Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/6cnThfM69ckiysLCTNfrbz0Ugfo.roa
File: 6cnThfM69ckiysLCTNfrbz0Ugfo.roa (raw, json)
Hash identifier: kl1CdkH0ZNeEPiMjDZEVr1bduhIy87KggOMGFS7ygqY=
Subject key identifier: E9:C9:D3:85:F3:3A:F5:C9:22:CA:C2:C2:4C:D7:EB:6F:3D:14:81:FA
Certificate issuer: /CN=21ae8e675e2ed20095983cbb72084f9740281b74
Certificate serial: 018C447DE2FBCAAF68EB9C0324609BED93AF
Authority key identifier: 21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/6cnThfM69ckiysLCTNfrbz0Ugfo.roa
Signing time: Thu 07 Dec 2023 13:35:49 +0000
ROA not before: Thu 07 Dec 2023 13:35:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21245
IP address blocks: 91.208.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:7d:e2:fb:ca:af:68:eb:9c:03:24:60:9b:ed:93:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ae8e675e2ed20095983cbb72084f9740281b74
Validity
Not Before: Dec 7 13:35:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c9d385f33af5c922cac2c24cd7eb6f3d1481fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:55:6f:a7:48:a0:cc:8c:b9:15:c4:72:44:70:
ce:76:1e:6d:8f:df:a4:50:e7:65:cd:9d:f2:f4:bb:
21:39:6d:f5:db:7f:65:38:dd:1a:ec:34:6c:27:9c:
a9:47:d4:19:b9:16:16:ea:be:89:f2:5b:b2:23:da:
b1:87:14:8d:29:a5:e9:44:ba:12:24:3d:a1:16:e7:
1b:08:a0:de:7f:25:71:b2:10:48:81:c5:69:74:31:
d6:09:23:0e:77:68:84:71:0e:45:4c:bc:3c:27:0d:
b2:ff:31:35:50:dd:2a:64:72:ca:ff:4c:09:1b:96:
a4:65:31:46:c8:37:9a:b2:d3:70:f7:ee:62:81:2f:
4b:52:27:63:c2:70:9e:fb:28:76:ba:c0:46:db:fc:
60:53:d7:a0:a8:e9:f7:42:6f:29:92:20:be:44:71:
6e:7f:ff:85:a4:3d:11:de:ea:c6:99:00:8b:fa:fb:
85:65:35:0e:b6:04:c6:3a:79:8b:d1:91:01:d8:3c:
61:1c:f1:0a:a0:fa:b9:67:99:41:d9:cd:33:76:c0:
32:32:9f:48:85:ca:2b:c4:1c:fa:69:d8:2e:66:94:
44:95:18:47:c7:4f:c2:73:c3:bf:cc:dc:e4:61:ba:
2c:f1:7d:68:75:61:fb:a1:da:4c:9a:7c:40:dd:73:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C9:D3:85:F3:3A:F5:C9:22:CA:C2:C2:4C:D7:EB:6F:3D:14:81:FA
X509v3 Authority Key Identifier:
keyid:21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/6cnThfM69ckiysLCTNfrbz0Ugfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.32.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b3:62:35:6f:a5:9e:cd:52:89:ee:b5:65:26:b7:b0:75:9c:
fb:b6:d6:77:4c:c3:b4:86:03:88:66:21:65:3f:c3:aa:24:d5:
3d:a2:c2:a8:e5:9d:af:40:20:7d:7c:33:45:6b:0a:45:86:a1:
2a:6c:68:f4:75:d4:74:48:d3:d8:1f:78:2c:bb:6b:63:49:70:
50:5d:bb:6d:33:cf:f7:2c:f2:d4:28:a6:3d:4f:6c:b9:d8:2f:
26:41:42:66:eb:30:37:c4:47:1d:03:10:4e:4e:2f:0b:de:dc:
7a:32:e5:31:78:5d:22:61:a7:83:98:bf:b5:ae:e6:84:2a:23:
b5:6e:4c:98:31:81:06:3c:b5:47:aa:eb:3a:06:5c:1a:ce:53:
a2:18:87:a6:e7:e2:1f:3b:b8:a4:42:bd:2c:2f:03:78:33:cf:
9c:83:a6:22:3d:db:59:b5:b9:6d:7b:49:83:68:54:c7:a6:7f:
f4:56:2b:30:dd:b1:67:9d:4d:49:b0:ca:48:d5:a6:0e:ba:bb:
ab:a7:2d:e5:86:0f:1f:ed:73:fc:97:cb:1b:3a:66:e4:3e:70:
f8:57:52:19:0f:b8:77:b4:41:28:74:b8:f2:a1:95:4e:8f:79:
6d:4d:c9:05:58:a6:13:3f:2e:e4:8c:04:26:42:13:73:19:a4:
1a:37:a2:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxEfeL7yq9o65wDJGCb7ZOvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYWU4ZTY3NWUyZWQyMDA5NTk4M2NiYjcyMDg0Zjk3NDAy
ODFiNzQwHhcNMjMxMjA3MTMzNTQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWM5ZDM4NWYzM2FmNWM5MjJjYWMyYzI0Y2Q3ZWI2ZjNkMTQ4MWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFVvp0igzIy5FcRyRHDOdh5tj9+k
UOdlzZ3y9LshOW31239lON0a7DRsJ5ypR9QZuRYW6r6J8luyI9qxhxSNKaXpRLoS
JD2hFucbCKDefyVxshBIgcVpdDHWCSMOd2iEcQ5FTLw8Jw2y/zE1UN0qZHLK/0wJ
G5akZTFGyDeastNw9+5igS9LUidjwnCe+yh2usBG2/xgU9egqOn3Qm8pkiC+RHFu
f/+FpD0R3urGmQCL+vuFZTUOtgTGOnmL0ZEB2DxhHPEKoPq5Z5lB2c0zdsAyMp9I
hcorxBz6adguZpRElRhHx0/Cc8O/zNzkYbos8X1odWH7odpMmnxA3XPQHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOnJ04XzOvXJIsrCwkzX6289FIH6MB8GA1UdIwQY
MBaAFCGujmdeLtIAlZg8u3IIT5dAKBt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWE2T1oxNHUwZ0NWbUR5N2NnaFBsMEFvRzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85Zjc5ZjktM2ZkZS00NWI1LTkyMDMt
NGY3ZjI2M2NmYWEwLzEvNmNuVGhmTTY5Y2tpeXNMQ1ROZnJiejBVZ2ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85Zjc5ZjktM2ZkZS00NWI1LTkyMDMtNGY3ZjI2M2NmYWEw
LzEvSWE2T1oxNHUwZ0NWbUR5N2NnaFBsMEFvRzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9AgMA0G
CSqGSIb3DQEBCwUAA4IBAQBDs2I1b6WezVKJ7rVlJrewdZz7ttZ3TMO0hgOIZiFl
P8OqJNU9osKo5Z2vQCB9fDNFawpFhqEqbGj0ddR0SNPYH3gsu2tjSXBQXbttM8/3
LPLUKKY9T2y52C8mQUJm6zA3xEcdAxBOTi8L3tx6MuUxeF0iYaeDmL+1ruaEKiO1
bkyYMYEGPLVHqus6BlwazlOiGIem5+IfO7ikQr0sLwN4M8+cg6YiPdtZtblte0mD
aFTHpn/0Visw3bFnnU1JsMpI1aYOururpy3lhg8f7XP8l8sbOmbkPnD4V1IZD7h3
tEEodLjyoZVOj3ltTckFWKYTPy7kjAQmQhNzGaQaN6JM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:07 2024 by rpki-client on console-ams.rpki-client.org