Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/6mb3JXg6vjDHP18lXd5C07L7jEU.roa
File: 6mb3JXg6vjDHP18lXd5C07L7jEU.roa (raw, json)
Hash identifier: lGjqu5+5VcoS1tAFNrKmIFUHrRZBTBuzS9R09Xkf7vw=
Subject key identifier: EA:66:F7:25:78:3A:BE:30:C7:3F:5F:25:5D:DE:42:D3:B2:FB:8C:45
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 01856BF7EDC0B2D4B58C0664815AF2169CF7
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/6mb3JXg6vjDHP18lXd5C07L7jEU.roa
Signing time: Sun 01 Jan 2023 06:14:48 +0000
ROA not before: Sun 01 Jan 2023 06:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208871
IP address blocks: 185.156.26.0/24 maxlen: 24
185.156.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:ed:c0:b2:d4:b5:8c:06:64:81:5a:f2:16:9c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Jan 1 06:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea66f725783abe30c73f5f255dde42d3b2fb8c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5c:74:5e:dc:24:39:02:f0:2c:fb:25:f5:15:
3a:7f:1d:05:c7:c5:21:50:aa:0f:90:5f:7e:bb:38:
e9:58:62:25:38:07:3b:99:6d:c4:3a:84:68:c7:e6:
b0:03:58:89:4c:40:c6:0d:9e:da:66:4e:6e:46:b0:
89:e0:7c:60:b0:d5:6d:69:13:79:71:00:b0:25:a0:
ec:fb:a7:fb:68:95:4a:84:e9:14:99:0e:b8:72:63:
56:4c:4f:be:84:c4:f8:0c:8d:df:d6:b8:31:c5:09:
da:6c:2e:82:ee:cd:df:18:7f:cc:93:4a:36:84:82:
08:b5:6e:f8:9c:9e:84:a3:94:34:17:59:50:cd:ee:
a0:37:41:80:c6:53:05:25:be:da:6b:ad:ff:d4:9f:
90:61:f6:52:75:e7:fe:65:13:11:e3:83:24:a9:68:
34:41:a6:fb:f1:ba:a1:04:b4:7b:84:b1:92:54:7b:
e6:36:3a:98:ba:3a:f4:a8:a1:ce:6f:6b:f1:9b:86:
10:51:2d:92:e9:97:db:3e:64:e1:c4:12:cb:bb:b8:
dc:c2:7e:0f:7e:2d:04:94:54:ee:a5:19:9a:38:7c:
2e:40:33:8c:13:5b:cf:e0:cf:60:98:d8:26:1e:59:
d7:9a:35:7c:b8:0d:85:c9:1f:89:a2:5f:0b:f5:07:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:66:F7:25:78:3A:BE:30:C7:3F:5F:25:5D:DE:42:D3:B2:FB:8C:45
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/6mb3JXg6vjDHP18lXd5C07L7jEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.25.0-185.156.26.255
Signature Algorithm: sha256WithRSAEncryption
8e:4c:c7:c2:17:36:20:7c:17:49:ae:1f:12:19:8e:45:e4:cb:
25:9b:77:09:9a:9f:d1:4d:9a:4f:b3:5c:a1:21:bc:5c:9f:f7:
5e:76:27:63:fe:7d:59:15:49:c5:41:b4:c4:92:d6:6a:f4:3d:
98:da:72:19:8a:31:d4:e6:e2:fd:7c:64:42:ef:05:08:4c:b0:
53:99:83:bd:80:f5:b9:ed:6b:f7:63:18:40:d7:7b:c6:88:e7:
25:52:21:e8:85:85:3a:86:aa:dc:9c:b3:5b:57:19:61:53:b3:
df:bd:d7:80:74:1b:6d:45:56:a6:cb:16:6d:13:ac:06:d8:fa:
66:03:51:ab:9b:4f:50:30:cb:7f:0b:07:07:6f:76:28:1c:7a:
5d:20:c9:62:71:ad:78:3c:9a:30:55:2a:aa:cc:02:46:af:e1:
7d:98:1f:ea:a2:4a:6e:7e:b0:0f:25:3d:85:78:aa:ea:c7:ac:
bc:4c:70:10:e6:72:00:24:65:d3:68:3c:68:13:88:c4:50:65:
b2:56:6b:36:41:5c:1f:32:21:61:d1:df:b7:a4:e4:67:8f:46:
92:a3:08:21:f2:a2:f4:5c:a7:88:0d:6e:1b:d8:91:8e:4a:81:
14:8a:3f:ee:42:89:86:09:73:5b:1d:0e:0b:e9:e8:2c:a4:7e:
38:2f:17:77
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVr9+3AstS1jAZkgVryFpz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDU0ZTRhNzg4ZDY5NjdhMmVlZjNhNjY5MjYyMjYyNmY1
NGVmYWQwHhcNMjMwMTAxMDYxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTY2ZjcyNTc4M2FiZTMwYzczZjVmMjU1ZGRlNDJkM2IyZmI4YzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Fx0XtwkOQLwLPsl9RU6fx0Fx8Uh
UKoPkF9+uzjpWGIlOAc7mW3EOoRox+awA1iJTEDGDZ7aZk5uRrCJ4HxgsNVtaRN5
cQCwJaDs+6f7aJVKhOkUmQ64cmNWTE++hMT4DI3f1rgxxQnabC6C7s3fGH/Mk0o2
hIIItW74nJ6Eo5Q0F1lQze6gN0GAxlMFJb7aa63/1J+QYfZSdef+ZRMR44MkqWg0
Qab78bqhBLR7hLGSVHvmNjqYujr0qKHOb2vxm4YQUS2S6ZfbPmThxBLLu7jcwn4P
fi0ElFTupRmaOHwuQDOME1vP4M9gmNgmHlnXmjV8uA2FyR+Jol8L9Qe2TQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOpm9yV4Or4wxz9fJV3eQtOy+4xFMB8GA1UdIwQY
MBaAFCfVTkp4jWlnou7zpmkmImJvVO+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEt
ZTk5YThkYzMwMjU1LzEvNm1iM0pYZzZ2akRIUDE4bFhkNUMwN0w3akVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEtZTk5YThkYzMwMjU1
LzEvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5nBkD
BAC5nBowDQYJKoZIhvcNAQELBQADggEBAI5Mx8IXNiB8F0muHxIZjkXkyyWbdwma
n9FNmk+zXKEhvFyf9152J2P+fVkVScVBtMSS1mr0PZjachmKMdTm4v18ZELvBQhM
sFOZg72A9bnta/djGEDXe8aI5yVSIeiFhTqGqtycs1tXGWFTs9+914B0G21FVqbL
Fm0TrAbY+mYDUaubT1Awy38LBwdvdigcel0gyWJxrXg8mjBVKqrMAkav4X2YH+qi
Sm5+sA8lPYV4qurHrLxMcBDmcgAkZdNoPGgTiMRQZbJWazZBXB8yIWHR37ek5GeP
RpKjCCHyovRcp4gNbhvYkY5KgRSKP+5CiYYJc1sdDgvp6CykfjgvF3c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:17 2024 by rpki-client on console-fra.rpki-client.org