Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/6krFAjgw3EanxPipmqmPSXZVkNM.roa
File: 6krFAjgw3EanxPipmqmPSXZVkNM.roa (raw, json)
Hash identifier: UhHH1BfYfCj1kB5DN4FS+7eLmmhzNy1njYmvOUZe3S4=
Subject key identifier: EA:4A:C5:02:38:30:DC:46:A7:C4:F8:A9:9A:A9:8F:49:76:55:90:D3
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 01856FF93F184303D195F45B55D6D02B328E
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/6krFAjgw3EanxPipmqmPSXZVkNM.roa
Signing time: Mon 02 Jan 2023 00:54:43 +0000
ROA not before: Mon 02 Jan 2023 00:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45023
IP address blocks: 193.200.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:3f:18:43:03:d1:95:f4:5b:55:d6:d0:2b:32:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Jan 2 00:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea4ac5023830dc46a7c4f8a99aa98f49765590d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:50:eb:05:f4:c2:67:ca:ee:0c:1b:f2:fc:
69:f2:cd:6f:2c:fe:1c:a9:b8:cd:26:e6:0a:e9:6f:
68:39:5c:ad:b9:c1:3b:ea:58:4b:94:a3:ef:e8:87:
5a:15:a7:a1:00:23:dd:14:79:76:ee:60:26:6c:2a:
b1:54:0d:11:a6:d5:67:a6:91:7f:80:55:9b:3c:2b:
1d:6a:9d:9f:04:f3:e6:2a:00:17:9d:b1:35:a2:ba:
97:fd:f3:27:a3:5c:94:7c:71:f4:86:16:e3:a1:f9:
2b:3c:87:ed:52:40:3e:cc:1c:23:54:78:79:8c:44:
07:ef:93:b2:e6:27:6f:c9:a2:f8:b2:ac:df:c5:9b:
c3:db:14:63:a4:51:51:49:d2:18:30:45:1c:ca:1f:
88:68:2c:53:e6:8e:09:9a:fa:fd:c9:bb:2f:9a:d0:
44:d7:69:97:51:9c:0d:98:e0:95:1d:a3:eb:33:4a:
b4:88:36:89:ab:0b:8f:12:6d:28:f1:d5:81:2a:5b:
01:49:33:86:2a:b5:c0:7b:2c:25:cb:fa:47:51:a4:
4d:dd:17:e3:4a:63:18:57:d8:a4:c9:0d:52:77:55:
fa:89:55:10:7a:2e:09:fd:0f:e3:da:ab:dc:87:1d:
aa:57:e9:99:0f:60:f5:3f:da:5e:d6:d3:a5:7c:f1:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4A:C5:02:38:30:DC:46:A7:C4:F8:A9:9A:A9:8F:49:76:55:90:D3
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/6krFAjgw3EanxPipmqmPSXZVkNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.60.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ac:05:83:73:7e:5e:13:08:e7:ec:e2:10:a9:c1:97:f2:e9:
a6:4e:8a:e9:29:f4:44:cf:f9:b8:06:89:b3:fb:7a:c3:7d:60:
80:41:c8:97:38:9a:2d:8b:3d:0e:c4:6c:b7:63:a7:cb:3d:84:
5f:8c:97:22:a1:17:7e:f8:62:ea:b9:30:b7:42:cd:66:b6:f7:
e7:1c:da:64:9a:1e:7a:38:85:5f:c2:6f:8c:df:60:7b:26:c6:
95:59:7c:1c:34:2b:87:21:48:2a:eb:95:bd:b4:15:9e:d9:c9:
01:82:0f:1f:96:68:b9:f3:d6:12:e0:4c:6b:d9:d8:61:ba:33:
c8:bb:7c:86:ec:36:78:a4:30:d9:9a:73:27:cf:34:ca:2a:69:
df:ba:19:f7:e1:41:8a:38:97:ca:4f:dd:60:51:03:5b:5b:37:
7b:5b:4e:32:d9:3c:2a:49:40:97:e3:9f:15:08:5e:33:bb:19:
fa:e7:d4:12:fc:d1:e6:c6:65:38:4b:0d:3b:c2:e1:da:62:5f:
00:4e:9b:6d:f0:2c:c0:f0:2f:36:7f:99:51:6b:d7:69:8d:38:
f8:34:0f:a5:0d:11:e1:86:64:1c:59:1f:f7:f9:35:ad:50:46:
0c:ff:47:64:85:31:ff:0a:97:be:4b:43:54:43:58:15:c4:27:
df:a9:2e:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv+T8YQwPRlfRbVdbQKzKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjkzMDg1YjVmNzVjMGYxMGRlMDhlMjJjYmU0YjA2MjQ1
MWIxNTAwHhcNMjMwMTAyMDA1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTRhYzUwMjM4MzBkYzQ2YTdjNGY4YTk5YWE5OGY0OTc2NTU5MGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2lQ6wX0wmfK7gwb8vxp8s1vLP4c
qbjNJuYK6W9oOVytucE76lhLlKPv6IdaFaehACPdFHl27mAmbCqxVA0RptVnppF/
gFWbPCsdap2fBPPmKgAXnbE1orqX/fMno1yUfHH0hhbjofkrPIftUkA+zBwjVHh5
jEQH75Oy5idvyaL4sqzfxZvD2xRjpFFRSdIYMEUcyh+IaCxT5o4Jmvr9ybsvmtBE
12mXUZwNmOCVHaPrM0q0iDaJqwuPEm0o8dWBKlsBSTOGKrXAeywly/pHUaRN3Rfj
SmMYV9ikyQ1Sd1X6iVUQei4J/Q/j2qvchx2qV+mZD2D1P9pe1tOlfPGT9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpKxQI4MNxGp8T4qZqpj0l2VZDTMB8GA1UdIwQY
MBaAFPJpMIW191wPEN4I4iy+SwYkUbFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAt
NTVlODVlYTA5ZGRlLzEvNmtyRkFqZ3czRWFueFBpcG1xbVBTWFpWa05NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAtNTVlODVlYTA5ZGRl
LzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcg8MA0G
CSqGSIb3DQEBCwUAA4IBAQAQrAWDc35eEwjn7OIQqcGX8ummTorpKfREz/m4Bomz
+3rDfWCAQciXOJotiz0OxGy3Y6fLPYRfjJcioRd++GLquTC3Qs1mtvfnHNpkmh56
OIVfwm+M32B7JsaVWXwcNCuHIUgq65W9tBWe2ckBgg8flmi589YS4Exr2dhhujPI
u3yG7DZ4pDDZmnMnzzTKKmnfuhn34UGKOJfKT91gUQNbWzd7W04y2TwqSUCX458V
CF4zuxn659QS/NHmxmU4Sw07wuHaYl8ATptt8CzA8C82f5lRa9dpjTj4NA+lDRHh
hmQcWR/3+TWtUEYM/0dkhTH/Cpe+S0NUQ1gVxCffqS7v
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:26 2024 by rpki-client on console.sobornost.net