Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/D8v0gsTVjHwkfmzNoXOVk2d0gBY.roa
File: D8v0gsTVjHwkfmzNoXOVk2d0gBY.roa (raw, json)
Hash identifier: vf7TScH2979QC9KibmLN5Q6Wk6CUtlTimeCbBC9WpgY=
Subject key identifier: 0F:CB:F4:82:C4:D5:8C:7C:24:7E:6C:CD:A1:73:95:93:67:74:80:16
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018CC56E05185C50B6878E9EB0600A043E69
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/D8v0gsTVjHwkfmzNoXOVk2d0gBY.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212609
IP address blocks: 213.109.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 12:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:05:18:5c:50:b6:87:8e:9e:b0:60:0a:04:3e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fcbf482c4d58c7c247e6ccda173959367748016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:58:68:7a:d4:62:06:20:b1:8f:90:35:13:
eb:5b:9e:ca:24:33:11:91:c6:df:53:4a:79:a5:ac:
93:68:72:8f:dd:ed:1b:9a:a4:98:74:f7:cf:d4:7e:
0c:58:09:d6:21:6a:19:3a:5a:10:3a:30:fc:e6:82:
e1:c4:7d:fc:cd:5b:6d:b5:79:e0:e8:5b:19:38:f5:
ae:cf:a9:e9:78:3d:4e:be:75:9c:45:8b:8b:f8:90:
ed:21:a1:be:1f:88:33:e7:c0:76:38:ef:43:38:9d:
0b:e1:2f:e5:f8:5e:7a:95:e8:42:17:21:40:8a:a4:
b4:72:7c:7b:8d:72:2a:f2:a2:22:67:b8:27:81:2d:
cc:7c:64:8f:39:34:ad:56:a4:d7:d8:84:b9:e1:25:
e1:c0:10:fb:33:57:02:23:60:76:dd:f6:ab:28:00:
77:db:b5:14:c4:25:b1:45:43:7b:9a:49:78:46:f2:
59:56:fe:c0:9b:ce:88:b1:c4:98:9b:b2:1c:75:b1:
a7:cd:03:54:1f:3a:bc:c0:75:ec:6a:88:12:40:8f:
fa:99:43:85:c4:7e:6c:1b:bb:27:3c:a6:7a:d1:57:
56:b1:31:2f:04:86:17:06:f2:ed:3a:92:6d:49:4e:
4f:4a:8d:90:32:eb:11:68:41:25:95:d4:eb:27:6a:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CB:F4:82:C4:D5:8C:7C:24:7E:6C:CD:A1:73:95:93:67:74:80:16
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/D8v0gsTVjHwkfmzNoXOVk2d0gBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.155.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:66:a0:91:28:99:4c:3e:03:fa:8c:17:b7:83:09:25:dd:7b:
ce:be:ee:f2:c6:1f:b2:20:66:a8:dd:1f:b6:6f:37:4a:c6:80:
b0:f8:06:f5:b9:f1:09:03:0e:7c:c6:e1:02:25:0e:1d:d9:57:
0b:03:ee:9f:93:56:ac:01:d3:12:24:3d:a9:b6:1a:5f:f0:52:
9c:a0:96:bd:7d:7b:3a:5f:2b:e9:90:c9:6b:96:7d:35:85:6c:
d7:2f:b1:c0:a0:19:c3:66:a3:e2:5f:89:dc:fb:2f:f0:c0:66:
28:f1:12:ab:85:70:cf:fd:7c:17:d1:16:2b:6d:63:d0:96:cd:
fd:8c:82:ed:44:e8:bc:2e:3e:98:34:8b:7b:0c:8b:08:94:4d:
52:c1:10:d6:70:e2:86:cc:50:7e:d3:ad:9c:a8:97:4f:95:0f:
11:38:ef:fc:18:eb:50:f5:5c:f1:bd:30:b2:7f:17:13:40:b8:
c4:6f:4e:80:31:55:d9:af:0e:15:a5:57:7c:d9:8b:c6:a6:40:
bd:7c:16:2b:5c:06:e7:f1:e3:b3:39:30:7c:cb:91:13:78:88:
e4:85:c1:4c:b7:45:2e:e3:97:56:ca:8c:68:68:ed:61:2c:77:
d4:a4:6e:0c:72:6b:60:0e:de:57:d6:13:3a:84:cb:4c:9c:cf:
85:df:68:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbgUYXFC2h46esGAKBD5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjQwMTAxMTQyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmNiZjQ4MmM0ZDU4YzdjMjQ3ZTZjY2RhMTczOTU5MzY3NzQ4MDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AhYaHrUYgYgsY+QNRPrW57KJDMR
kcbfU0p5payTaHKP3e0bmqSYdPfP1H4MWAnWIWoZOloQOjD85oLhxH38zVtttXng
6FsZOPWuz6npeD1OvnWcRYuL+JDtIaG+H4gz58B2OO9DOJ0L4S/l+F56lehCFyFA
iqS0cnx7jXIq8qIiZ7gngS3MfGSPOTStVqTX2IS54SXhwBD7M1cCI2B23farKAB3
27UUxCWxRUN7mkl4RvJZVv7Am86IscSYm7IcdbGnzQNUHzq8wHXsaogSQI/6mUOF
xH5sG7snPKZ60VdWsTEvBIYXBvLtOpJtSU5PSo2QMusRaEElldTrJ2oDmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA/L9ILE1Yx8JH5szaFzlZNndIAWMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvRDh2MGdzVFZqSHdrZm16Tm9YT1ZrMmQwZ0JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W2bMA0G
CSqGSIb3DQEBCwUAA4IBAQALZqCRKJlMPgP6jBe3gwkl3XvOvu7yxh+yIGao3R+2
bzdKxoCw+Ab1ufEJAw58xuECJQ4d2VcLA+6fk1asAdMSJD2pthpf8FKcoJa9fXs6
XyvpkMlrln01hWzXL7HAoBnDZqPiX4nc+y/wwGYo8RKrhXDP/XwX0RYrbWPQls39
jILtROi8Lj6YNIt7DIsIlE1SwRDWcOKGzFB+062cqJdPlQ8ROO/8GOtQ9VzxvTCy
fxcTQLjEb06AMVXZrw4VpVd82YvGpkC9fBYrXAbn8eOzOTB8y5ETeIjkhcFMt0Uu
45dWyoxoaO1hLHfUpG4McmtgDt5X1hM6hMtMnM+F32ik
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org