Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/6RLEKRbi35u_kSDtKXcS0B0n6mI.roa
File: 6RLEKRbi35u_kSDtKXcS0B0n6mI.roa (raw, json)
Hash identifier: cZrtg3q0MXbiG3v3B4DbgIpCDvIVaU1C7EEKEr1mgeI=
Subject key identifier: E9:12:C4:29:16:E2:DF:9B:BF:91:20:ED:29:77:12:D0:1D:27:EA:62
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 018BD37C404DFCCBCDC314F7FF9D6CDD69DB
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/6RLEKRbi35u_kSDtKXcS0B0n6mI.roa
Signing time: Wed 15 Nov 2023 14:56:57 +0000
ROA not before: Wed 15 Nov 2023 14:56:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.3.171.0/24 maxlen: 24
188.244.127.0/24 maxlen: 24
80.71.151.0/24 maxlen: 24
5.172.176.0/24 maxlen: 24
89.107.8.0/24 maxlen: 24
185.235.224.0/24 maxlen: 24
146.19.121.0/24 maxlen: 24
91.247.191.0/24 maxlen: 24
193.201.13.0/24 maxlen: 24
185.249.55.0/24 maxlen: 24
62.204.59.0/24 maxlen: 24
195.225.97.0/24 maxlen: 24
193.163.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:7c:40:4d:fc:cb:cd:c3:14:f7:ff:9d:6c:dd:69:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Nov 15 14:56:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e912c42916e2df9bbf9120ed297712d01d27ea62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:43:6c:44:c2:cb:0e:ab:40:2e:38:b3:a3:
2e:c1:89:82:cc:03:a8:06:ca:65:26:2c:17:a1:06:
d9:c4:a5:86:a3:6a:11:44:44:b3:80:da:11:dd:29:
68:3f:8d:6f:8a:19:24:83:ee:ec:11:b3:f7:61:a3:
1d:36:6a:08:41:c6:a7:91:df:d9:09:5e:f9:9c:fc:
c1:8b:f0:ba:a4:da:36:66:54:74:07:db:f6:2c:49:
70:38:3a:74:97:2e:ed:df:11:e7:3d:59:e9:69:51:
87:18:fe:a5:8b:2b:95:45:ca:49:0e:1b:4f:b3:28:
29:6d:a7:35:83:84:85:c9:3d:cd:21:0a:a9:71:3d:
1d:4c:5b:af:fe:2a:50:a0:c5:eb:8a:00:dd:d4:0e:
b1:d9:fd:ef:33:f6:0a:a1:32:41:ba:86:9f:d5:bb:
67:9f:10:29:ac:75:53:04:b0:a5:62:49:45:50:d7:
89:b5:42:77:1f:b3:ad:53:2e:63:06:77:d7:fd:b9:
eb:9c:3f:c3:6d:45:19:c2:1e:fa:0a:6a:59:0e:bd:
92:0b:14:c1:45:1d:aa:a5:55:08:bd:b0:6c:e1:55:
c2:96:de:d5:a2:27:7b:8c:33:06:10:14:7d:22:02:
f6:ee:ab:85:6f:ed:9d:8d:ab:4b:69:c6:0d:e2:3f:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:12:C4:29:16:E2:DF:9B:BF:91:20:ED:29:77:12:D0:1D:27:EA:62
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/6RLEKRbi35u_kSDtKXcS0B0n6mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.176.0/24
62.204.59.0/24
80.71.151.0/24
89.107.8.0/24
91.247.191.0/24
146.19.121.0/24
185.235.224.0/24
185.249.55.0/24
188.244.127.0/24
193.3.171.0/24
193.163.23.0/24
193.201.13.0/24
195.225.97.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e3:3a:f2:e2:8f:dc:34:b0:ad:1e:42:5f:29:22:9c:6b:dc:
2b:91:60:58:cc:34:53:cb:ef:19:8f:3d:1c:10:6f:0c:69:26:
4c:11:d8:ea:eb:8a:05:86:e4:d7:ea:a5:3f:a9:61:6f:9b:47:
3a:c9:95:0c:be:e7:07:ae:13:96:c0:21:ab:e4:a0:b9:0d:3a:
13:82:d6:36:4c:a2:c9:b4:cb:c9:ca:23:6c:41:50:1a:60:27:
35:7f:e2:f6:67:5a:b3:c5:19:64:9d:80:07:10:ee:74:e0:d6:
86:b3:27:b7:dd:33:bb:d0:d8:d7:4f:32:30:a0:7c:8f:78:1d:
cd:c7:82:aa:9c:12:bd:e6:88:20:14:b7:b2:8e:7c:bb:28:7e:
1f:4e:04:05:7a:ff:6c:6a:c2:c4:08:fe:58:e5:e9:f4:af:8e:
5c:eb:d0:f9:ea:83:1a:4a:28:cf:9b:96:21:55:5e:29:e4:e4:
87:f4:46:d2:cf:d4:19:9b:75:51:dc:2d:e5:15:d5:f7:d0:0e:
53:b5:e6:08:43:1a:ed:6f:06:7d:10:86:92:bb:fa:a1:95:4e:
8f:ed:81:05:75:b4:7d:51:41:b7:a6:68:fe:37:06:43:27:e1:
1c:36:31:9c:47:92:f0:7a:11:82:6b:97:39:59:92:ac:b6:ca:
e0:56:c1:69
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAYvTfEBN/MvNwxT3/51s3WnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjMxMTE1MTQ1NjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTEyYzQyOTE2ZTJkZjliYmY5MTIwZWQyOTc3MTJkMDFkMjdlYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bVDbETCyw6rQC44s6MuwYmCzAOo
BsplJiwXoQbZxKWGo2oRRESzgNoR3SloP41vihkkg+7sEbP3YaMdNmoIQcankd/Z
CV75nPzBi/C6pNo2ZlR0B9v2LElwODp0ly7t3xHnPVnpaVGHGP6liyuVRcpJDhtP
sygpbac1g4SFyT3NIQqpcT0dTFuv/ipQoMXrigDd1A6x2f3vM/YKoTJBuoaf1btn
nxAprHVTBLClYklFUNeJtUJ3H7OtUy5jBnfX/bnrnD/DbUUZwh76CmpZDr2SCxTB
RR2qpVUIvbBs4VXClt7Void7jDMGEBR9IgL27quFb+2djatLacYN4j+fJwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFOkSxCkW4t+bv5Eg7Sl3EtAdJ+piMB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvNlJMRUtSYmkzNXVfa1NEdEtYY1MwQjBuNm1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQABaywAwQA
Psw7AwQAUEeXAwQAWWsIAwQAW/e/AwQAkhN5AwQAuevgAwQAufk3AwQAvPR/AwQA
wQOrAwQAwaMXAwQAwckNAwQAw+FhMA0GCSqGSIb3DQEBCwUAA4IBAQBk4zry4o/c
NLCtHkJfKSKca9wrkWBYzDRTy+8Zjz0cEG8MaSZMEdjq64oFhuTX6qU/qWFvm0c6
yZUMvucHrhOWwCGr5KC5DToTgtY2TKLJtMvJyiNsQVAaYCc1f+L2Z1qzxRlknYAH
EO504NaGsye33TO70NjXTzIwoHyPeB3Nx4KqnBK95oggFLeyjny7KH4fTgQFev9s
asLECP5Y5en0r45c69D56oMaSijPm5YhVV4p5OSH9EbSz9QZm3VR3C3lFdX30A5T
teYIQxrtbwZ9EIaSu/qhlU6P7YEFdbR9UUG3pmj+NwZDJ+EcNjGcR5LwehGCa5c5
WZKstsrgVsFp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org