Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/6mW35-PvmrjeRgw1U6wddztWSNY.roa
File: 6mW35-PvmrjeRgw1U6wddztWSNY.roa (raw, json)
Hash identifier: BJTcK/NOYKNUjCQEGq8WpcfnZ5+WEEwoBarvPNwKuZ0=
Subject key identifier: EA:65:B7:E7:E3:EF:9A:B8:DE:46:0C:35:53:AC:1D:77:3B:56:48:D6
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0185D59E451957D1A1901DF8A3DCA5C1116C
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/6mW35-PvmrjeRgw1U6wddztWSNY.roa
Signing time: Sat 21 Jan 2023 18:36:37 +0000
ROA not before: Sat 21 Jan 2023 18:36:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.230.0/24 maxlen: 24
45.132.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jan 2023 16:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d5:9e:45:19:57:d1:a1:90:1d:f8:a3:dc:a5:c1:11:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 21 18:36:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea65b7e7e3ef9ab8de460c3553ac1d773b5648d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:65:2e:ab:a1:3a:3e:49:27:94:38:97:91:
cc:46:0c:16:48:58:c3:eb:fc:a2:ef:25:c3:9c:c2:
15:6f:ce:81:e4:89:5f:a7:54:34:fd:5a:2e:c8:6b:
d7:05:d2:be:70:68:22:94:76:4f:29:1f:ae:fb:4e:
c3:48:fd:30:46:0a:da:bc:9b:d6:02:a1:19:d1:f4:
f7:14:b8:81:48:40:c7:90:2f:20:ba:d6:65:7f:9c:
54:c2:36:53:0c:3b:ea:1e:c8:50:62:aa:27:28:73:
22:9e:09:20:db:64:09:35:d5:80:10:e0:1e:66:1e:
c8:95:b5:16:54:4c:7e:94:c0:2e:8a:a8:5d:ea:15:
77:ef:a4:97:94:f5:4a:b8:a1:f3:99:c0:06:a5:f3:
f4:54:fe:81:d2:91:16:9e:57:07:98:65:ce:ca:58:
c6:84:3d:4a:61:dc:ee:2e:f3:ff:03:34:bb:b9:2e:
a8:da:9e:f7:c6:3d:99:61:31:aa:2d:a2:2c:4d:b5:
3c:2d:64:f8:8e:b3:ef:03:49:e9:0a:92:7c:15:c4:
ed:df:db:70:8c:7a:78:84:9f:66:e9:7a:30:c0:0a:
bf:bc:3d:fa:3f:c2:77:ed:72:3d:c5:9f:ca:1b:4b:
fe:9e:f9:c5:9b:2c:97:c6:37:23:22:11:23:8b:a4:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:65:B7:E7:E3:EF:9A:B8:DE:46:0C:35:53:AC:1D:77:3B:56:48:D6
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/6mW35-PvmrjeRgw1U6wddztWSNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:5a:0d:4c:ed:23:c3:29:95:a9:6e:1a:43:bc:74:16:cb:90:
04:de:6a:a7:de:0e:a3:38:8a:41:a5:e4:38:a1:59:32:a3:f6:
8a:d7:3f:e6:6c:66:e2:9d:51:ad:ce:59:03:06:ed:dc:84:6b:
b7:0a:36:f7:6e:a7:82:4f:89:40:d0:e6:f3:5f:8f:43:1d:d3:
22:14:91:47:4a:76:ba:21:a9:9d:24:8c:d4:67:c5:c6:97:10:
30:b9:66:e7:9e:8f:00:c1:8b:60:51:93:56:d0:ae:fa:65:0c:
1e:05:9c:07:99:f3:83:b3:57:ff:a0:32:5c:5a:d0:78:bc:2f:
2b:56:dd:22:6d:ba:9d:3b:28:85:64:98:31:64:b1:ac:8f:21:
72:eb:a9:c2:37:c0:e0:de:53:4b:d1:53:62:45:47:3e:00:6c:
ec:85:48:71:17:4e:d7:15:a2:c1:85:44:4d:3b:c4:3f:c3:36:
52:51:a8:d1:a8:84:e9:32:c2:3b:a0:f2:a2:a9:08:2a:ff:11:
c3:14:44:59:b0:3c:43:63:e6:c9:ed:d7:7d:36:69:44:f6:5d:
0c:f1:31:47:bb:93:7d:2d:fe:5d:14:27:c6:c7:35:52:c2:dc:
fc:97:f9:03:9e:32:a3:52:de:c9:ef:9d:d2:1b:e1:8a:1f:51:
ec:f8:eb:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXVnkUZV9GhkB34o9ylwRFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwMTIxMTgzNjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTY1YjdlN2UzZWY5YWI4ZGU0NjBjMzU1M2FjMWQ3NzNiNTY0OGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFZlLquhOj5JJ5Q4l5HMRgwWSFjD
6/yi7yXDnMIVb86B5Ilfp1Q0/VouyGvXBdK+cGgilHZPKR+u+07DSP0wRgravJvW
AqEZ0fT3FLiBSEDHkC8gutZlf5xUwjZTDDvqHshQYqonKHMingkg22QJNdWAEOAe
Zh7IlbUWVEx+lMAuiqhd6hV376SXlPVKuKHzmcAGpfP0VP6B0pEWnlcHmGXOyljG
hD1KYdzuLvP/AzS7uS6o2p73xj2ZYTGqLaIsTbU8LWT4jrPvA0npCpJ8FcTt39tw
jHp4hJ9m6XowwAq/vD36P8J37XI9xZ/KG0v+nvnFmyyXxjcjIhEji6ThcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOplt+fj75q43kYMNVOsHXc7VkjWMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvNm1XMzUtUHZtcmplUmd3MVU2d2RkenRXU05ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYRQAwQA
sGnmMA0GCSqGSIb3DQEBCwUAA4IBAQCkWg1M7SPDKZWpbhpDvHQWy5AE3mqn3g6j
OIpBpeQ4oVkyo/aK1z/mbGbinVGtzlkDBu3chGu3Cjb3bqeCT4lA0ObzX49DHdMi
FJFHSna6IamdJIzUZ8XGlxAwuWbnno8AwYtgUZNW0K76ZQweBZwHmfODs1f/oDJc
WtB4vC8rVt0ibbqdOyiFZJgxZLGsjyFy66nCN8Dg3lNL0VNiRUc+AGzshUhxF07X
FaLBhURNO8Q/wzZSUajRqITpMsI7oPKiqQgq/xHDFERZsDxDY+bJ7dd9NmlE9l0M
8TFHu5N9Lf5dFCfGxzVSwtz8l/kDnjKjUt7J753SG+GKH1Hs+Otw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org