Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/6TzDYVTV1sr2otOPB93uJNehN7s.roa
File: 6TzDYVTV1sr2otOPB93uJNehN7s.roa (raw, json)
Hash identifier: Xa6JWVAcGsjfgzGDz9QTdV12DNq1r95mLXIJ1i46au8=
Subject key identifier: E9:3C:C3:61:54:D5:D6:CA:F6:A2:D3:8F:07:DD:EE:24:D7:A1:37:BB
Certificate issuer: /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial: 018BED9E86051041FB3A2125CD351D581C19
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/6TzDYVTV1sr2otOPB93uJNehN7s.roa
Signing time: Mon 20 Nov 2023 16:44:31 +0000
ROA not before: Mon 20 Nov 2023 16:44:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216172
IP address blocks: 185.30.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:9e:86:05:10:41:fb:3a:21:25:cd:35:1d:58:1c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Validity
Not Before: Nov 20 16:44:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e93cc36154d5d6caf6a2d38f07ddee24d7a137bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:b6:7a:84:51:0e:b1:e1:5a:14:43:ff:6d:
ce:56:b8:8e:c7:99:ea:af:1e:29:b2:48:ed:29:f1:
3b:1a:42:4f:38:ec:dd:5e:34:32:fc:f6:c5:f1:8e:
49:12:6d:ae:00:5b:26:50:97:f6:5e:94:e0:3d:90:
cb:f2:a1:a6:37:1f:40:47:18:c4:23:e1:00:d8:36:
5c:8d:70:74:ac:1f:13:57:44:48:0a:ed:ed:0f:ce:
ee:7d:4a:62:db:56:db:52:fb:b7:a7:33:72:c2:ce:
d2:83:be:71:e7:9c:ed:40:76:10:a4:6a:49:6a:8e:
c9:dc:68:af:9a:b6:0c:a8:35:87:8c:c7:74:eb:dd:
dd:1a:cd:b6:89:9b:b3:2f:d8:92:28:1e:25:3e:3f:
c6:c7:6a:cd:55:b4:57:11:51:c4:cc:c9:71:a0:26:
ce:79:da:10:aa:de:e0:0f:d3:44:8f:6d:8d:93:6c:
40:a3:6f:53:19:02:dd:6e:5d:0a:32:39:fc:15:ca:
1c:1d:30:4e:59:6f:a8:1b:91:f8:41:b4:55:30:61:
cd:cd:55:ac:aa:af:ae:2d:88:57:0a:ae:ba:74:a4:
be:16:b6:e1:a7:39:1a:21:90:d4:9f:5a:bf:b9:4d:
a4:ed:5d:26:61:88:b4:ad:3e:2a:16:ff:39:33:a0:
5e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3C:C3:61:54:D5:D6:CA:F6:A2:D3:8F:07:DD:EE:24:D7:A1:37:BB
X509v3 Authority Key Identifier:
keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/6TzDYVTV1sr2otOPB93uJNehN7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.111.0/24
Signature Algorithm: sha256WithRSAEncryption
14:61:77:1a:56:bc:fd:a2:fd:ec:31:8b:db:17:9c:58:d8:41:
b1:e5:8c:d2:75:98:d2:6c:aa:ef:ea:7b:88:b0:de:2a:8e:15:
87:e0:b1:42:6a:b1:55:dd:24:a5:d1:75:6e:55:35:3b:50:4e:
9c:98:9d:70:48:9c:b9:86:30:19:b1:5b:08:3c:a6:c3:bd:c9:
e8:f0:29:e7:e5:cc:2e:08:df:10:8f:d6:7b:a8:aa:06:bf:41:
4a:8b:de:71:fc:3d:ac:b5:dc:a1:0f:95:3b:27:92:5a:61:de:
c9:e7:fd:54:8a:43:7d:4f:74:92:7a:ed:bb:43:53:4a:e1:52:
85:7a:44:31:91:12:87:da:54:d1:dc:b1:ae:fa:a2:a3:02:94:
54:2c:3c:1d:b7:03:2a:cf:65:ab:2e:23:75:8e:4e:de:d4:ca:
92:e2:70:e2:25:cb:c3:fc:c1:4f:cb:51:6e:f1:10:37:e9:e2:
b7:10:ec:5b:f3:42:d6:5e:36:4c:3c:54:f0:13:9e:2e:ea:ae:
0a:d9:f4:97:7e:c6:c8:e6:fa:4c:d0:db:47:95:a9:48:ae:c0:
32:08:e7:e8:22:19:ee:d9:1a:92:35:2d:dd:81:76:69:7b:f1:
04:07:5e:e0:44:11:52:00:8b:77:c3:e5:62:66:c9:c2:5e:9e:
e9:e1:3e:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvtnoYFEEH7OiElzTUdWBwZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NGQ0ZmU3ODBmZTQ1MzMwNzgwZGViNmVjMzg0Y2I5NDkz
ZjJkZjIwHhcNMjMxMTIwMTY0NDMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTNjYzM2MTU0ZDVkNmNhZjZhMmQzOGYwN2RkZWUyNGQ3YTEzN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzy2eoRRDrHhWhRD/23OVriOx5nq
rx4pskjtKfE7GkJPOOzdXjQy/PbF8Y5JEm2uAFsmUJf2XpTgPZDL8qGmNx9ARxjE
I+EA2DZcjXB0rB8TV0RICu3tD87ufUpi21bbUvu3pzNyws7Sg75x55ztQHYQpGpJ
ao7J3GivmrYMqDWHjMd0693dGs22iZuzL9iSKB4lPj/Gx2rNVbRXEVHEzMlxoCbO
edoQqt7gD9NEj22Nk2xAo29TGQLdbl0KMjn8FcocHTBOWW+oG5H4QbRVMGHNzVWs
qq+uLYhXCq66dKS+FrbhpzkaIZDUn1q/uU2k7V0mYYi0rT4qFv85M6BebwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOk8w2FU1dbK9qLTjwfd7iTXoTe7MB8GA1UdIwQY
MBaAFAVNT+eA/kUzB4Detuw4TLlJPy3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlUxUDU0RC1SVE1IZ042MjdEaE11VWtfTGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xZjNmMTEtNTQ5OS00YzdiLWIyZTQt
MDUxYjg5ODQ4NjZlLzEvNlR6RFlWVFYxc3Iyb3RPUEI5M3VKTmVoTjdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xZjNmMTEtNTQ5OS00YzdiLWIyZTQtMDUxYjg5ODQ4NjZl
LzEvQlUxUDU0RC1SVE1IZ042MjdEaE11VWtfTGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR5vMA0G
CSqGSIb3DQEBCwUAA4IBAQAUYXcaVrz9ov3sMYvbF5xY2EGx5YzSdZjSbKrv6nuI
sN4qjhWH4LFCarFV3SSl0XVuVTU7UE6cmJ1wSJy5hjAZsVsIPKbDvcno8Cnn5cwu
CN8Qj9Z7qKoGv0FKi95x/D2stdyhD5U7J5JaYd7J5/1UikN9T3SSeu27Q1NK4VKF
ekQxkRKH2lTR3LGu+qKjApRULDwdtwMqz2WrLiN1jk7e1MqS4nDiJcvD/MFPy1Fu
8RA36eK3EOxb80LWXjZMPFTwE54u6q4K2fSXfsbI5vpM0NtHlalIrsAyCOfoIhnu
2RqSNS3dgXZpe/EEB17gRBFSAIt3w+ViZsnCXp7p4T6T
-----END CERTIFICATE-----
Generated at Thu Nov 30 08:52:18 2023 by rpki-client on console-fra.rpki-client.org