Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/6TFptppGoEaRBt8WTiGdGvmzDUE.roa
File: 6TFptppGoEaRBt8WTiGdGvmzDUE.roa (raw, json)
Hash identifier: W8rnaCeu4HYXOe3aCH4j8zV+3GYQ3FPQX9QPjb6GaJE=
Subject key identifier: E9:31:69:B6:9A:46:A0:46:91:06:DF:16:4E:21:9D:1A:F9:B3:0D:41
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 01856C9CB02EAF5E7BA66AE919B02DF22EFF
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/6TFptppGoEaRBt8WTiGdGvmzDUE.roa
Signing time: Sun 01 Jan 2023 09:14:45 +0000
ROA not before: Sun 01 Jan 2023 09:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42442
IP address blocks: 185.37.201.0/24 maxlen: 24
185.37.203.0/24 maxlen: 24
91.199.60.0/24 maxlen: 24
2a00:f020::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:b0:2e:af:5e:7b:a6:6a:e9:19:b0:2d:f2:2e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Jan 1 09:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e93169b69a46a0469106df164e219d1af9b30d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:1d:c4:f3:e6:2e:08:5f:83:e0:62:a1:83:
63:9f:8c:3c:1d:64:ca:44:03:87:5c:75:25:d4:db:
75:bc:7c:3f:60:ea:a3:69:b1:fa:4f:e4:2e:99:17:
19:7d:2b:8d:1e:bd:80:60:95:a8:46:f0:55:fa:db:
21:43:2c:05:81:bd:55:1d:a5:1e:9a:f9:5f:03:37:
a2:10:ec:f3:e2:52:a8:6e:c5:61:e7:2b:2b:b0:e7:
f5:08:73:79:10:e2:b3:e8:e6:9f:cc:c8:b7:a4:91:
d5:6a:c9:0d:d5:9d:cd:cf:40:b9:55:af:36:cf:d1:
23:be:16:79:15:96:6e:f1:34:26:ff:44:51:6f:14:
97:bc:de:9d:e2:0e:06:48:74:4d:4f:01:6e:0e:15:
ab:8e:f5:3f:bf:93:b3:ac:e1:ea:8c:28:4d:9f:02:
69:9c:5d:1c:ca:43:74:fb:1c:29:dd:7e:dd:ec:eb:
c3:47:63:cc:8b:1b:8f:95:19:00:11:c2:c6:58:50:
41:f4:46:30:ae:8f:1f:a6:86:fc:a7:e4:e1:75:7e:
94:97:65:e1:80:2f:00:f4:a5:04:8b:b7:93:09:28:
02:87:63:4e:0d:4d:45:72:bd:41:08:8a:de:2d:08:
8f:f4:6d:7a:6e:51:38:b5:f8:32:72:98:a9:59:8c:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:69:B6:9A:46:A0:46:91:06:DF:16:4E:21:9D:1A:F9:B3:0D:41
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/6TFptppGoEaRBt8WTiGdGvmzDUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.60.0/24
185.37.201.0/24
185.37.203.0/24
IPv6:
2a00:f020::/32
Signature Algorithm: sha256WithRSAEncryption
11:af:77:8e:44:4e:0e:99:16:e9:81:a1:8e:7e:f2:c2:cd:d3:
c9:79:f7:05:14:7f:a8:11:f8:94:2f:b7:ee:7d:0d:36:f3:32:
46:da:80:b8:b1:ce:45:6c:7d:00:ec:e5:ef:89:f7:66:10:c7:
0e:38:a2:ec:3c:fd:74:00:b4:d2:55:73:2c:13:72:81:cc:a0:
64:8e:d7:b4:b6:9a:dd:5f:05:c8:f8:fd:2a:52:e3:67:00:32:
fa:9f:17:9e:7e:14:f9:ed:5d:6e:95:2d:69:53:1d:0f:85:68:
29:82:f6:a3:be:40:a5:72:42:37:93:31:bc:ab:f7:36:f5:38:
b7:51:23:f0:7c:36:34:91:37:7a:ec:89:ab:e0:7b:e8:7a:44:
7b:52:7c:fe:2e:67:b5:6a:61:c8:e4:de:52:17:4f:3f:db:4e:
be:e5:9c:f9:fc:37:f8:82:75:21:31:b6:bc:97:44:9e:36:51:
8c:ed:a8:b7:d6:a4:6c:75:d9:cf:f7:60:61:3e:81:45:85:65:
67:cb:5d:56:1d:01:4d:3f:f4:e5:99:d9:72:c0:9d:55:1a:31:
a6:28:76:2b:20:92:a3:c4:39:48:83:4d:34:31:7b:18:93:67:
1d:7c:c8:85:d5:18:37:d8:2f:c4:42:3e:85:36:05:f2:c7:e2:
3c:aa:44:93
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVsnLAur157pmrpGbAt8i7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmJlOTgyMDYwYTQzNzM0ZDBhZDEyNmFkNDZkYTJmMzk1
YzlkZWYwHhcNMjMwMTAxMDkxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTMxNjliNjlhNDZhMDQ2OTEwNmRmMTY0ZTIxOWQxYWY5YjMwZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQYdxPPmLghfg+BioYNjn4w8HWTK
RAOHXHUl1Nt1vHw/YOqjabH6T+QumRcZfSuNHr2AYJWoRvBV+tshQywFgb1VHaUe
mvlfAzeiEOzz4lKobsVh5ysrsOf1CHN5EOKz6OafzMi3pJHVaskN1Z3Nz0C5Va82
z9EjvhZ5FZZu8TQm/0RRbxSXvN6d4g4GSHRNTwFuDhWrjvU/v5OzrOHqjChNnwJp
nF0cykN0+xwp3X7d7OvDR2PMixuPlRkAEcLGWFBB9EYwro8fpob8p+ThdX6Ul2Xh
gC8A9KUEi7eTCSgCh2NODU1Fcr1BCIreLQiP9G16blE4tfgycpipWYzebQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFOkxabaaRqBGkQbfFk4hnRr5sw1BMB8GA1UdIwQY
MBaAFPMr6YIGCkNzTQrRJq1G2i85XJ3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGIt
OTliY2JlNmQ3ZjYzLzEvNlRGcHRwcEdvRWFSQnQ4V1RpR2RHdm16RFVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGItOTliY2JlNmQ3ZjYz
LzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW8c8AwQA
uSXJAwQAuSXLMA0EAgACMAcDBQAqAPAgMA0GCSqGSIb3DQEBCwUAA4IBAQARr3eO
RE4OmRbpgaGOfvLCzdPJefcFFH+oEfiUL7fufQ028zJG2oC4sc5FbH0A7OXvifdm
EMcOOKLsPP10ALTSVXMsE3KBzKBkjte0tprdXwXI+P0qUuNnADL6nxeefhT57V1u
lS1pUx0PhWgpgvajvkClckI3kzG8q/c29Ti3USPwfDY0kTd67Imr4HvoekR7Unz+
Lme1amHI5N5SF08/206+5Zz5/Df4gnUhMba8l0SeNlGM7ai31qRsddnP92BhPoFF
hWVny11WHQFNP/TlmdlywJ1VGjGmKHYrIJKjxDlIg000MXsYk2cdfMiF1Rg32C/E
Qj6FNgXyx+I8qkST
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net