Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/wZ87KmypYxgxDAC6HxMJ2GHtkP4.roa
File: wZ87KmypYxgxDAC6HxMJ2GHtkP4.roa (raw, json)
Hash identifier: ESW40d815q7kq4GAkpUmY3JySnjwh+NS4a9Khg8B3LI=
Subject key identifier: C1:9F:3B:2A:6C:A9:63:18:31:0C:00:BA:1F:13:09:D8:61:ED:90:FE
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01926D65E2CA5869F8021E7F2285892C4693
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/wZ87KmypYxgxDAC6HxMJ2GHtkP4.roa
Signing time: Tue 08 Oct 2024 18:30:46 +0000
ROA not before: Tue 08 Oct 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208308
IP address blocks: 192.109.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 09:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6d:65:e2:ca:58:69:f8:02:1e:7f:22:85:89:2c:46:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Oct 8 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c19f3b2a6ca96318310c00ba1f1309d861ed90fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:8a:dd:eb:7d:17:30:55:22:6b:f1:64:21:
ee:39:eb:05:b6:a1:cb:97:d8:98:27:48:3d:1f:c2:
e9:2d:3b:b3:84:cd:e5:b1:5c:ad:6b:b1:b9:f1:9e:
f4:9a:48:51:01:ae:03:27:31:72:a2:79:65:81:f8:
1b:66:6c:8f:af:6f:8d:1b:bf:84:c9:7b:0f:b8:bd:
73:af:8d:59:76:18:f6:38:98:2a:8b:12:cf:7a:85:
a3:f3:48:6e:90:c7:c2:59:d2:1a:bd:7f:47:1f:3f:
fc:4d:1a:e3:0d:c0:fb:9c:f0:ca:d7:b4:47:21:b3:
77:61:59:70:a2:c6:27:8a:55:a0:cf:af:c0:11:6f:
8f:3a:c9:26:5c:10:08:62:a3:03:5b:a0:eb:ee:1c:
6f:a2:05:c6:ca:19:c0:fb:44:e6:16:35:01:e8:4c:
37:87:23:39:5b:53:89:57:bd:ec:2d:3d:09:ca:19:
e3:71:f0:e8:82:1f:53:b0:90:53:f2:f9:88:75:2e:
bb:ac:6a:2c:ff:16:59:87:b5:30:98:35:96:ab:42:
30:c1:58:63:d0:e7:db:f9:b0:b7:4e:3e:e0:25:ce:
b9:1f:57:d2:01:c5:39:0f:d7:04:cf:43:3e:d8:33:
b8:a7:f0:06:47:44:01:e9:1b:16:fb:9e:65:8c:a4:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9F:3B:2A:6C:A9:63:18:31:0C:00:BA:1F:13:09:D8:61:ED:90:FE
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/wZ87KmypYxgxDAC6HxMJ2GHtkP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.205.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:39:ef:14:7f:83:05:af:b2:a5:5f:bc:a5:ae:23:30:38:18:
ee:69:59:bc:6c:2a:fc:1f:fe:6c:36:3c:9c:af:2c:fe:7c:b1:
b8:6a:8f:26:7d:24:36:db:b6:c6:df:6b:ec:cb:04:5f:59:24:
37:f3:d6:df:ec:1b:9c:af:d4:b6:87:2d:65:56:ab:cc:60:08:
e3:11:d7:97:19:2e:f9:bb:65:23:f8:28:cf:bc:bf:38:cb:47:
93:11:80:50:fd:cf:7d:d8:66:ba:c5:ca:f6:32:4c:1c:7d:e0:
8c:6c:90:f5:f7:3d:72:b5:99:85:bb:80:2c:72:6a:e1:81:02:
a4:79:34:67:aa:e7:99:f3:26:c1:c5:a7:c4:d2:be:c1:57:e6:
89:f6:4a:82:08:75:2f:a7:28:99:aa:91:15:a6:f4:10:13:f2:
4e:79:46:32:c3:70:99:23:d0:f8:ff:a7:aa:19:fd:21:4a:b4:
7a:8e:fd:1b:a3:42:28:48:6f:c7:46:2a:f8:38:ca:af:9a:13:
35:7c:fb:19:4b:72:0a:c3:f0:bb:a1:d4:42:39:f9:29:c3:c8:
92:dc:1b:2a:d4:49:52:c0:d8:9d:ae:fa:03:5a:29:ad:fd:da:
73:ce:54:75:38:62:d4:67:4b:90:40:9a:4b:d9:ee:dd:cb:44:
1e:1f:c6:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJtZeLKWGn4Ah5/IoWJLEaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjQxMDA4MTgzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTlmM2IyYTZjYTk2MzE4MzEwYzAwYmExZjEzMDlkODYxZWQ5MGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu+K3et9FzBVImvxZCHuOesFtqHL
l9iYJ0g9H8LpLTuzhM3lsVyta7G58Z70mkhRAa4DJzFyonllgfgbZmyPr2+NG7+E
yXsPuL1zr41Zdhj2OJgqixLPeoWj80hukMfCWdIavX9HHz/8TRrjDcD7nPDK17RH
IbN3YVlwosYnilWgz6/AEW+POskmXBAIYqMDW6Dr7hxvogXGyhnA+0TmFjUB6Ew3
hyM5W1OJV73sLT0JyhnjcfDogh9TsJBT8vmIdS67rGos/xZZh7UwmDWWq0IwwVhj
0Ofb+bC3Tj7gJc65H1fSAcU5D9cEz0M+2DO4p/AGR0QB6RsW+55ljKTltQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMGfOypsqWMYMQwAuh8TCdhh7ZD+MB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvd1o4N0tteXBZeGd4REFDNkh4TUoyR0h0a1A0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG3NMA0G
CSqGSIb3DQEBCwUAA4IBAQBaOe8Uf4MFr7KlX7ylriMwOBjuaVm8bCr8H/5sNjyc
ryz+fLG4ao8mfSQ227bG32vsywRfWSQ389bf7Bucr9S2hy1lVqvMYAjjEdeXGS75
u2Uj+CjPvL84y0eTEYBQ/c992Ga6xcr2MkwcfeCMbJD19z1ytZmFu4AscmrhgQKk
eTRnqueZ8ybBxafE0r7BV+aJ9kqCCHUvpyiZqpEVpvQQE/JOeUYyw3CZI9D4/6eq
Gf0hSrR6jv0bo0IoSG/HRir4OMqvmhM1fPsZS3IKw/C7odRCOfkpw8iS3Bsq1ElS
wNidrvoDWimt/dpzzlR1OGLUZ0uQQJpL2e7dy0QeH8at
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:20:28 2024 by rpki-client on console-fra.rpki-client.org