Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/6vkW_9H2JWrPzEiHmmleWFdhFHo.roa
File: 6vkW_9H2JWrPzEiHmmleWFdhFHo.roa (raw, json)
Hash identifier: HxoHzEW5mLzVUK+tSSfkeyBZ4HOAnqsi6YzBJbENXOg=
Subject key identifier: EA:F9:16:FF:D1:F6:25:6A:CF:CC:48:87:9A:69:5E:58:57:61:14:7A
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 018CC425300727EBFC0E62D60BF342B40574
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/6vkW_9H2JWrPzEiHmmleWFdhFHo.roa
Signing time: Mon 01 Jan 2024 08:30:20 +0000
ROA not before: Mon 01 Jan 2024 08:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 45.113.239.0/24 maxlen: 24
79.132.194.0/24 maxlen: 24
31.223.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 12:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:30:07:27:eb:fc:0e:62:d6:0b:f3:42:b4:05:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Jan 1 08:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaf916ffd1f6256acfcc48879a695e585761147a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:39:9f:fc:b2:2b:c9:7f:ff:8b:95:49:c1:
5c:c2:c8:d0:57:6d:ee:af:b8:c1:2c:57:a3:c9:dc:
bd:bf:62:9c:27:a2:0e:35:63:72:49:3b:aa:ed:96:
f6:89:7c:41:85:28:b8:be:91:f3:eb:82:32:25:e6:
56:25:a3:c9:cd:48:f1:30:16:33:a3:b4:01:c8:8c:
91:cb:b1:b7:f3:94:e2:76:5e:bf:19:dd:83:28:70:
bc:de:88:eb:e7:89:70:e0:af:df:2b:c0:9a:d2:77:
b7:44:10:35:d6:70:42:92:d7:59:55:bf:6c:60:29:
35:a5:63:71:6b:21:66:fa:3e:d0:c9:48:fa:5c:0a:
1e:fe:14:e8:3e:77:c5:25:88:84:cb:29:3c:bc:e7:
7e:c1:e6:d0:9c:40:83:20:f6:80:ea:72:ba:47:aa:
fb:e2:18:7f:c0:07:a6:29:87:79:b1:0e:d5:c5:e4:
72:6e:24:49:6a:f0:df:53:a8:b2:71:dc:1d:9c:49:
9e:28:3d:9f:b6:52:ad:fb:f4:5f:cd:99:5a:5f:48:
c0:45:45:3e:81:e1:c6:64:52:7c:7a:72:f7:ff:af:
1e:d0:90:18:a6:28:94:6d:c6:5b:81:3c:28:d3:6c:
a1:86:5a:2a:7e:4d:72:a7:fe:aa:0b:83:f8:44:d3:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F9:16:FF:D1:F6:25:6A:CF:CC:48:87:9A:69:5E:58:57:61:14:7A
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/6vkW_9H2JWrPzEiHmmleWFdhFHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.185.0/24
45.113.239.0/24
79.132.194.0/24
Signature Algorithm: sha256WithRSAEncryption
62:80:fe:bc:9d:8e:9a:0e:ba:3b:32:d0:db:11:ab:f2:ec:c0:
42:1c:8e:c9:1b:08:6c:4e:1f:37:bd:b7:d8:76:c7:07:70:5a:
ef:0f:7c:37:14:bc:31:64:83:e3:77:2f:10:75:c9:79:fe:16:
4b:b5:67:d5:9a:72:6e:c3:09:12:e1:d2:7d:e5:f5:67:42:0f:
25:95:b9:cd:81:a3:89:5b:94:89:3b:2a:a7:a2:18:51:b3:2e:
7c:2d:32:b3:73:bf:ee:92:59:45:55:df:d8:60:e9:aa:8a:77:
04:b4:5e:30:af:26:f8:7a:d7:28:3a:2a:f4:51:84:e7:8a:e3:
72:95:55:55:3f:59:43:bd:74:32:9b:c8:15:88:44:56:ec:4b:
34:03:67:c2:ae:7f:d2:1a:c1:9b:37:73:50:51:f7:62:cf:c1:
8e:a0:31:2b:18:20:b2:26:99:03:92:89:dd:77:f6:a0:d6:a1:
41:ce:fb:99:c2:40:a8:e6:b9:90:59:e9:9a:34:be:db:b1:69:
e9:b9:c3:1d:f5:f9:5e:d1:a5:32:5b:a8:c1:49:49:f5:e7:a5:
03:b7:69:16:04:a6:10:02:e2:be:cb:df:21:c9:79:a7:2d:9c:
5b:be:ab:d3:f5:29:c2:31:18:7a:27:90:b8:42:5d:89:3f:d9:
c6:45:e7:71
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzEJTAHJ+v8DmLWC/NCtAV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk
ODVjZDYwHhcNMjQwMTAxMDgzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWY5MTZmZmQxZjYyNTZhY2ZjYzQ4ODc5YTY5NWU1ODU3NjExNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqk5n/yyK8l//4uVScFcwsjQV23u
r7jBLFejydy9v2KcJ6IONWNySTuq7Zb2iXxBhSi4vpHz64IyJeZWJaPJzUjxMBYz
o7QByIyRy7G385Tidl6/Gd2DKHC83ojr54lw4K/fK8Ca0ne3RBA11nBCktdZVb9s
YCk1pWNxayFm+j7QyUj6XAoe/hToPnfFJYiEyyk8vOd+webQnECDIPaA6nK6R6r7
4hh/wAemKYd5sQ7VxeRybiRJavDfU6iycdwdnEmeKD2ftlKt+/RfzZlaX0jARUU+
geHGZFJ8enL3/68e0JAYpiiUbcZbgTwo02yhhloqfk1yp/6qC4P4RNNHKQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOr5Fv/R9iVqz8xIh5ppXlhXYRR6MB8GA1UdIwQY
MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct
NjQ5NDVhNGY4ZTEyLzEvNnZrV185SDJKV3JQekVpSG1tbGVXRmRoRkhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy
LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH9+5AwQA
LXHvAwQAT4TCMA0GCSqGSIb3DQEBCwUAA4IBAQBigP68nY6aDro7MtDbEavy7MBC
HI7JGwhsTh83vbfYdscHcFrvD3w3FLwxZIPjdy8Qdcl5/hZLtWfVmnJuwwkS4dJ9
5fVnQg8llbnNgaOJW5SJOyqnohhRsy58LTKzc7/ukllFVd/YYOmqincEtF4wryb4
etcoOir0UYTniuNylVVVP1lDvXQym8gViERW7Es0A2fCrn/SGsGbN3NQUfdiz8GO
oDErGCCyJpkDkondd/ag1qFBzvuZwkCo5rmQWemaNL7bsWnpucMd9fle0aUyW6jB
SUn156UDt2kWBKYQAuK+y98hyXmnLZxbvqvT9SnCMRh6J5C4Ql2JP9nGRedx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:42 2024 by rpki-client on console-ams.rpki-client.org