e:e6:ad:66:
29:99:8b:f9:88:25:1c:f1:5e:65:96:c7:f9:8e:ca:b4:61:38:
33:1f:87:66:a1:0b:21:3c:19:39:d3:5c:f4:88:3e:f1:fb:cc:
92:2c:3e:9e:3d:60:e3:42:56:e8:6e:bb:89:29:62:c0:a7:a4:
bf:8f:21:cb:e7:52:68:21:09:94:88:82:4f:ae:d0:bb:3d:45:
1c:69:fa:bf:54:9d:49:46:04:b2:b0:71:4d:30:58:84:0b:0f:
c5:da:b7:e3:00:fc:e6:e3:46:9a:13:97:cc:3b:85:92:13:89:
da:7e:91:75:61:d3:c1:45:96:7d:6a:58:8d:53:e7:e2:66:6d:
92:91:59:57:74:67:f6:be:b9:cc:70:10:b1:4c:61:c0:41:6d:
12:1e:dd:37:99:38:83:c0:40:e4:82:2d:4a:db:01:1c:1d:d6:
bc:4d:08:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsCi1f05QZpGP5P2LVjTGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjMwMTAxMDYzNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODNjNmVkY2EwYTQ3NzI5NWI3YjdkN2I1NjM4NDA5MmZiNWU4NmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8hAi14dE6FM7p79VWtnHEp/SkXb
CaxQT3/vX03ROtR+BnGv+I3a0/jyGJ3LGEycr1sMjooq8oQi7p+V5NeuLrNJpVxb
niOsE62IuIu0eS+9U6iVObOBBPc2taCD7xhFs4HzrTUOxNJRGF3mewcwcv7o04DV
hz0aSt1z0a8cVaAbxwV03TWnersWxef4r01UIg25TOcz9RS/xfzpU2KctrafoB6U
KW/RQvxxstHjsd3erSyR3a0XRijOePRDUPmjBliNWCPyh+kIowAi/rNS3ZrJMNFc
gN7AmgpbVlCLIX8/rWiGx5JbKvSTpiHYzDdqW9SVgjr4g1KCmIpdbksk6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOg8btygpHcpW3t9e1Y4QJL7XobKMB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvNkR4dTNLQ2tkeWxiZTMxN1ZqaEFrdnRlaHNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuafqMA0G
CSqGSIb3DQEBCwUAA4IBAQAm67juNqds9HejEeqqPIEePddfMps60FQTEKXynP33
KoTCkKxZLs0CH/4Y/xh4kpSG5P6KGpGN5bYOZNJ24FaQQ6x71vFjk+GR6IHHMJGC
Ok1wovx96z7mrWYpmYv5iCUc8V5llsf5jsq0YTgzH4dmoQshPBk501z0iD7x+8yS
LD6ePWDjQlbobruJKWLAp6S/jyHL51JoIQmUiIJPrtC7PUUcafq/VJ1JRgSysHFN
MFiECw/F2rfjAPzm40aaE5fMO4WSE4nafpF1YdPBRZZ9aliNU+fiZm2SkVlXdGf2
vrnMcBCxTGHAQW0SHt03mTiDwEDkgi1K2wEcHda8TQip
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:13 2024 by rpki-client on console-ams.rpki-client.org