Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/6utmC77JItAXMDwBOu6bZEFU9pI.roa
File: 6utmC77JItAXMDwBOu6bZEFU9pI.roa (raw, json)
Hash identifier: nuXw3KrSic/hbkk3lTEtIesKVmfS8S6/pZ6g+TzQzwA=
Subject key identifier: EA:EB:66:0B:BE:C9:22:D0:17:30:3C:01:3A:EE:9B:64:41:54:F6:92
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 01884E1A951977912413EED9C05749A0F373
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/6utmC77JItAXMDwBOu6bZEFU9pI.roa
Signing time: Wed 24 May 2023 14:12:24 +0000
ROA not before: Wed 24 May 2023 14:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136258
IP address blocks: 185.213.23.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
2a11:840:12::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 03 Jun 2023 12:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:1a:95:19:77:91:24:13:ee:d9:c0:57:49:a0:f3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: May 24 14:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaeb660bbec922d017303c013aee9b644154f692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:2b:87:33:ed:81:3c:41:40:cf:ef:2e:f2:
45:3a:a8:7e:f1:f5:38:63:b4:f7:e8:18:59:66:66:
4b:2f:af:72:6b:fd:01:67:73:a9:ac:ee:ce:f2:9c:
c2:47:4f:e1:68:ae:c5:98:32:ba:45:20:60:d3:08:
48:06:2a:a6:74:91:a9:a6:c3:01:d0:a1:e1:ff:8e:
7a:97:9c:7f:fa:5b:0a:33:53:3c:c8:dd:cd:f7:d6:
62:a4:64:8c:ab:0e:4a:93:1b:7f:fc:64:69:45:1a:
03:40:28:13:1d:f8:f7:73:a1:03:09:e9:77:e8:a4:
56:91:91:ee:d3:86:82:da:0f:43:73:cc:4c:e8:ad:
de:ec:31:b6:dd:f8:30:1b:1b:f1:ac:75:86:50:d3:
37:73:46:84:4f:b6:fc:54:97:b4:c0:ba:0b:c1:60:
7d:3d:eb:1d:d4:22:ba:5a:46:8d:fc:23:82:47:45:
13:0a:5a:77:3e:11:8d:70:6a:95:f9:c2:7f:99:d5:
8e:45:0d:b0:b3:98:dd:17:16:fa:2a:6c:13:ce:43:
ef:80:47:1c:d4:ba:24:35:1d:f8:4d:a5:73:25:c9:
74:c1:9e:a1:49:22:30:ad:82:04:91:a7:7c:83:d4:
94:f7:25:98:ae:f4:87:ab:be:6f:26:5e:66:ef:be:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:66:0B:BE:C9:22:D0:17:30:3C:01:3A:EE:9B:64:41:54:F6:92
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/6utmC77JItAXMDwBOu6bZEFU9pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.152.0/23
147.78.0.0/23
185.126.239.0/24
185.213.23.0/24
IPv6:
2a11:840:7::-2a11:840:8:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:17::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:25::/48
2a11:840:40::/47
2a11:840:47::/48
Signature Algorithm: sha256WithRSAEncryption
6f:56:67:46:30:59:c3:b6:7a:bb:f0:51:2e:2b:96:2c:8b:26:
d6:25:06:02:b5:f1:3b:5a:c7:1e:ac:ef:a6:dd:38:f2:54:8f:
bd:99:99:fb:df:dc:8c:79:96:4c:a5:e7:3e:9a:75:af:2d:9f:
8e:b2:f5:9d:17:2b:89:c4:78:06:ad:b9:21:21:7c:e4:c2:d5:
7f:a8:31:20:bb:ff:9d:5a:81:41:83:ff:f8:c1:09:97:4b:a6:
26:26:76:3c:c0:a1:20:a0:c2:55:57:d4:e4:51:e2:6f:69:a2:
5f:1c:04:1d:ba:34:8b:de:3c:57:cd:83:b4:7e:a4:ea:44:d1:
19:22:23:ec:c2:b6:ac:c6:2e:53:c1:d2:17:67:3f:98:28:9b:
e6:2c:7c:95:5b:53:68:be:e3:02:c4:cc:23:68:57:1f:fa:af:
65:76:52:48:95:3d:c9:f3:ee:ec:f9:72:a7:f6:b0:c8:ae:b6:
d3:e4:3e:d6:0c:20:f4:13:5a:a3:8c:31:54:45:74:f2:41:b7:
39:32:9c:e9:ca:94:35:98:b5:7f:5c:ed:88:84:87:45:f4:2b:
52:37:4f:18:2f:16:a2:87:f7:69:33:9f:ef:9c:8a:12:28:1c:
fe:40:e4:9f:5b:dc:a1:b3:da:9d:f2:53:78:1f:bd:84:ec:63:
5b:71:d8:55
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgISAYhOGpUZd5EkE+7ZwFdJoPNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx
NjAwNDUwHhcNMjMwNTI0MTQxMjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWViNjYwYmJlYzkyMmQwMTczMDNjMDEzYWVlOWI2NDQxNTRmNjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu0rhzPtgTxBQM/vLvJFOqh+8fU4
Y7T36BhZZmZLL69ya/0BZ3OprO7O8pzCR0/haK7FmDK6RSBg0whIBiqmdJGppsMB
0KHh/456l5x/+lsKM1M8yN3N99ZipGSMqw5Kkxt//GRpRRoDQCgTHfj3c6EDCel3
6KRWkZHu04aC2g9Dc8xM6K3e7DG23fgwGxvxrHWGUNM3c0aET7b8VJe0wLoLwWB9
Pesd1CK6WkaN/COCR0UTClp3PhGNcGqV+cJ/mdWORQ2ws5jdFxb6KmwTzkPvgEcc
1LokNR34TaVzJcl0wZ6hSSIwrYIEkad8g9SU9yWYrvSHq75vJl5m7775KwIDAQAB
o4ICfDCCAngwHQYDVR0OBBYEFOrrZgu+ySLQFzA8ATrum2RBVPaSMB8GA1UdIwQY
MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt
NTE5MjAzNzMzNTNjLzEvNnV0bUM3N0pJdEFYTUR3Qk91NmJaRUZVOXBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj
LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MB4EAgABMBgDBAFtaJgD
BAGTTgADBAC5fu8DBAC51RcwXQQCAAIwVzASAwcAKhEIQAAHAwcAKhEIQAAIMBID
BwQqEQhAABADBwAqEQhAABQwEgMHACoRCEAAFwMHASoRCEAAGAMHACoRCEAAJQMH
ASoRCEAAQAMHACoRCEAARzANBgkqhkiG9w0BAQsFAAOCAQEAb1ZnRjBZw7Z6u/BR
LiuWLIsm1iUGArXxO1rHHqzvpt048lSPvZmZ+9/cjHmWTKXnPpp1ry2fjrL1nRcr
icR4Bq25ISF85MLVf6gxILv/nVqBQYP/+MEJl0umJiZ2PMChIKDCVVfU5FHib2mi
XxwEHbo0i948V82DtH6k6kTRGSIj7MK2rMYuU8HSF2c/mCib5ix8lVtTaL7jAsTM
I2hXH/qvZXZSSJU9yfPu7Plyp/awyK620+Q+1gwg9BNao4wxVEV08kG3OTKc6cqU
NZi1f1ztiISHRfQrUjdPGC8Woof3aTOf75yKEigc/kDkn1vcobPanfJTeB+9hOxj
W3HYVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org