Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/6ID2Zh0LFmFvsfyd8Cnidp8STO4.roa
File: 6ID2Zh0LFmFvsfyd8Cnidp8STO4.roa (raw, json)
Hash identifier: Uz19XyFiFGyxffkT9A2n57b/tABgGgWpxMk5a7UtHkw=
Subject key identifier: E8:80:F6:66:1D:0B:16:61:6F:B1:FC:9D:F0:29:E2:76:9F:12:4C:EE
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A98290B4353A007D779C6F516810A1D0B
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/6ID2Zh0LFmFvsfyd8Cnidp8STO4.roa
Signing time: Fri 15 Sep 2023 09:25:41 +0000
ROA not before: Fri 15 Sep 2023 09:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199300
IP address blocks: 80.233.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:29:0b:43:53:a0:07:d7:79:c6:f5:16:81:0a:1d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 09:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e880f6661d0b16616fb1fc9df029e2769f124cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:a0:b9:8c:47:05:09:d1:fe:61:eb:98:2d:
9e:65:c5:dc:97:92:a6:b0:f4:27:af:52:c6:6f:1d:
ba:54:9b:2e:d3:f9:49:d5:95:cb:55:25:29:90:2f:
45:09:97:cf:2e:9f:8a:64:e5:b5:32:a2:a7:49:36:
74:ce:7e:82:3c:95:48:c8:10:4c:d0:f6:a8:8b:e6:
14:33:0f:62:8e:8c:7d:d0:8e:fa:cb:b2:df:9d:9c:
40:4c:83:71:1e:c6:70:4b:3a:0f:5c:1e:60:62:00:
21:54:3a:a2:64:a7:6f:f7:2f:f8:17:13:74:a6:55:
bf:75:95:0c:77:25:0a:43:8b:7f:ec:86:04:71:35:
79:d7:2b:8c:d3:b8:dd:df:8f:19:90:e7:b8:fd:89:
4b:5b:8a:96:f4:f9:72:27:a8:2a:2f:13:3b:c8:2f:
64:02:51:3e:0e:3a:b6:1b:98:8a:ad:ae:2f:75:09:
0f:91:27:13:b6:ef:e3:5d:1d:6a:21:e4:fc:6d:51:
f9:d9:bb:9c:1d:9d:88:6c:2e:a3:cd:cb:54:03:d1:
fb:66:71:98:35:5a:8d:2d:bc:40:c8:76:8d:86:8f:
65:78:91:99:e1:29:5f:df:e0:48:34:8a:95:62:78:
56:6d:67:be:ec:ae:61:c2:f6:30:b3:00:af:d3:d4:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:80:F6:66:1D:0B:16:61:6F:B1:FC:9D:F0:29:E2:76:9F:12:4C:EE
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/6ID2Zh0LFmFvsfyd8Cnidp8STO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e8:18:20:13:fc:4f:6f:76:62:5d:9e:46:0e:09:21:5c:0a:
ae:cd:f1:0c:67:4e:84:64:37:ee:a9:df:e5:f0:e6:94:96:2c:
7f:75:51:62:00:aa:1e:02:5b:e6:3a:4c:bf:e7:bc:c9:2d:d1:
41:0b:c0:88:2e:33:21:b8:7b:88:24:3d:2b:9b:47:c7:4c:b0:
89:67:c4:09:79:55:d9:b3:9c:80:84:5b:3b:d1:88:6d:30:e6:
6a:e3:9a:92:92:f2:47:26:0d:52:67:3e:30:9f:57:39:77:71:
10:25:57:94:bd:b7:3d:22:4f:02:99:1f:73:18:af:b2:b7:32:
4f:53:54:b0:4b:89:05:da:28:c4:9f:90:56:6d:13:f0:f6:d1:
5f:e0:38:fe:45:51:56:35:e1:46:14:00:04:d3:04:e8:0b:b7:
b1:9a:21:7f:9a:9d:07:d9:dc:15:3c:f9:77:d3:49:c1:22:3c:
60:89:a2:67:c2:56:8e:0e:28:25:fe:e7:75:34:47:e7:0e:c6:
02:d6:83:80:e0:aa:c6:ee:35:ec:c5:94:af:40:1d:12:ae:99:
48:74:57:22:90:c9:53:22:91:25:c8:1b:91:63:85:87:53:99:
08:3e:08:c1:5f:20:f7:f0:43:0b:20:5e:c5:f3:fb:1d:8c:01:
a5:cb:1e:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqYKQtDU6AH13nG9RaBCh0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjMwOTE1MDkyNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODgwZjY2NjFkMGIxNjYxNmZiMWZjOWRmMDI5ZTI3NjlmMTI0Y2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVSguYxHBQnR/mHrmC2eZcXcl5Km
sPQnr1LGbx26VJsu0/lJ1ZXLVSUpkC9FCZfPLp+KZOW1MqKnSTZ0zn6CPJVIyBBM
0Paoi+YUMw9ijox90I76y7LfnZxATINxHsZwSzoPXB5gYgAhVDqiZKdv9y/4FxN0
plW/dZUMdyUKQ4t/7IYEcTV51yuM07jd348ZkOe4/YlLW4qW9PlyJ6gqLxM7yC9k
AlE+Djq2G5iKra4vdQkPkScTtu/jXR1qIeT8bVH52bucHZ2IbC6jzctUA9H7ZnGY
NVqNLbxAyHaNho9leJGZ4Slf3+BINIqVYnhWbWe+7K5hwvYwswCv09SWwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOiA9mYdCxZhb7H8nfAp4nafEkzuMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvNklEMlpoMExGbUZ2c2Z5ZDhDbmlkcDhTVE80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOmZMA0G
CSqGSIb3DQEBCwUAA4IBAQA+6BggE/xPb3ZiXZ5GDgkhXAquzfEMZ06EZDfuqd/l
8OaUlix/dVFiAKoeAlvmOky/57zJLdFBC8CILjMhuHuIJD0rm0fHTLCJZ8QJeVXZ
s5yAhFs70YhtMOZq45qSkvJHJg1SZz4wn1c5d3EQJVeUvbc9Ik8CmR9zGK+ytzJP
U1SwS4kF2ijEn5BWbRPw9tFf4Dj+RVFWNeFGFAAE0wToC7exmiF/mp0H2dwVPPl3
00nBIjxgiaJnwlaODigl/ud1NEfnDsYC1oOA4KrG7jXsxZSvQB0SrplIdFcikMlT
IpElyBuRY4WHU5kIPgjBXyD38EMLIF7F8/sdjAGlyx7E
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:24 2024 by rpki-client on console-fra.rpki-client.org