Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6IcHq0tuktzPlU4SM23PZQIGoxA.roa
File: 6IcHq0tuktzPlU4SM23PZQIGoxA.roa (raw, json)
Hash identifier: 8eoyqiQsod0822h/gjufXyKceaUzw/A+39SBSTSq/28=
Subject key identifier: E8:87:07:AB:4B:6E:92:DC:CF:95:4E:12:33:6D:CF:65:02:06:A3:10
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0188C36DF820CE4B6E6A2C689FA517BC2C55
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6IcHq0tuktzPlU4SM23PZQIGoxA.roa
Signing time: Fri 16 Jun 2023 08:59:04 +0000
ROA not before: Fri 16 Jun 2023 08:59:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140155
IP address blocks: 85.208.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:6d:f8:20:ce:4b:6e:6a:2c:68:9f:a5:17:bc:2c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 16 08:59:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e88707ab4b6e92dccf954e12336dcf650206a310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:46:87:84:5e:ba:d9:06:13:44:c1:ff:1f:
da:fa:22:a7:fd:19:70:4d:e5:21:26:69:78:8e:74:
99:7d:d2:dd:3e:de:f4:57:68:cd:60:9b:11:7b:03:
89:4c:cc:a9:b4:01:c0:16:64:0e:4e:6e:6a:b4:00:
7d:5c:d0:1e:bb:e7:fb:e5:1c:b4:bd:7f:c9:ff:af:
81:93:64:cd:7d:98:a7:a8:bf:58:4d:1a:ff:c0:25:
53:7e:5b:e4:5b:fa:6a:5b:e5:7a:a9:0c:51:48:e2:
ce:25:b8:9e:d2:52:76:47:77:cc:fc:8c:be:f7:16:
bc:18:4b:59:71:cc:32:ac:c0:8b:e9:92:2b:5e:a4:
09:f6:d5:1b:9e:c4:95:93:fe:ce:25:23:d9:b2:5a:
d7:17:d8:18:5d:9c:6e:23:c9:8b:90:f2:f8:c6:d0:
8f:42:82:22:33:53:d8:a1:55:00:a7:76:d9:32:ff:
f5:97:ba:eb:ed:30:69:5a:63:a6:c8:71:7f:c0:5c:
9d:5c:8d:f4:3a:11:85:3b:9d:13:6c:1a:37:ed:15:
6c:c6:f8:c5:43:e5:2d:30:ce:28:7c:b5:9b:09:30:
c0:72:ed:92:a1:e4:46:b3:43:fb:5d:90:4f:e1:ff:
cc:8c:1b:97:05:09:ca:15:62:fd:d3:d9:39:bb:0b:
af:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:87:07:AB:4B:6E:92:DC:CF:95:4E:12:33:6D:CF:65:02:06:A3:10
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6IcHq0tuktzPlU4SM23PZQIGoxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.104.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:d9:e6:17:52:38:a2:db:bc:0e:5a:ac:2f:92:1b:47:de:f8:
2a:c0:0e:1e:35:a5:87:37:46:72:92:8f:ec:5b:98:e6:7d:9b:
55:62:e2:15:62:29:13:c5:52:1a:c3:1d:d0:48:f9:c8:b1:95:
11:1d:45:58:58:dc:cf:cf:c3:73:6b:70:61:3a:a9:d8:5d:17:
82:ee:83:b5:6d:c8:7e:30:c0:f4:cc:84:0c:b5:98:ae:70:0d:
fa:ca:09:ed:f8:3c:19:0e:e8:bd:f7:9c:ba:21:8a:cc:87:2d:
79:73:5d:2d:6a:88:c7:92:2a:d6:b8:e8:13:02:ec:17:6d:a8:
30:27:f0:22:b3:a1:9a:3c:06:34:f1:e0:1e:94:14:8d:b2:26:
a4:27:7b:c3:84:fb:4c:68:09:b0:3f:5d:ec:1a:1f:bb:97:33:
f6:50:9b:35:29:7a:fb:28:91:86:5c:81:db:3f:e9:3d:66:4b:
b1:c7:6a:9b:09:59:4b:8c:d3:c5:e7:9a:92:af:b9:27:01:a0:
c8:f1:37:22:62:8f:ad:28:b0:d8:3f:e5:c1:b9:d0:d5:48:1f:
cb:b8:b2:43:5e:f4:93:80:cc:f8:6d:b9:6a:1b:eb:e0:fc:b3:
1d:fb:d9:b6:a8:f5:ef:80:ec:8b:02:da:af:89:e5:71:fb:33:
03:3e:f0:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjDbfggzktuaixon6UXvCxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwNjE2MDg1OTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODg3MDdhYjRiNmU5MmRjY2Y5NTRlMTIzMzZkY2Y2NTAyMDZhMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArndGh4ReutkGE0TB/x/a+iKn/Rlw
TeUhJml4jnSZfdLdPt70V2jNYJsRewOJTMyptAHAFmQOTm5qtAB9XNAeu+f75Ry0
vX/J/6+Bk2TNfZinqL9YTRr/wCVTflvkW/pqW+V6qQxRSOLOJbie0lJ2R3fM/Iy+
9xa8GEtZccwyrMCL6ZIrXqQJ9tUbnsSVk/7OJSPZslrXF9gYXZxuI8mLkPL4xtCP
QoIiM1PYoVUAp3bZMv/1l7rr7TBpWmOmyHF/wFydXI30OhGFO50TbBo37RVsxvjF
Q+UtMM4ofLWbCTDAcu2SoeRGs0P7XZBP4f/MjBuXBQnKFWL909k5uwuvTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOiHB6tLbpLcz5VOEjNtz2UCBqMQMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvNkljSHEwdHVrdHpQbFU0U00yM1BaUUlHb3hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdBoMA0G
CSqGSIb3DQEBCwUAA4IBAQDR2eYXUjii27wOWqwvkhtH3vgqwA4eNaWHN0Zyko/s
W5jmfZtVYuIVYikTxVIawx3QSPnIsZURHUVYWNzPz8Nza3BhOqnYXReC7oO1bch+
MMD0zIQMtZiucA36ygnt+DwZDui995y6IYrMhy15c10taojHkirWuOgTAuwXbagw
J/Ais6GaPAY08eAelBSNsiakJ3vDhPtMaAmwP13sGh+7lzP2UJs1KXr7KJGGXIHb
P+k9Zkuxx2qbCVlLjNPF55qSr7knAaDI8TciYo+tKLDYP+XBudDVSB/LuLJDXvST
gMz4bblqG+vg/LMd+9m2qPXvgOyLAtqvieVx+zMDPvDN
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org