Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/6u97woEdrSJ-ivod6isGcLpVHnY.roa
File: 6u97woEdrSJ-ivod6isGcLpVHnY.roa (raw, json)
Hash identifier: +9jLN09j7c52pb/ryyfCyIRj6xuGUJ01Xv/nxJaCFbA=
Subject key identifier: EA:EF:7B:C2:81:1D:AD:22:7E:8A:FA:1D:EA:2B:06:70:BA:55:1E:76
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 0194174E5C44B2178047750FC637990E34A0
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/6u97woEdrSJ-ivod6isGcLpVHnY.roa
Signing time: Mon 30 Dec 2024 11:23:18 +0000
ROA not before: Mon 30 Dec 2024 11:23:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42649
IP address blocks: 178.239.48.0/20 maxlen: 20
185.24.248.0/22 maxlen: 22
185.149.56.0/24 maxlen: 24
185.149.57.0/24 maxlen: 24
185.149.58.0/24 maxlen: 24
185.149.59.0/24 maxlen: 24
185.195.92.0/24 maxlen: 24
185.195.93.0/24 maxlen: 24
185.195.94.0/24 maxlen: 24
185.195.95.0/24 maxlen: 24
2a0a:56c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:4e:5c:44:b2:17:80:47:75:0f:c6:37:99:0e:34:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Dec 30 11:23:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaef7bc2811dad227e8afa1dea2b0670ba551e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:28:98:58:1b:b0:73:ef:99:13:e4:50:49:e6:
2b:c1:67:a8:b1:94:23:8a:0f:3c:0d:10:a7:f0:2a:
df:8f:f7:02:fa:6d:e8:ff:ce:ea:fe:e0:1a:86:bc:
5d:95:63:74:d3:12:9b:4f:a4:27:7d:9d:57:6d:d6:
cf:c1:94:fb:df:4c:73:7e:4a:1e:2d:a3:62:1f:17:
e2:ed:39:06:19:fe:ea:7b:9c:58:4d:0a:05:38:3b:
de:05:30:bf:ea:b9:a3:e7:af:f5:31:e1:55:de:33:
61:e6:0e:a7:4f:77:93:79:69:36:5b:3e:8e:85:50:
72:a0:c0:cf:51:b9:96:43:26:60:0b:36:af:0f:e2:
df:ca:fe:f3:40:34:13:7d:2c:08:aa:0a:bb:b5:54:
0d:33:98:0b:d4:39:cd:14:a7:d0:3d:d2:a1:60:bc:
e9:de:7c:67:fb:26:af:9a:c0:70:6e:b7:ad:2a:0c:
51:8d:e0:4d:52:69:d6:95:a6:44:89:a3:25:48:e3:
fe:4c:46:6c:87:2e:f7:bb:db:65:03:5e:c0:00:4a:
1b:25:fa:c0:fc:57:1b:1c:99:ea:6e:3b:96:31:9e:
ff:ae:3e:97:52:d6:cf:18:36:86:9c:de:7f:54:6e:
29:1e:65:6e:1d:28:78:6c:e3:9d:97:3d:ee:a7:19:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EF:7B:C2:81:1D:AD:22:7E:8A:FA:1D:EA:2B:06:70:BA:55:1E:76
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/6u97woEdrSJ-ivod6isGcLpVHnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.48.0/20
185.24.248.0/22
185.149.56.0/22
185.195.92.0/22
IPv6:
2a0a:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
68:77:fc:ee:ce:76:1a:f8:b9:58:f2:a1:b9:fa:a6:47:c4:ec:
de:c8:6c:ba:cb:db:c4:45:45:d9:73:60:42:4f:56:fb:10:57:
21:be:46:37:90:52:66:97:fb:f1:48:eb:6c:db:61:b3:21:fc:
3b:d3:b4:fe:7b:02:95:83:91:da:d7:b7:3c:0c:4e:b2:17:db:
86:29:8a:a4:81:d3:1b:78:f1:d5:5f:c2:ff:af:c5:0d:ca:64:
a2:ad:b8:51:ad:bc:04:a7:46:49:d8:01:b0:6d:e5:c6:a1:4d:
fb:05:fb:80:5d:80:7e:b4:90:d2:c2:e9:a0:9b:45:c1:eb:18:
80:c8:c7:37:1b:0b:ff:77:7a:68:17:29:b3:d0:06:74:8a:97:
ea:f8:f9:44:92:2b:6f:40:dc:c6:ea:2c:b1:a5:e5:f5:aa:4b:
32:9c:68:cf:f0:00:c1:d8:41:ed:38:7f:37:5a:f8:5d:6f:2d:
3e:dd:8e:63:83:13:10:ac:f8:0c:84:41:24:97:ca:b5:2d:b6:
f6:18:3d:a3:4a:2c:7f:f2:ea:a9:76:a6:b9:53:b2:dd:1d:e4:
2d:54:e3:b1:e6:44:cc:54:60:68:46:3d:70:e5:10:18:e9:26:
ac:ba:01:3a:de:1b:ee:61:fc:24:a1:94:e3:36:1b:36:31:f2:
2a:67:67:63
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQXTlxEsheAR3UPxjeZDjSgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk
NzM2OWQwHhcNMjQxMjMwMTEyMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWVmN2JjMjgxMWRhZDIyN2U4YWZhMWRlYTJiMDY3MGJhNTUxZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SiYWBuwc++ZE+RQSeYrwWeosZQj
ig88DRCn8Crfj/cC+m3o/87q/uAahrxdlWN00xKbT6QnfZ1XbdbPwZT730xzfkoe
LaNiHxfi7TkGGf7qe5xYTQoFODveBTC/6rmj56/1MeFV3jNh5g6nT3eTeWk2Wz6O
hVByoMDPUbmWQyZgCzavD+Lfyv7zQDQTfSwIqgq7tVQNM5gL1DnNFKfQPdKhYLzp
3nxn+yavmsBwbretKgxRjeBNUmnWlaZEiaMlSOP+TEZshy73u9tlA17AAEobJfrA
/FcbHJnqbjuWMZ7/rj6XUtbPGDaGnN5/VG4pHmVuHSh4bOOdlz3upxl98wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOrve8KBHa0ifor6HeorBnC6VR52MB8GA1UdIwQY
MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt
OWNlNDc2N2RhMmMxLzEvNnU5N3dvRWRyU0otaXZvZDZpc0djTHBWSG5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx
LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEsu8wAwQC
uRj4AwQCuZU4AwQCucNcMA0EAgACMAcDBQMqClbAMA0GCSqGSIb3DQEBCwUAA4IB
AQBod/zuznYa+LlY8qG5+qZHxOzeyGy6y9vERUXZc2BCT1b7EFchvkY3kFJml/vx
SOts22GzIfw707T+ewKVg5Ha17c8DE6yF9uGKYqkgdMbePHVX8L/r8UNymSirbhR
rbwEp0ZJ2AGwbeXGoU37BfuAXYB+tJDSwumgm0XB6xiAyMc3Gwv/d3poFymz0AZ0
ipfq+PlEkitvQNzG6iyxpeX1qksynGjP8ADB2EHtOH83Wvhdby0+3Y5jgxMQrPgM
hEEkl8q1Lbb2GD2jSix/8uqpdqa5U7LdHeQtVOOx5kTMVGBoRj1w5RAY6SasugE6
3hvuYfwkoZTjNhs2MfIqZ2dj
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:40 2025 by rpki-client