Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/d6DJlpx4wuWfe_r_xNr33DFua5g.roa
File: d6DJlpx4wuWfe_r_xNr33DFua5g.roa (raw, json)
Hash identifier: 3jbA7WgdRTH5TSPCoFJGaGI6RCZZyjIXStewRQqxMQ4=
Subject key identifier: 77:A0:C9:96:9C:78:C2:E5:9F:7B:FA:FF:C4:DA:F7:DC:31:6E:6B:98
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B4DC21F4EAFE6D953DD86FC3C9261
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/d6DJlpx4wuWfe_r_xNr33DFua5g.roa
Signing time: Tue 02 Jan 2024 12:34:44 +0000
ROA not before: Tue 02 Jan 2024 12:34:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 185.185.251.0/24 maxlen: 24
45.12.161.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:4d:c2:1f:4e:af:e6:d9:53:dd:86:fc:3c:92:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77a0c9969c78c2e59f7bfaffc4daf7dc316e6b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:76:6f:24:cb:b6:d2:61:a0:d3:df:64:bc:c6:
2f:33:1b:6a:cd:71:e0:1e:04:68:f5:bf:94:0c:e3:
a0:9e:c0:15:67:d5:e3:ba:8a:fb:e4:42:f7:24:54:
70:9a:1c:67:4b:7a:72:2e:8f:30:44:6d:04:4d:de:
f8:08:f2:4c:03:7c:3e:ef:b6:76:00:7b:a8:99:6a:
4e:6c:21:7d:4a:c2:94:e0:0c:bc:be:00:7a:c3:aa:
3f:cb:00:1a:92:76:a9:e3:ca:e0:32:dc:04:01:64:
45:5e:6d:82:7f:5a:74:e7:bc:4b:5b:45:ea:34:20:
ac:12:2d:f7:03:8c:7a:5d:60:8e:44:9e:6a:4c:f3:
d5:dc:a4:82:db:64:1f:9b:53:d5:fe:ed:98:b3:81:
0e:0c:8f:fa:e8:85:6d:c7:58:f8:79:6a:55:54:f1:
d6:88:5c:8b:02:f5:3e:5f:22:03:6a:7f:39:5d:26:
0e:0b:77:ee:2f:47:93:00:9f:b7:fe:77:1e:bd:cc:
95:1f:85:b4:af:74:27:d0:42:eb:74:3a:78:99:03:
7b:bc:c9:d8:0f:f2:19:0d:37:2e:03:b9:61:17:d6:
c6:ca:45:36:06:4b:11:40:c1:a9:29:a2:f3:8d:d6:
56:f0:a2:11:8f:8e:42:5a:21:c8:13:ea:4b:85:22:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A0:C9:96:9C:78:C2:E5:9F:7B:FA:FF:C4:DA:F7:DC:31:6E:6B:98
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/d6DJlpx4wuWfe_r_xNr33DFua5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.161.0/24
185.185.251.0/24
Signature Algorithm: sha256WithRSAEncryption
40:80:22:13:a4:57:5c:2c:7f:8a:57:cc:86:7e:7a:63:30:d5:
50:7b:34:9f:17:85:91:ad:26:1c:6d:1a:17:b5:08:54:26:d6:
2f:7b:af:75:a2:f2:ef:e3:aa:be:3d:77:8e:1a:75:d6:61:13:
20:ce:f4:b5:72:2e:aa:53:c5:43:f5:2c:24:e0:3d:73:20:8e:
91:35:a8:6a:68:87:51:de:38:dd:e6:01:b3:e3:ae:f2:2c:50:
df:bd:58:4f:6d:84:28:fd:57:60:9d:60:52:df:60:6f:14:1b:
79:b8:3a:47:fc:b4:60:9c:d1:85:92:d8:22:b3:1f:95:3c:fd:
a2:5a:fb:fa:a9:04:20:3f:d4:90:88:f2:27:7f:45:c3:f1:5e:
bf:0b:e3:99:f4:5b:52:89:4b:fb:8a:d2:de:f0:51:6b:59:89:
de:62:ee:57:b1:21:2b:54:29:44:29:98:77:e2:ba:7a:6c:dd:
76:e0:2d:b6:c3:e9:74:c4:d7:46:5d:b6:71:2d:19:01:30:13:
bc:c5:e7:17:f8:89:2b:8a:52:2b:6b:39:d7:3d:db:94:74:c6:
d8:d1:ed:b5:8b:27:ab:a7:75:dc:0f:88:a4:15:e6:9d:c6:0e:
45:74:fb:8a:a5:85:8f:be:72:42:00:22:04:01:f0:95:f9:80:
1b:e5:e3:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKK03CH06v5tlT3Yb8PJJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjQwMTAyMTIzNDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2EwYzk5NjljNzhjMmU1OWY3YmZhZmZjNGRhZjdkYzMxNmU2Yjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXZvJMu20mGg099kvMYvMxtqzXHg
HgRo9b+UDOOgnsAVZ9Xjuor75EL3JFRwmhxnS3pyLo8wRG0ETd74CPJMA3w+77Z2
AHuomWpObCF9SsKU4Ay8vgB6w6o/ywAaknap48rgMtwEAWRFXm2Cf1p057xLW0Xq
NCCsEi33A4x6XWCORJ5qTPPV3KSC22Qfm1PV/u2Ys4EODI/66IVtx1j4eWpVVPHW
iFyLAvU+XyIDan85XSYOC3fuL0eTAJ+3/ncevcyVH4W0r3Qn0ELrdDp4mQN7vMnY
D/IZDTcuA7lhF9bGykU2BksRQMGpKaLzjdZW8KIRj45CWiHIE+pLhSI6zQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHegyZaceMLln3v6/8Ta99wxbmuYMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvZDZESmxweDR3dVdmZV9yX3hOcjMzREZ1YTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQyhAwQA
ubn7MA0GCSqGSIb3DQEBCwUAA4IBAQBAgCITpFdcLH+KV8yGfnpjMNVQezSfF4WR
rSYcbRoXtQhUJtYve691ovLv46q+PXeOGnXWYRMgzvS1ci6qU8VD9Swk4D1zII6R
NahqaIdR3jjd5gGz467yLFDfvVhPbYQo/VdgnWBS32BvFBt5uDpH/LRgnNGFktgi
sx+VPP2iWvv6qQQgP9SQiPInf0XD8V6/C+OZ9FtSiUv7itLe8FFrWYneYu5XsSEr
VClEKZh34rp6bN124C22w+l0xNdGXbZxLRkBMBO8xecX+IkrilIraznXPduUdMbY
0e21iyerp3XcD4ikFeadxg5FdPuKpYWPvnJCACIEAfCV+YAb5eNW
-----END CERTIFICATE-----
Generated at Fri Jan 5 14:17:38 2024 by rpki-client on console-ams.rpki-client.org