Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/calFdYdaK5YIUUPYY-3Y_HCXuuc.roa
File: calFdYdaK5YIUUPYY-3Y_HCXuuc.roa (raw, json)
Hash identifier: +CXYR2uW4zeO1TXTG1+1+vsx+HrIyVwdakxlVpji40I=
Subject key identifier: 71:A9:45:75:87:5A:2B:96:08:51:43:D8:63:ED:D8:FC:70:97:BA:E7
Certificate issuer: /CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Certificate serial: 01857095196764038D0D8A6851E396D310A5
Authority key identifier: C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/calFdYdaK5YIUUPYY-3Y_HCXuuc.roa
Signing time: Mon 02 Jan 2023 03:44:57 +0000
ROA not before: Mon 02 Jan 2023 03:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210026
IP address blocks: 151.90.0.0/16 maxlen: 24
185.86.84.0/22 maxlen: 24
2a05:b740::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:19:67:64:03:8d:0d:8a:68:51:e3:96:d3:10:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Validity
Not Before: Jan 2 03:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71a94575875a2b96085143d863edd8fc7097bae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:1d:74:48:63:55:2f:31:dd:75:e5:fb:b6:
2c:8e:0d:10:a1:a9:33:44:c8:5c:1e:d5:89:46:a9:
a4:26:b5:df:99:83:90:b3:37:7e:63:8b:f8:1d:88:
81:9f:78:5d:3f:81:6a:d0:9c:01:28:1f:0c:56:54:
b7:42:cf:c3:46:f9:5a:e3:16:5c:ba:53:53:78:be:
8c:1c:ba:82:b0:e4:d3:4a:82:ca:dc:a3:1e:a1:6d:
2f:5d:37:48:cb:0d:5f:72:06:7e:61:37:ef:a1:84:
47:f9:7c:c4:ec:35:5f:c7:1b:89:89:f5:e2:f1:c6:
23:22:61:f3:10:3a:f5:93:17:ee:a9:1d:cc:6f:63:
f3:de:ec:0e:3e:25:92:05:37:c0:88:13:26:14:40:
1b:06:62:d4:c9:46:91:2f:84:51:63:d5:36:e7:5d:
85:ad:51:c9:02:71:9e:45:1a:bf:d7:bf:fc:06:f2:
8f:34:16:a5:89:f9:74:49:e0:22:4a:0c:ac:3d:da:
58:b1:07:0e:d9:60:c3:1a:2b:9e:94:bd:4b:81:e5:
8e:23:cf:3d:d1:07:b3:eb:d1:11:68:92:90:3c:b5:
99:a2:4a:b8:7f:dc:e1:0c:dd:f1:25:bf:cf:ab:cc:
74:c1:99:5a:8e:cb:07:87:56:0e:21:37:38:16:fd:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A9:45:75:87:5A:2B:96:08:51:43:D8:63:ED:D8:FC:70:97:BA:E7
X509v3 Authority Key Identifier:
keyid:C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/calFdYdaK5YIUUPYY-3Y_HCXuuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.90.0.0/16
185.86.84.0/22
IPv6:
2a05:b740::/29
Signature Algorithm: sha256WithRSAEncryption
69:a8:8d:2f:84:74:97:20:53:59:49:18:4b:68:4c:d2:4d:bb:
f5:f8:18:7b:0e:4f:3e:5a:f5:ea:39:c9:72:bc:43:b6:b0:df:
6a:83:aa:79:ef:44:9b:30:e1:31:55:6f:6d:0c:ba:d6:f9:ac:
16:ca:7c:57:9a:5c:5e:5f:0a:13:5f:45:5d:6c:5c:75:2d:03:
7c:b7:b5:b2:cb:c1:b8:e7:79:dd:09:3f:45:12:4e:18:34:bf:
0a:77:2a:56:c4:71:19:7b:b7:38:5a:61:3c:73:4d:6f:72:f9:
69:1e:da:76:40:0a:89:97:63:27:8c:18:27:94:87:a5:9e:a8:
5c:a5:a3:94:56:75:2a:fa:84:03:6e:c9:ed:00:a4:83:3e:d8:
fa:a4:ca:81:fb:a9:04:32:30:a3:d7:e5:3b:58:eb:b9:af:4f:
5f:48:b6:6f:3b:3a:69:f9:6b:d9:af:52:ce:72:91:2f:29:08:
95:ba:89:49:dd:08:2e:62:c5:e5:4b:34:ab:a0:98:6d:1c:17:
95:9b:80:58:f9:3a:62:66:73:c0:9c:1e:4a:77:a5:78:c4:ae:
98:8c:fa:49:2b:bf:15:3c:88:f6:00:bb:45:8a:de:77:da:93:
16:9a:30:45:74:21:07:57:54:2e:b8:64:47:fd:60:57:58:1d:
88:0e:98:f3
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVwlRlnZAONDYpoUeOW0xClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYWI5MmRlN2VhZjVmYmIyZDE0YTUwOGE5MGNlZmM1Njli
NTRlZDQwHhcNMjMwMTAyMDM0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWE5NDU3NTg3NWEyYjk2MDg1MTQzZDg2M2VkZDhmYzcwOTdiYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BYddEhjVS8x3XXl+7Ysjg0Qoakz
RMhcHtWJRqmkJrXfmYOQszd+Y4v4HYiBn3hdP4Fq0JwBKB8MVlS3Qs/DRvla4xZc
ulNTeL6MHLqCsOTTSoLK3KMeoW0vXTdIyw1fcgZ+YTfvoYRH+XzE7DVfxxuJifXi
8cYjImHzEDr1kxfuqR3Mb2Pz3uwOPiWSBTfAiBMmFEAbBmLUyUaRL4RRY9U2512F
rVHJAnGeRRq/17/8BvKPNBalifl0SeAiSgysPdpYsQcO2WDDGiuelL1LgeWOI889
0Qez69ERaJKQPLWZokq4f9zhDN3xJb/Pq8x0wZlajssHh1YOITc4Fv0daQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHGpRXWHWiuWCFFD2GPt2Pxwl7rnMB8GA1UdIwQY
MBaAFMCrkt5+r1+7LRSlCKkM78VptU7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0t1UzNuNnZYN3N0RktVSXFRenZ4V20xVHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xZjFjY2ItZWQxMC00ZmU4LWFlMGIt
NjFiOTgyYWRhNjYyLzEvY2FsRmRZZGFLNVlJVVVQWVktM1lfSENYdXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8xZjFjY2ItZWQxMC00ZmU4LWFlMGItNjFiOTgyYWRhNjYy
LzEvd0t1UzNuNnZYN3N0RktVSXFRenZ4V20xVHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAl1oDBAK5
VlQwDQQCAAIwBwMFAyoFt0AwDQYJKoZIhvcNAQELBQADggEBAGmojS+EdJcgU1lJ
GEtoTNJNu/X4GHsOTz5a9eo5yXK8Q7aw32qDqnnvRJsw4TFVb20Mutb5rBbKfFea
XF5fChNfRV1sXHUtA3y3tbLLwbjned0JP0USThg0vwp3KlbEcRl7tzhaYTxzTW9y
+Wke2nZAComXYyeMGCeUh6WeqFylo5RWdSr6hANuye0ApIM+2PqkyoH7qQQyMKPX
5TtY67mvT19Itm87Omn5a9mvUs5ykS8pCJW6iUndCC5ixeVLNKugmG0cF5WbgFj5
OmJmc8CcHkp3pXjErpiM+kkrvxU8iPYAu0WK3nfakxaaMEV0IQdXVC64ZEf9YFdY
HYgOmPM=
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:21 2024 by rpki-client on console.sobornost.net