Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/bIv2IkWLJbRh9KSDHAeKkJaJ95Y.roa
File: bIv2IkWLJbRh9KSDHAeKkJaJ95Y.roa (raw, json)
Hash identifier: w/w3ftWeBhYToHNRd3KNziJ51lK0vJFOgOKr//9uuXk=
Subject key identifier: 6C:8B:F6:22:45:8B:25:B4:61:F4:A4:83:1C:07:8A:90:96:89:F7:96
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 01887232CD0813062B600A4CFD6619588485
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/bIv2IkWLJbRh9KSDHAeKkJaJ95Y.roa
Signing time: Wed 31 May 2023 14:25:11 +0000
ROA not before: Wed 31 May 2023 14:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203244
IP address blocks: 177.8.68.0/24 maxlen: 24
45.80.85.0/24 maxlen: 24
45.80.86.0/24 maxlen: 24
45.80.87.0/24 maxlen: 24
185.246.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:32:cd:08:13:06:2b:60:0a:4c:fd:66:19:58:84:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: May 31 14:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c8bf622458b25b461f4a4831c078a909689f796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:5d:ef:5b:ee:56:96:13:54:26:90:d0:e2:
8a:f1:41:1c:70:0f:78:a9:3d:9b:35:d5:82:90:07:
a8:be:7b:82:da:92:3f:d5:93:59:a3:cd:99:7b:99:
fc:13:f3:00:c6:9f:bd:61:09:d1:b1:94:9a:d0:c0:
7e:2a:6f:a2:d0:44:9f:68:99:5d:df:4e:96:e9:bc:
08:8f:ba:b3:3c:b2:d0:a0:63:1b:e7:7b:79:67:e6:
b7:a6:f7:ac:34:33:73:d0:13:3d:da:33:fa:31:b3:
f6:ab:1b:23:95:b1:27:4b:98:b5:d5:b0:93:a7:2d:
c3:a6:f9:83:e7:b6:b1:2e:0b:1c:ac:ce:3e:3c:09:
e3:f7:33:92:69:6b:2b:c2:6a:08:75:1c:46:d9:5f:
6c:2f:d3:18:83:84:56:2e:e3:0d:a9:25:bb:1b:c6:
95:a4:ca:78:e9:da:dc:f7:0a:a8:34:c2:f2:67:18:
2f:35:00:f9:e7:a0:00:32:3a:0b:23:47:ba:e0:24:
06:0f:d1:ec:fc:46:2c:8c:62:89:1c:78:b6:e5:19:
9e:02:f4:63:de:47:70:a1:75:95:71:dd:b7:26:d4:
49:f7:d5:4c:5b:e8:8f:fc:c4:ab:f4:8b:b6:54:a1:
ab:dc:dc:59:42:74:4b:f7:b8:a0:70:ba:9a:03:77:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8B:F6:22:45:8B:25:B4:61:F4:A4:83:1C:07:8A:90:96:89:F7:96
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/bIv2IkWLJbRh9KSDHAeKkJaJ95Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.85.0-45.80.87.255
177.8.68.0/24
185.246.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:89:a2:92:2e:33:d3:3c:ea:e7:9b:5b:04:c0:3d:f5:41:ec:
20:d9:70:d3:25:ee:8a:e2:1b:b1:40:83:d0:58:12:08:6d:44:
17:89:cb:eb:18:b9:bc:ab:81:60:2c:f9:d3:76:8e:f5:52:d8:
7c:e5:84:e1:6f:03:c8:14:f4:1a:52:5e:a7:93:15:cf:4b:5f:
84:df:f3:56:be:81:e5:fa:b8:77:f7:88:08:3f:02:7d:6a:b7:
aa:fe:b1:08:cb:a1:9d:7b:eb:c7:94:e5:ee:51:9f:53:05:e3:
b2:4b:bb:9b:d4:2e:01:fc:03:20:26:00:8e:d5:00:b0:a3:e3:
2c:e1:15:af:27:ed:bf:e0:f3:11:a4:3f:58:9a:dc:b4:64:bd:
08:27:55:cd:7f:8e:8a:bf:f2:a0:9d:b8:c0:78:a4:36:d0:6b:
fa:2e:2c:23:d3:e2:f5:79:cc:f5:1d:94:1d:00:62:8b:4b:0f:
96:95:e1:72:3a:fd:0f:24:50:be:34:23:5f:e3:a5:45:73:dc:
eb:65:21:99:14:2b:26:4d:c0:5d:df:e8:5b:fc:38:84:b2:33:
ed:9c:06:f3:94:0f:2a:bc:8e:37:b5:1e:2a:ab:b4:bc:27:00:
ba:da:5b:ac:4f:ce:83:35:ba:47:b2:da:43:b5:bf:10:98:58:
a7:90:23:14
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYhyMs0IEwYrYApM/WYZWISFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3
MDJmNGEwHhcNMjMwNTMxMTQyNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzhiZjYyMjQ1OGIyNWI0NjFmNGE0ODMxYzA3OGE5MDk2ODlmNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/Fd71vuVpYTVCaQ0OKK8UEccA94
qT2bNdWCkAeovnuC2pI/1ZNZo82Ze5n8E/MAxp+9YQnRsZSa0MB+Km+i0ESfaJld
306W6bwIj7qzPLLQoGMb53t5Z+a3pvesNDNz0BM92jP6MbP2qxsjlbEnS5i11bCT
py3DpvmD57axLgscrM4+PAnj9zOSaWsrwmoIdRxG2V9sL9MYg4RWLuMNqSW7G8aV
pMp46drc9wqoNMLyZxgvNQD556AAMjoLI0e64CQGD9Hs/EYsjGKJHHi25RmeAvRj
3kdwoXWVcd23JtRJ99VMW+iP/MSr9Iu2VKGr3NxZQnRL97igcLqaA3fogQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFGyL9iJFiyW0YfSkgxwHipCWifeWMB8GA1UdIwQY
MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt
MmM0OGNiMjk4NjQ2LzEvYkl2MklrV0xKYlJoOUtTREhBZUtrSmFKOTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2
LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtUFUD
BAMtUFADBACxCEQDBAK59sQwDQYJKoZIhvcNAQELBQADggEBAHqJopIuM9M86ueb
WwTAPfVB7CDZcNMl7oriG7FAg9BYEghtRBeJy+sYubyrgWAs+dN2jvVS2HzlhOFv
A8gU9BpSXqeTFc9LX4Tf81a+geX6uHf3iAg/An1qt6r+sQjLoZ1768eU5e5Rn1MF
47JLu5vULgH8AyAmAI7VALCj4yzhFa8n7b/g8xGkP1ia3LRkvQgnVc1/joq/8qCd
uMB4pDbQa/ouLCPT4vV5zPUdlB0AYotLD5aV4XI6/Q8kUL40I1/jpUVz3OtlIZkU
KyZNwF3f6Fv8OISyM+2cBvOUDyq8jje1HiqrtLwnALraW6xPzoM1ukey2kO1vxCY
WKeQIxQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:35 2024 by rpki-client on console-ams.rpki-client.org