Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/6t8qG1be80GX9_2BM-wX7YexSmA.roa
File: 6t8qG1be80GX9_2BM-wX7YexSmA.roa (raw, json)
Hash identifier: Co4cUfiRSUHcEo/lCWznh1rual9crcok5gSgAzRVi3o=
Subject key identifier: EA:DF:2A:1B:56:DE:F3:41:97:F7:FD:81:33:EC:17:ED:87:B1:4A:60
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 018BBF2ECCDEDC8FE0493516A4ECD3F6A08D
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/6t8qG1be80GX9_2BM-wX7YexSmA.roa
Signing time: Sat 11 Nov 2023 16:19:57 +0000
ROA not before: Sat 11 Nov 2023 16:19:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210539
IP address blocks: 185.162.90.0/24 maxlen: 24
185.174.40.0/24 maxlen: 24
185.170.130.0/24 maxlen: 24
185.170.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Nov 2023 15:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bf:2e:cc:de:dc:8f:e0:49:35:16:a4:ec:d3:f6:a0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Nov 11 16:19:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eadf2a1b56def34197f7fd8133ec17ed87b14a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:16:a1:b1:f5:5c:58:a9:10:60:3d:71:c5:
84:96:42:e8:c3:f1:38:76:f8:e4:bc:a5:a5:dd:4d:
0c:f2:35:91:3a:85:53:df:c3:07:fb:71:db:f4:14:
8c:e7:81:dc:15:7d:39:d2:d2:7c:83:a9:2a:f0:03:
9b:0d:c8:d4:3e:6f:d7:3e:bb:52:a1:29:59:f8:80:
c1:a2:8e:d7:89:f7:09:ad:80:51:92:13:9c:b6:99:
bf:43:d5:b9:0a:d0:a7:86:31:a0:de:b8:46:7b:b2:
0e:b8:c6:42:56:83:1d:20:85:11:38:bc:64:62:34:
59:e3:a4:1a:8c:51:6e:73:ee:64:26:bc:64:c6:14:
e4:dc:bb:f7:ae:12:30:6e:18:2b:a6:e3:b2:13:ce:
d0:9d:3e:c3:fa:54:5f:6f:15:b2:3a:ee:cb:33:65:
f0:7f:79:0f:31:af:71:fe:18:b6:0b:b3:22:d0:c0:
50:7c:c9:78:97:c8:31:16:f5:cf:dc:c5:cb:78:54:
fd:13:f3:d5:69:2e:3b:33:f4:6d:36:7e:ee:61:d8:
7e:5e:06:ee:4c:4c:ee:78:f5:83:cd:c2:9e:68:f8:
9d:35:e5:86:5e:db:38:26:8d:24:64:94:f6:8d:0a:
80:ed:38:ef:7b:e4:a8:16:ce:a1:55:91:fe:bc:9e:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:2A:1B:56:DE:F3:41:97:F7:FD:81:33:EC:17:ED:87:B1:4A:60
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/6t8qG1be80GX9_2BM-wX7YexSmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.90.0/24
185.170.128.0/24
185.170.130.0/24
185.174.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:42:b1:e2:4c:a0:5b:54:ca:a9:03:55:6c:22:13:97:8f:29:
c0:e7:64:7b:cf:19:9f:8f:50:b3:75:d2:fd:20:cc:0c:bc:35:
0c:90:c4:05:81:9a:fd:fb:2a:01:26:ee:a0:c1:20:77:81:09:
10:dd:3b:2a:f5:be:04:e7:2a:38:1f:ee:ec:26:35:14:79:79:
60:53:79:df:9c:67:7e:32:c7:ca:3f:7c:f3:3e:1a:a3:e1:8d:
9f:e8:22:40:9c:4a:96:15:92:a5:15:04:cb:8c:c7:32:4b:e1:
56:54:78:93:9c:32:28:6f:a2:39:36:da:71:07:f6:12:27:e0:
f8:ab:16:dc:e3:2f:73:35:be:ef:93:45:e1:ba:ca:27:84:c0:
75:1d:a4:02:da:11:8b:89:50:bb:07:fb:75:bd:0c:b1:a0:36:
1b:4c:19:5d:64:b5:f1:7b:83:75:a8:2b:99:76:b7:31:2f:ad:
71:2b:29:b3:f4:da:4e:4f:79:59:ae:45:11:2f:dd:6d:23:73:
5f:79:2f:b3:81:b2:73:c7:17:c9:67:86:f9:e8:5b:ed:f3:6b:
ff:5b:e9:ab:23:17:8b:33:f3:14:d7:59:ec:31:2d:a7:39:ac:
27:ca:29:af:ed:fa:65:ac:9f:fe:de:d8:1a:a3:31:5f:28:fd:
0e:96:eb:29
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYu/Lsze3I/gSTUWpOzT9qCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj
MDA0OGUwHhcNMjMxMTExMTYxOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWRmMmExYjU2ZGVmMzQxOTdmN2ZkODEzM2VjMTdlZDg3YjE0YTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZIWobH1XFipEGA9ccWElkLow/E4
dvjkvKWl3U0M8jWROoVT38MH+3Hb9BSM54HcFX050tJ8g6kq8AObDcjUPm/XPrtS
oSlZ+IDBoo7XifcJrYBRkhOctpm/Q9W5CtCnhjGg3rhGe7IOuMZCVoMdIIUROLxk
YjRZ46QajFFuc+5kJrxkxhTk3Lv3rhIwbhgrpuOyE87QnT7D+lRfbxWyOu7LM2Xw
f3kPMa9x/hi2C7Mi0MBQfMl4l8gxFvXP3MXLeFT9E/PVaS47M/RtNn7uYdh+Xgbu
TEzuePWDzcKeaPidNeWGXts4Jo0kZJT2jQqA7Tjve+SoFs6hVZH+vJ5T6QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOrfKhtW3vNBl/f9gTPsF+2HsUpgMB8GA1UdIwQY
MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt
MTA5NTU0NGM2YzUwLzEvNnQ4cUcxYmU4MEdYOV8yQk0td1g3WWV4U21BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw
LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuaJaAwQA
uaqAAwQAuaqCAwQAua4oMA0GCSqGSIb3DQEBCwUAA4IBAQA6QrHiTKBbVMqpA1Vs
IhOXjynA52R7zxmfj1CzddL9IMwMvDUMkMQFgZr9+yoBJu6gwSB3gQkQ3Tsq9b4E
5yo4H+7sJjUUeXlgU3nfnGd+MsfKP3zzPhqj4Y2f6CJAnEqWFZKlFQTLjMcyS+FW
VHiTnDIob6I5NtpxB/YSJ+D4qxbc4y9zNb7vk0XhusonhMB1HaQC2hGLiVC7B/t1
vQyxoDYbTBldZLXxe4N1qCuZdrcxL61xKymz9NpOT3lZrkURL91tI3NfeS+zgbJz
xxfJZ4b56Fvt82v/W+mrIxeLM/MU11nsMS2nOawnyimv7fplrJ/+3tgaozFfKP0O
lusp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:27 2024 by rpki-client on console-fra.rpki-client.org