Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/by-6FYTDEkH95lnGRqhk2VdyRCw.roa
File: by-6FYTDEkH95lnGRqhk2VdyRCw.roa (raw, json)
Hash identifier: 8x5DxzXjZRtO/2/efNXzkfkNMiZyLOGs3XuLs+K/rF8=
Subject key identifier: 6F:2F:BA:15:84:C3:12:41:FD:E6:59:C6:46:A8:64:D9:57:72:44:2C
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018607240A948BAAA41C6361E8D1C76BCF17
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/by-6FYTDEkH95lnGRqhk2VdyRCw.roa
Signing time: Tue 31 Jan 2023 09:24:07 +0000
ROA not before: Tue 31 Jan 2023 09:24:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39378
IP address blocks: 94.247.44.0/24 maxlen: 24
185.90.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:24:0a:94:8b:aa:a4:1c:63:61:e8:d1:c7:6b:cf:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 31 09:24:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f2fba1584c31241fde659c646a864d95772442c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:35:d0:71:e0:7f:cc:78:aa:04:23:4c:36:
9d:5d:76:9c:b8:d8:2d:70:93:92:99:05:78:ab:be:
0f:a4:ea:19:8f:84:1c:3a:1c:40:5b:cd:9e:48:5d:
62:15:56:66:95:72:3a:d1:bb:c0:58:51:44:1f:4c:
25:24:71:5a:9c:cb:8f:76:a1:f6:02:8c:f8:4f:c9:
88:ae:73:55:03:4d:92:f7:86:25:19:b4:08:35:ac:
ad:ff:3b:b1:ae:f4:93:5f:60:20:ea:f2:8b:1b:17:
6f:cf:34:6f:fa:f5:3f:96:fa:7b:68:9e:8a:4c:62:
d4:57:ba:aa:25:a4:10:50:67:77:64:37:d8:5f:fc:
67:6c:5e:b7:24:90:8f:78:fa:a1:23:22:2b:aa:0e:
26:f7:ee:28:d5:9a:47:f6:00:cc:8c:d7:87:4d:2e:
3a:e7:0d:c3:2e:dc:ef:95:9b:dc:c5:5c:b8:11:73:
af:39:c8:23:41:db:9c:cf:1d:1f:0a:96:e3:b7:36:
2f:b4:f5:63:71:02:e8:ca:ee:dd:eb:83:87:81:d1:
4e:23:74:69:43:52:75:01:fe:42:15:3a:ea:7e:bf:
8c:c2:a7:0c:98:3f:4c:fa:99:27:4a:27:dd:65:cd:
5f:b0:a1:58:fe:27:18:a7:60:17:1e:d7:17:4b:f3:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2F:BA:15:84:C3:12:41:FD:E6:59:C6:46:A8:64:D9:57:72:44:2C
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/by-6FYTDEkH95lnGRqhk2VdyRCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.44.0/24
185.90.162.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5d:82:cd:73:ca:62:9c:e9:9e:1a:cb:12:e4:36:c6:ca:e1:
d4:f9:e8:5a:a8:22:ed:7c:13:ed:8d:b8:d6:10:55:ac:6c:87:
9a:2e:a6:8c:e5:03:5a:85:df:10:ef:f6:4f:b2:ce:ad:1a:36:
53:c5:b3:64:e7:f4:d2:31:65:15:58:f5:29:19:04:67:41:bf:
ae:d8:52:8e:0d:0b:42:20:d7:14:ab:75:e9:d8:4c:7a:67:7a:
cd:0c:53:fc:2e:34:e8:b1:45:2b:5b:a6:ed:97:70:3e:cb:3a:
62:f1:0a:c6:e2:65:ba:64:c1:01:3c:ed:0b:ce:65:2b:a6:28:
e3:03:62:3e:d9:5f:2f:3a:da:79:16:62:ea:58:08:49:76:8e:
8e:15:51:a5:56:d0:60:5d:78:b5:59:15:6c:70:96:eb:f8:dd:
fc:5d:bd:de:64:09:2b:9a:8d:cc:f2:6e:f3:3e:16:f0:0a:7a:
45:43:a1:b0:af:14:ab:6a:a3:2f:5b:c5:34:fc:30:ae:2d:0f:
89:21:c6:91:d0:20:79:58:81:dc:b2:1e:1e:3c:fa:b4:50:b6:
b5:ad:5e:cf:92:b4:c2:42:e9:84:b9:8e:dd:2a:87:e2:f4:51:
bd:f6:47:2f:7b:f0:a4:85:e0:14:25:21:e0:ab:b1:eb:d9:30:
8c:e4:9e:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYYHJAqUi6qkHGNh6NHHa88XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjMwMTMxMDkyNDA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjJmYmExNTg0YzMxMjQxZmRlNjU5YzY0NmE4NjRkOTU3NzI0NDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6E10HHgf8x4qgQjTDadXXacuNgt
cJOSmQV4q74PpOoZj4QcOhxAW82eSF1iFVZmlXI60bvAWFFEH0wlJHFanMuPdqH2
Aoz4T8mIrnNVA02S94YlGbQINayt/zuxrvSTX2Ag6vKLGxdvzzRv+vU/lvp7aJ6K
TGLUV7qqJaQQUGd3ZDfYX/xnbF63JJCPePqhIyIrqg4m9+4o1ZpH9gDMjNeHTS46
5w3DLtzvlZvcxVy4EXOvOcgjQduczx0fCpbjtzYvtPVjcQLoyu7d64OHgdFOI3Rp
Q1J1Af5CFTrqfr+MwqcMmD9M+pknSifdZc1fsKFY/icYp2AXHtcXS/PAUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG8vuhWEwxJB/eZZxkaoZNlXckQsMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvYnktNkZZVERFa0g5NWxuR1JxaGsyVmR5UkN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXvcsAwQA
uVqiMA0GCSqGSIb3DQEBCwUAA4IBAQA4XYLNc8pinOmeGssS5DbGyuHU+ehaqCLt
fBPtjbjWEFWsbIeaLqaM5QNahd8Q7/ZPss6tGjZTxbNk5/TSMWUVWPUpGQRnQb+u
2FKODQtCINcUq3Xp2Ex6Z3rNDFP8LjTosUUrW6btl3A+yzpi8QrG4mW6ZMEBPO0L
zmUrpijjA2I+2V8vOtp5FmLqWAhJdo6OFVGlVtBgXXi1WRVscJbr+N38Xb3eZAkr
mo3M8m7zPhbwCnpFQ6GwrxSraqMvW8U0/DCuLQ+JIcaR0CB5WIHcsh4ePPq0ULa1
rV7PkrTCQumEuY7dKofi9FG99kcve/CkheAUJSHgq7Hr2TCM5J6+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:31 2024 by rpki-client on console-ams.rpki-client.org