Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/6y8K_rNBB0wG_7J2K4oYXj-E_7M.roa
File: 6y8K_rNBB0wG_7J2K4oYXj-E_7M.roa (raw, json)
Hash identifier: sVByUHVIOYOUtwm13JMZRpI/ccZ6tGd0+Agsiz7MioM=
Subject key identifier: EB:2F:0A:FE:B3:41:07:4C:06:FF:B2:76:2B:8A:18:5E:3F:84:FF:B3
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 018BAFFDA6EFC22E6ACD9F3AA93BF870E139
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/6y8K_rNBB0wG_7J2K4oYXj-E_7M.roa
Signing time: Wed 08 Nov 2023 17:31:57 +0000
ROA not before: Wed 08 Nov 2023 17:31:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16365
IP address blocks: 212.149.0.0/18 maxlen: 18
212.149.0.0/19 maxlen: 19
195.42.236.0/24 maxlen: 24
212.149.30.0/24 maxlen: 24
212.149.29.0/24 maxlen: 24
212.149.32.0/19 maxlen: 19
2a00:d580:4900::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 08 Nov 2023 17:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:fd:a6:ef:c2:2e:6a:cd:9f:3a:a9:3b:f8:70:e1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Nov 8 17:31:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb2f0afeb341074c06ffb2762b8a185e3f84ffb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f8:b8:4e:96:57:5a:59:c2:78:30:db:1d:3b:
32:0d:16:55:d0:fd:93:26:fd:c8:92:28:29:4f:34:
58:2a:cf:40:09:9b:15:63:2e:13:de:f5:82:57:e9:
9c:52:3d:e8:f2:0a:fe:fe:71:97:fc:51:f7:07:e0:
e5:3d:09:0e:d4:0b:84:7f:9d:b1:0e:bf:36:fa:09:
1a:58:be:9d:d8:d4:06:86:40:c8:a4:47:95:d4:47:
7e:ab:17:2f:eb:16:bb:c5:be:9f:95:b5:04:14:e9:
b4:63:0c:ec:94:1f:ca:6b:08:22:e3:52:2c:d5:f7:
31:b4:15:11:b3:4a:b1:2e:f5:45:b5:fe:d0:73:0f:
d5:cb:c4:fe:34:33:b2:57:81:a6:6f:c3:10:3b:64:
f7:67:60:f0:6a:0c:eb:24:9e:76:bd:d5:64:20:0a:
b4:90:7d:a6:bd:df:3f:94:49:42:48:22:a1:93:24:
91:23:2c:6f:02:da:57:8b:81:f9:e2:a3:b7:7c:82:
44:36:a8:d7:d6:ba:98:38:8b:6c:61:5a:48:57:c4:
58:e7:04:ea:8d:0d:04:c4:c5:48:96:a2:3e:6f:5d:
68:2d:e4:45:08:c6:cf:60:01:b3:b4:fb:66:d8:43:
74:a5:48:50:50:4e:db:14:5f:ae:8d:4f:ae:57:8d:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2F:0A:FE:B3:41:07:4C:06:FF:B2:76:2B:8A:18:5E:3F:84:FF:B3
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/6y8K_rNBB0wG_7J2K4oYXj-E_7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.236.0/24
212.149.0.0/18
IPv6:
2a00:d580:4900::/40
Signature Algorithm: sha256WithRSAEncryption
2f:23:a8:41:61:b4:19:cd:f3:dc:f4:9a:5f:ef:e6:09:bd:e9:
41:72:ac:49:c8:ef:60:65:4f:3b:9a:16:cc:28:c5:e4:7a:06:
98:de:db:e1:9a:6d:e9:8a:69:02:98:89:39:c2:b8:4c:16:92:
eb:c3:05:6e:45:ca:4a:10:8e:3a:ea:b1:80:19:99:19:25:2d:
d8:57:c4:e8:b6:4b:9a:2b:68:8b:96:66:67:69:d0:4c:05:c6:
23:19:6d:d1:77:8f:01:71:28:71:57:af:e2:19:59:1f:83:48:
00:03:c1:1c:41:f6:33:1d:25:0a:25:a9:1c:d3:6d:fe:05:f7:
15:8d:10:e8:a8:a6:8d:f8:24:7b:57:ab:9d:14:4d:03:51:90:
22:00:3c:9e:8c:0a:e6:59:42:a2:b3:29:ed:0c:9c:07:48:42:
e5:bc:88:ce:85:b0:10:c9:73:ab:d8:38:1f:c7:1e:33:8f:40:
c5:1a:82:ac:2a:3c:ba:8b:8d:f4:cf:89:79:2b:fb:27:22:30:
e3:1c:2d:08:31:66:c9:63:48:82:9b:d8:8e:73:b0:ac:bd:70:
fa:e4:80:8a:df:08:75:48:de:78:cf:8f:3d:d5:50:6e:6c:e8:
8c:af:2d:92:6e:d6:43:7e:48:79:c7:2c:bb:8a:2c:75:ca:97:
84:f9:9f:a4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYuv/abvwi5qzZ86qTv4cOE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2JhMThkNWNlYjhlNzk0YzgxMzljZTAyYTc5MWI4NTAx
ODI1ZWYwHhcNMjMxMTA4MTczMTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjJmMGFmZWIzNDEwNzRjMDZmZmIyNzYyYjhhMTg1ZTNmODRmZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvi4TpZXWlnCeDDbHTsyDRZV0P2T
Jv3IkigpTzRYKs9ACZsVYy4T3vWCV+mcUj3o8gr+/nGX/FH3B+DlPQkO1AuEf52x
Dr82+gkaWL6d2NQGhkDIpEeV1Ed+qxcv6xa7xb6flbUEFOm0YwzslB/Kawgi41Is
1fcxtBURs0qxLvVFtf7Qcw/Vy8T+NDOyV4Gmb8MQO2T3Z2DwagzrJJ52vdVkIAq0
kH2mvd8/lElCSCKhkySRIyxvAtpXi4H54qO3fIJENqjX1rqYOItsYVpIV8RY5wTq
jQ0ExMVIlqI+b11oLeRFCMbPYAGztPtm2EN0pUhQUE7bFF+ujU+uV42pAQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFOsvCv6zQQdMBv+ydiuKGF4/hP+zMB8GA1UdIwQY
MBaAFLU7oY1c6455TIE5zgKnkbhQGCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAt
NzU0YjYwYzViNTY4LzEvNnk4S19yTkJCMHdHXzdKMks0b1lYai1FXzdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAtNzU0YjYwYzViNTY4
LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAwyrsAwQG
1JUAMA4EAgACMAgDBgAqANWASTANBgkqhkiG9w0BAQsFAAOCAQEALyOoQWG0Gc3z
3PSaX+/mCb3pQXKsScjvYGVPO5oWzCjF5HoGmN7b4Zpt6YppApiJOcK4TBaS68MF
bkXKShCOOuqxgBmZGSUt2FfE6LZLmitoi5ZmZ2nQTAXGIxlt0XePAXEocVev4hlZ
H4NIAAPBHEH2Mx0lCiWpHNNt/gX3FY0Q6Kimjfgke1ernRRNA1GQIgA8nowK5llC
orMp7QycB0hC5byIzoWwEMlzq9g4H8ceM49AxRqCrCo8uouN9M+JeSv7JyIw4xwt
CDFmyWNIgpvYjnOwrL1w+uSAit8IdUjeeM+PPdVQbmzojK8tkm7WQ35Ieccsu4os
dcqXhPmfpA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:31 2024 by rpki-client on console-ams.rpki-client.org