Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/6TJwZK4EwCoQOgEV03dlLT2sqZE.roa
File: 6TJwZK4EwCoQOgEV03dlLT2sqZE.roa (raw, json)
Hash identifier: 9MHGsmBlgZMPL5rKBAitJ9FdJXPJjHWm7elXsiGT4Ys=
Subject key identifier: E9:32:70:64:AE:04:C0:2A:10:3A:01:15:D3:77:65:2D:3D:AC:A9:91
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 01856FF05DC10977C650DECECE714C710C1B
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/6TJwZK4EwCoQOgEV03dlLT2sqZE.roa
Signing time: Mon 02 Jan 2023 00:45:01 +0000
ROA not before: Mon 02 Jan 2023 00:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49305
IP address blocks: 185.228.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:5d:c1:09:77:c6:50:de:ce:ce:71:4c:71:0c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Jan 2 00:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9327064ae04c02a103a0115d377652d3daca991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9e:56:f4:e3:ca:5b:73:cd:b2:24:34:b5:97:
6b:3f:af:45:37:32:86:42:bf:99:6b:3c:13:e1:e9:
36:ec:6c:85:7f:b0:7c:2e:d1:ca:47:59:03:a2:83:
19:35:b4:8e:39:74:2d:91:55:3b:cc:ce:68:90:ae:
58:85:c2:aa:89:7f:f7:4d:df:44:b0:0d:2f:1f:9c:
3a:7b:af:bd:07:b2:25:9b:a4:61:b3:f0:f5:5c:22:
c4:a5:f3:61:02:59:73:4a:ca:9c:35:4a:b6:a8:73:
b2:f9:c0:81:f4:17:fa:a2:f0:dc:f1:2e:ba:f9:34:
81:af:df:65:1b:b1:a2:01:37:8a:57:2b:5f:43:7b:
e3:51:06:8a:92:11:f6:13:9b:f1:81:34:6a:a9:7a:
82:06:35:19:9f:a3:dc:6b:ca:df:3a:fc:b6:70:64:
55:5b:21:5b:97:58:02:2d:9e:ee:8a:52:29:dc:eb:
8e:11:a4:33:a7:6a:40:f9:bf:4b:cb:b7:86:4a:06:
5b:4c:ad:ff:33:e9:99:46:4b:b1:eb:95:00:ed:55:
9a:de:ac:ac:24:a2:ae:bf:19:10:f3:7c:31:2d:3b:
d8:64:d4:51:81:f4:f8:8e:b5:97:d4:96:c1:71:61:
08:09:c5:bd:c2:51:37:a2:47:69:3f:f2:b4:68:04:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:32:70:64:AE:04:C0:2A:10:3A:01:15:D3:77:65:2D:3D:AC:A9:91
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/6TJwZK4EwCoQOgEV03dlLT2sqZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ed:3c:5e:8d:ba:c3:1c:04:1e:43:0e:c2:81:c8:21:86:e9:
b0:5f:6f:d9:64:0c:3e:f6:24:f6:b1:dc:04:a3:8e:39:8d:65:
01:5e:9b:3a:fe:fe:2b:2e:1a:52:b6:2a:6d:3c:7f:46:71:34:
ce:0f:17:ec:5b:f6:11:e2:d6:bf:1e:1f:32:97:29:53:50:04:
6b:1d:02:f3:12:aa:9f:8b:d6:b3:ca:94:f8:83:c6:9b:18:22:
e9:29:62:1b:0a:ec:5d:ac:fa:fd:e9:df:e4:94:61:65:69:11:
46:13:8a:2b:5b:16:79:3f:bd:9e:1b:f3:f1:9a:8e:0d:34:b0:
0a:c8:05:20:65:2f:7d:98:15:72:e0:a9:04:1e:ea:51:23:d6:
90:f1:30:97:ae:92:a4:a4:87:ff:d4:91:38:4b:f0:66:2d:1c:
be:1c:bc:6d:92:9a:33:71:ee:a9:b9:96:0b:be:d3:43:7a:4c:
5b:e0:08:b4:f1:f6:09:70:ec:b8:ac:ec:e2:08:12:3e:3c:04:
08:ee:07:95:21:cc:45:70:ec:19:e8:73:9c:19:e9:90:c9:8b:
d4:ce:89:7d:1e:d1:3a:13:0c:8b:43:93:c7:f2:28:e2:24:fb:
9d:fe:f9:f8:5f:a8:f3:4d:38:85:a8:8a:8f:4b:ee:84:75:be:
ad:21:a8:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv8F3BCXfGUN7OznFMcQwbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNWYyYTkzZGIxMGYyZGQ1ZjZhNTViYjJhNDQwZjY3NDg2
Y2QxYTMwHhcNMjMwMTAyMDA0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTMyNzA2NGFlMDRjMDJhMTAzYTAxMTVkMzc3NjUyZDNkYWNhOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg55W9OPKW3PNsiQ0tZdrP69FNzKG
Qr+ZazwT4ek27GyFf7B8LtHKR1kDooMZNbSOOXQtkVU7zM5okK5YhcKqiX/3Td9E
sA0vH5w6e6+9B7Ilm6Rhs/D1XCLEpfNhAllzSsqcNUq2qHOy+cCB9Bf6ovDc8S66
+TSBr99lG7GiATeKVytfQ3vjUQaKkhH2E5vxgTRqqXqCBjUZn6Pca8rfOvy2cGRV
WyFbl1gCLZ7uilIp3OuOEaQzp2pA+b9Ly7eGSgZbTK3/M+mZRkux65UA7VWa3qys
JKKuvxkQ83wxLTvYZNRRgfT4jrWX1JbBcWEICcW9wlE3okdpP/K0aAQUUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOkycGSuBMAqEDoBFdN3ZS09rKmRMB8GA1UdIwQY
MBaAFAJfKpPbEPLdX2pVuypED2dIbNGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYt
MmVjZGExMWRlMTUzLzEvNlRKd1pLNEV3Q29RT2dFVjAzZGxMVDJzcVpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYtMmVjZGExMWRlMTUz
LzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueT7MA0G
CSqGSIb3DQEBCwUAA4IBAQAq7TxejbrDHAQeQw7CgcghhumwX2/ZZAw+9iT2sdwE
o445jWUBXps6/v4rLhpStiptPH9GcTTODxfsW/YR4ta/Hh8ylylTUARrHQLzEqqf
i9azypT4g8abGCLpKWIbCuxdrPr96d/klGFlaRFGE4orWxZ5P72eG/Pxmo4NNLAK
yAUgZS99mBVy4KkEHupRI9aQ8TCXrpKkpIf/1JE4S/BmLRy+HLxtkpozce6puZYL
vtNDekxb4Ai08fYJcOy4rOziCBI+PAQI7geVIcxFcOwZ6HOcGemQyYvUzol9HtE6
EwyLQ5PH8ijiJPud/vn4X6jzTTiFqIqPS+6Edb6tIajg
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:56 2023 by rpki-client on console-ams.rpki-client.org