Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/6xx0oqdbJb92LbBgAzS3FuP4cKo.roa
File: 6xx0oqdbJb92LbBgAzS3FuP4cKo.roa (raw, json)
Hash identifier: cMOTt1GUlUb3VJBy6wjGTnUc+NL4A0UmM7MC5UwdB4U=
Subject key identifier: EB:1C:74:A2:A7:5B:25:BF:76:2D:B0:60:03:34:B7:16:E3:F8:70:AA
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246DA23DAC76231352C7B7A411800DC
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/6xx0oqdbJb92LbBgAzS3FuP4cKo.roa
Signing time: Mon 02 Jan 2023 11:38:43 +0000
ROA not before: Mon 02 Jan 2023 11:38:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49773
IP address blocks: 151.237.33.0/24 maxlen: 24
151.237.34.0/23 maxlen: 23
185.242.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 10:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:da:23:da:c7:62:31:35:2c:7b:7a:41:18:00:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb1c74a2a75b25bf762db0600334b716e3f870aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:54:a4:6d:fa:58:20:d0:24:78:e8:fd:4d:
ea:6c:72:3a:e2:f5:eb:e0:1e:52:55:90:65:20:7e:
25:43:13:55:d0:f1:67:eb:f3:ba:f7:e2:d2:9e:b4:
fe:2e:f0:77:47:c3:5a:3f:3a:fa:ea:74:a2:a4:4a:
6a:17:ed:44:b7:52:2d:d0:3c:44:ce:5c:7c:43:84:
fe:87:c7:bc:22:31:e5:17:07:00:df:1e:15:43:45:
c3:5f:18:8e:e5:19:5a:fe:b0:9c:d6:6d:28:77:80:
c4:25:d9:8e:5c:71:06:93:28:e3:6a:35:42:05:98:
c3:f0:7c:cc:30:e9:0d:2d:67:6b:b6:84:51:37:14:
8f:2b:48:d4:20:5f:3b:c1:56:b6:d3:b0:5c:b7:fc:
61:85:8f:92:bc:36:b0:5b:6b:9a:60:52:4a:65:b2:
15:60:76:97:68:df:a1:57:ad:46:e1:4f:c8:7b:11:
d8:0d:bc:e5:99:8b:42:00:22:12:ed:ee:5a:44:e0:
66:78:a7:8d:28:50:57:be:36:b5:cd:f2:6f:09:d0:
9b:6f:b2:b5:08:6e:12:53:9d:99:a8:d8:8a:b2:5b:
53:65:d8:97:87:8f:f8:2a:c0:4e:33:f5:f2:64:db:
7c:fb:9f:96:6e:d1:2b:d4:8b:54:17:48:0c:6c:e9:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1C:74:A2:A7:5B:25:BF:76:2D:B0:60:03:34:B7:16:E3:F8:70:AA
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/6xx0oqdbJb92LbBgAzS3FuP4cKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.33.0-151.237.35.255
185.242.170.0/24
Signature Algorithm: sha256WithRSAEncryption
50:10:36:53:40:3f:32:42:34:71:15:26:09:13:73:31:fe:58:
11:4f:c8:e2:c0:7f:60:ba:94:17:a0:ae:27:f0:a5:0d:bd:a7:
1e:b8:75:a1:a1:90:5a:15:70:ca:a9:c2:4b:3f:7b:32:bc:34:
8f:14:af:1d:ae:4b:77:c4:ce:59:3a:fa:af:53:11:b9:c2:e5:
b6:af:71:ad:90:a5:dd:6d:97:b9:5b:e1:cd:03:38:fc:0d:b0:
77:f9:fc:a5:d6:b8:52:49:b4:e1:1c:ac:e4:c0:e3:95:8d:bd:
3e:98:4c:f2:12:f4:40:ce:44:b2:00:90:9a:c9:75:af:42:cd:
59:61:1d:29:58:40:9f:a5:f5:84:d8:99:78:ef:d8:8a:b0:c0:
99:bb:38:3c:8b:3e:ec:5a:0f:dc:8e:2f:df:ae:a2:a8:71:18:
cd:19:41:81:fa:a2:34:a9:59:86:79:4e:1b:4a:10:e3:bb:c8:
e6:0b:28:58:bb:9f:b0:70:10:50:b1:1b:98:de:df:c9:40:ec:
97:98:c6:19:cb:45:a9:d2:85:e6:4f:1b:f9:84:ab:ac:af:2a:
22:62:d7:6e:be:f8:02:31:2e:21:a6:bc:e9:8f:6c:fc:16:32:
d2:30:ca:83:11:39:f4:e8:d1:42:4f:99:a7:39:60:bd:a1:9c:
f7:f1:37:b3
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVyRtoj2sdiMTUse3pBGADcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwMTAyMTEzODQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjFjNzRhMmE3NWIyNWJmNzYyZGIwNjAwMzM0YjcxNmUzZjg3MGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod9UpG36WCDQJHjo/U3qbHI64vXr
4B5SVZBlIH4lQxNV0PFn6/O69+LSnrT+LvB3R8NaPzr66nSipEpqF+1Et1It0DxE
zlx8Q4T+h8e8IjHlFwcA3x4VQ0XDXxiO5Rla/rCc1m0od4DEJdmOXHEGkyjjajVC
BZjD8HzMMOkNLWdrtoRRNxSPK0jUIF87wVa207Bct/xhhY+SvDawW2uaYFJKZbIV
YHaXaN+hV61G4U/IexHYDbzlmYtCACIS7e5aROBmeKeNKFBXvja1zfJvCdCbb7K1
CG4SU52ZqNiKsltTZdiXh4/4KsBOM/XyZNt8+5+WbtEr1ItUF0gMbOlWFwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOscdKKnWyW/di2wYAM0txbj+HCqMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvNnh4MG9xZGJKYjkyTGJCZ0F6UzNGdVA0Y0tvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACX7SED
BAKX7SADBAC58qowDQYJKoZIhvcNAQELBQADggEBAFAQNlNAPzJCNHEVJgkTczH+
WBFPyOLAf2C6lBegrifwpQ29px64daGhkFoVcMqpwks/ezK8NI8Urx2uS3fEzlk6
+q9TEbnC5bavca2Qpd1tl7lb4c0DOPwNsHf5/KXWuFJJtOEcrOTA45WNvT6YTPIS
9EDORLIAkJrJda9CzVlhHSlYQJ+l9YTYmXjv2IqwwJm7ODyLPuxaD9yOL9+uoqhx
GM0ZQYH6ojSpWYZ5ThtKEOO7yOYLKFi7n7BwEFCxG5je38lA7JeYxhnLRanSheZP
G/mEq6yvKiJi126++AIxLiGmvOmPbPwWMtIwyoMROfTo0UJPmac5YL2hnPfxN7M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org