Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/Cx6hOJzpOr2q3Ueb0W4vSC1IsYk.roa
File: Cx6hOJzpOr2q3Ueb0W4vSC1IsYk.roa (raw, json)
Hash identifier: NeCLWyuTvCfnRCypndtUSkhbtsNjcbvz16JYWwE7F0g=
Subject key identifier: 0B:1E:A1:38:9C:E9:3A:BD:AA:DD:47:9B:D1:6E:2F:48:2D:48:B1:89
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 018570B075CC827D90A45490AAD8DDF1DBD5
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/Cx6hOJzpOr2q3Ueb0W4vSC1IsYk.roa
Signing time: Mon 02 Jan 2023 04:14:50 +0000
ROA not before: Mon 02 Jan 2023 04:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57136
IP address blocks: 91.212.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:75:cc:82:7d:90:a4:54:90:aa:d8:dd:f1:db:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Jan 2 04:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b1ea1389ce93abdaadd479bd16e2f482d48b189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:95:f1:29:72:83:ad:82:41:32:c7:67:0b:
51:32:14:87:cf:ef:08:98:a9:17:23:6a:ed:59:bd:
ea:fa:9d:54:41:14:bc:0a:b5:03:dd:c9:61:0d:d8:
ff:9e:f9:66:d1:bc:6d:60:e9:23:b4:84:17:1f:6a:
7b:cc:b5:3d:3e:5c:ec:34:3a:92:28:c2:54:e8:38:
01:fc:d2:f8:17:eb:56:02:5b:64:ba:bc:49:f4:e0:
e3:04:45:42:4e:c1:fd:5f:f9:ab:96:cf:a3:b8:af:
49:9e:65:3c:54:73:c3:3c:d0:1c:b1:2a:30:80:f8:
d8:40:ae:12:a5:5c:df:6c:6d:31:16:d0:b3:93:37:
0d:ce:57:ab:6c:b3:2f:c0:b9:78:fb:a9:d6:3d:b1:
d2:3a:59:a5:5f:d5:14:13:90:33:9f:92:dc:fc:4e:
a7:b2:91:75:db:25:1d:59:99:26:14:2c:17:f2:9b:
5b:aa:1e:cc:88:5d:ae:82:18:4a:55:8f:93:8e:3d:
fc:eb:ae:81:59:13:df:5c:ae:f1:a2:a2:c9:08:8e:
e5:a3:13:c0:4f:9c:05:24:f1:f7:3d:2f:be:62:c6:
5c:f6:b3:b8:7a:90:f1:63:e8:ff:1d:e0:e8:c4:7d:
1b:47:23:52:69:ee:df:07:f1:84:c6:e5:cb:d3:38:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1E:A1:38:9C:E9:3A:BD:AA:DD:47:9B:D1:6E:2F:48:2D:48:B1:89
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/Cx6hOJzpOr2q3Ueb0W4vSC1IsYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.192.0/24
Signature Algorithm: sha256WithRSAEncryption
45:20:49:a5:7f:bb:fb:ce:81:36:32:41:ae:15:0d:3e:4a:91:
20:75:38:f0:5b:36:43:23:96:32:2d:7c:d3:fa:a6:e3:ae:ed:
bf:2d:21:56:43:f6:52:1e:16:7e:4c:cb:17:08:b3:17:3a:22:
a2:1e:58:d9:3b:65:3b:af:3d:8d:3a:d2:17:8b:04:51:40:f5:
cd:22:e8:ca:45:a3:df:02:8a:13:95:3a:69:27:0a:fc:da:f9:
2b:fb:a0:a1:f3:e2:f6:c1:97:65:58:b4:d7:c0:47:04:a8:cd:
ef:01:a4:10:26:2a:b6:24:07:7e:50:03:56:f7:88:d9:82:0a:
a8:13:15:c8:d4:92:aa:15:2b:45:df:1c:18:88:a7:98:b5:eb:
71:5f:42:ac:3f:3e:32:8e:e1:bc:fc:67:1d:15:c8:93:44:9f:
b7:61:15:e9:26:50:b3:fd:39:16:07:43:7f:7b:53:3b:f8:ae:
38:2b:7a:60:0e:5b:64:e3:73:8b:b0:8f:0a:b7:f5:6d:7c:2a:
06:83:09:94:c0:8c:f9:4e:17:63:3b:4d:ba:76:30:46:9e:b5:
74:c7:e0:2f:da:b4:9a:35:75:96:07:90:9b:6b:08:03:51:a6:
20:3c:14:f2:3a:f2:85:7e:d6:34:9f:12:5a:6e:e1:72:f0:95:
37:b0:a4:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwsHXMgn2QpFSQqtjd8dvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiY2JkYjZmZDM5ZTc2ZjAwNDg0MDEyZTEzMTQ2YjIxODc1
NWMzZmIwHhcNMjMwMTAyMDQxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjFlYTEzODljZTkzYWJkYWFkZDQ3OWJkMTZlMmY0ODJkNDhiMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxCV8Slyg62CQTLHZwtRMhSHz+8I
mKkXI2rtWb3q+p1UQRS8CrUD3clhDdj/nvlm0bxtYOkjtIQXH2p7zLU9PlzsNDqS
KMJU6DgB/NL4F+tWAltkurxJ9ODjBEVCTsH9X/mrls+juK9JnmU8VHPDPNAcsSow
gPjYQK4SpVzfbG0xFtCzkzcNzlerbLMvwLl4+6nWPbHSOlmlX9UUE5Azn5Lc/E6n
spF12yUdWZkmFCwX8ptbqh7MiF2ughhKVY+Tjj38666BWRPfXK7xoqLJCI7loxPA
T5wFJPH3PS++YsZc9rO4epDxY+j/HeDoxH0bRyNSae7fB/GExuXL0zgZ3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAseoTic6Tq9qt1Hm9FuL0gtSLGJMB8GA1UdIwQY
MBaAFGvL22/TnnbwBIQBLhMUayGHVcP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTIt
YzlkYTAzMGFmMzI2LzEvQ3g2aE9KenBPcjJxM1VlYjBXNHZTQzFJc1lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTItYzlkYTAzMGFmMzI2
LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9TAMA0G
CSqGSIb3DQEBCwUAA4IBAQBFIEmlf7v7zoE2MkGuFQ0+SpEgdTjwWzZDI5YyLXzT
+qbjru2/LSFWQ/ZSHhZ+TMsXCLMXOiKiHljZO2U7rz2NOtIXiwRRQPXNIujKRaPf
AooTlTppJwr82vkr+6Ch8+L2wZdlWLTXwEcEqM3vAaQQJiq2JAd+UANW94jZggqo
ExXI1JKqFStF3xwYiKeYtetxX0KsPz4yjuG8/GcdFciTRJ+3YRXpJlCz/TkWB0N/
e1M7+K44K3pgDltk43OLsI8Kt/VtfCoGgwmUwIz5ThdjO026djBGnrV0x+Av2rSa
NXWWB5CbawgDUaYgPBTyOvKFftY0nxJabuFy8JU3sKR0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:21 2024 by rpki-client on console-ams.rpki-client.org