Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/HAkcg64ELQtNO6VInwsvt76v6e0.roa
File: HAkcg64ELQtNO6VInwsvt76v6e0.roa (raw, json)
Hash identifier: GREtE+stuZETgkIHiXHYumwhjTIQVStcb9OCRUAJClE=
Subject key identifier: 1C:09:1C:83:AE:04:2D:0B:4D:3B:A5:48:9F:0B:2F:B7:BE:AF:E9:ED
Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial: 0185720C49EEF39B1279DA1A9D07BB596DBA
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/HAkcg64ELQtNO6VInwsvt76v6e0.roa
Signing time: Mon 02 Jan 2023 10:34:46 +0000
ROA not before: Mon 02 Jan 2023 10:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 93.191.217.0/24 maxlen: 24
93.191.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:49:ee:f3:9b:12:79:da:1a:9d:07:bb:59:6d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Validity
Not Before: Jan 2 10:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c091c83ae042d0b4d3ba5489f0b2fb7beafe9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:53:f1:5a:1b:44:b9:5b:6b:32:93:33:9f:
2a:24:e5:ff:76:a9:1e:73:1e:8e:cd:47:68:70:a1:
d3:46:a1:74:a6:9c:e6:41:71:69:19:8d:97:a0:0f:
c4:04:64:4c:67:80:65:44:35:76:06:96:7f:b6:c3:
1a:e6:4a:37:91:5c:d5:68:c5:c1:1d:23:6e:64:e2:
cf:7e:0d:1a:9e:af:cc:46:52:20:8f:a1:c5:ba:a7:
b4:99:4a:56:08:aa:72:8a:18:a8:e2:b9:1c:55:b1:
65:d7:02:65:af:31:b4:aa:97:8f:74:b6:49:fd:41:
c1:20:6c:fe:5d:66:eb:ae:d1:a8:4b:c3:14:ea:d7:
e2:69:6c:83:7c:5e:f7:b1:cb:76:43:02:77:a2:be:
4d:b9:a4:2d:34:a6:16:33:7d:a2:ba:7d:dd:e7:59:
52:3c:03:e4:10:21:31:96:cd:cc:0a:bc:d7:12:74:
28:f5:ea:1a:c7:d2:29:f5:10:f9:cd:81:d9:fd:e0:
1a:54:6a:72:1c:1f:e7:89:3e:8c:7d:a4:5a:b7:b5:
c7:1d:2c:09:90:bf:dd:30:fe:36:b7:c1:47:71:c0:
30:16:c5:d2:1e:ec:22:f4:83:7d:4a:e4:ac:7d:f8:
ac:e8:5c:c9:0c:fc:6f:39:fb:ac:90:7f:d5:53:cc:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:09:1C:83:AE:04:2D:0B:4D:3B:A5:48:9F:0B:2F:B7:BE:AF:E9:ED
X509v3 Authority Key Identifier:
keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/HAkcg64ELQtNO6VInwsvt76v6e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.217.0/24
93.191.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:49:29:2c:ec:85:1b:3b:8b:68:60:25:4d:29:cd:77:3f:31:
45:36:a1:c0:3d:03:8b:8c:c1:0c:27:f9:88:13:b7:c4:25:25:
d8:de:f4:62:43:21:49:a7:08:5f:4f:a7:70:ef:8a:e1:70:8e:
29:bc:98:5b:d5:29:ab:60:92:bf:12:60:75:8e:c5:ce:93:67:
e2:09:86:e4:3f:ea:1f:e9:40:90:cb:47:18:ca:0a:78:1b:8f:
2d:82:5e:31:81:c5:61:cd:8e:d4:04:c9:3c:af:d8:6a:7a:cb:
48:65:49:06:a6:08:d8:41:08:7d:c8:ac:b6:74:0e:98:e5:d5:
a1:ca:7c:a9:f4:3e:83:41:7f:25:a2:90:aa:20:58:73:be:4e:
ee:0f:ec:c6:f7:4a:45:61:6b:84:a0:9d:07:b1:e9:a2:16:fd:
91:46:bb:2b:a2:87:70:f5:e9:bf:f7:4e:ac:43:bd:6f:07:d9:
e7:f8:bb:c4:2a:26:e9:80:2f:e2:32:a6:39:e8:38:e6:61:ab:
a8:9b:95:95:7f:eb:30:cc:7e:85:46:17:89:bc:f1:de:e6:a0:
16:f7:6e:0c:2c:42:34:ed:6f:02:28:b1:d7:2a:d3:b2:43:d3:
32:a5:50:e0:7e:0c:c4:18:21:21:ac:31:e3:fa:e8:a0:7d:bc:
db:8c:0d:fc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVyDEnu85sSedoanQe7WW26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjJmYjBmYTUyZGUxM2MzMzY2ODljZjNmNDgyOWQ2MzUw
Njc1MGYwHhcNMjMwMTAyMTAzNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzA5MWM4M2FlMDQyZDBiNGQzYmE1NDg5ZjBiMmZiN2JlYWZlOWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmlT8VobRLlbazKTM58qJOX/dqke
cx6OzUdocKHTRqF0ppzmQXFpGY2XoA/EBGRMZ4BlRDV2BpZ/tsMa5ko3kVzVaMXB
HSNuZOLPfg0anq/MRlIgj6HFuqe0mUpWCKpyihio4rkcVbFl1wJlrzG0qpePdLZJ
/UHBIGz+XWbrrtGoS8MU6tfiaWyDfF73sct2QwJ3or5NuaQtNKYWM32iun3d51lS
PAPkECExls3MCrzXEnQo9eoax9Ip9RD5zYHZ/eAaVGpyHB/niT6MfaRat7XHHSwJ
kL/dMP42t8FHccAwFsXSHuwi9IN9SuSsffis6FzJDPxvOfuskH/VU8ySgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBwJHIOuBC0LTTulSJ8LL7e+r+ntMB8GA1UdIwQY
MBaAFGzy+w+lLeE8M2aJzz9IKdY1BnUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTkt
NmVjOTgyOTUxY2Y3LzEvSEFrY2c2NEVMUXROTzZWSW53c3Z0NzZ2NmUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTktNmVjOTgyOTUxY2Y3
LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXb/ZAwQA
Xb/bMA0GCSqGSIb3DQEBCwUAA4IBAQBcSSks7IUbO4toYCVNKc13PzFFNqHAPQOL
jMEMJ/mIE7fEJSXY3vRiQyFJpwhfT6dw74rhcI4pvJhb1SmrYJK/EmB1jsXOk2fi
CYbkP+of6UCQy0cYygp4G48tgl4xgcVhzY7UBMk8r9hqestIZUkGpgjYQQh9yKy2
dA6Y5dWhynyp9D6DQX8lopCqIFhzvk7uD+zG90pFYWuEoJ0HsemiFv2RRrsroodw
9em/906sQ71vB9nn+LvEKibpgC/iMqY56DjmYauom5WVf+swzH6FRheJvPHe5qAW
924MLEI07W8CKLHXKtOyQ9MypVDgfgzEGCEhrDHj+uigfbzbjA38
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:59 2024 by rpki-client on console-ams.rpki-client.org