Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9Zj0t0eP6YiGSlzAK5kdiMzbf74.roa
File: 9Zj0t0eP6YiGSlzAK5kdiMzbf74.roa (raw, json)
Hash identifier: gJ7GFKHBRLXie1TtsLKK9nQDRtRgFaAiGuc9rRrGBsg=
Subject key identifier: F5:98:F4:B7:47:8F:E9:88:86:4A:5C:C0:2B:99:1D:88:CC:DB:7F:BE
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01857067301D450523005CF384758C830EE8
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9Zj0t0eP6YiGSlzAK5kdiMzbf74.roa
Signing time: Mon 02 Jan 2023 02:54:48 +0000
ROA not before: Mon 02 Jan 2023 02:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 109.72.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 09:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:30:1d:45:05:23:00:5c:f3:84:75:8c:83:0e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 2 02:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f598f4b7478fe988864a5cc02b991d88ccdb7fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:0e:20:b5:e8:7a:2a:9d:31:b3:d9:65:db:
d2:cb:e7:e3:83:32:9a:1c:c7:ad:27:cf:c1:59:5f:
57:2b:41:8b:66:53:6d:eb:c5:95:d1:1b:9a:2e:6a:
d9:22:c7:0f:b7:2a:3d:aa:42:0d:35:ce:ec:73:36:
4d:f0:0f:0c:75:dc:69:b9:27:76:0b:ae:f7:96:67:
ad:9c:73:71:04:bd:fe:50:17:04:de:15:a4:2e:42:
70:96:33:fc:12:ba:c1:0d:c6:0d:ea:ae:6c:ad:b6:
1c:28:32:39:41:59:01:8c:6f:6b:6c:08:c0:45:c7:
89:25:6f:a7:f6:63:0e:35:48:dd:2a:66:2b:79:aa:
41:8e:65:38:b3:b8:f2:d3:fd:f4:f4:3e:9a:a8:77:
3a:e1:6e:6c:32:95:9a:a1:12:5d:b8:42:bc:7b:1d:
b0:46:af:ad:4e:60:95:6f:15:e0:3a:11:4a:11:b1:
4d:0f:ba:97:f8:e5:3f:a2:a8:5e:37:82:71:a8:22:
fa:47:24:03:15:ac:d7:8c:90:2d:24:5f:4d:a6:e9:
f0:5b:2b:d3:09:15:5a:8a:6e:de:c1:2e:e1:4f:bd:
32:5c:5d:f5:72:33:ea:74:51:5e:13:f4:da:b1:81:
4a:fa:5a:0e:5a:44:96:86:2f:61:51:b7:9f:16:23:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:98:F4:B7:47:8F:E9:88:86:4A:5C:C0:2B:99:1D:88:CC:DB:7F:BE
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9Zj0t0eP6YiGSlzAK5kdiMzbf74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:55:3d:df:66:19:e5:4c:67:fc:4e:07:c2:74:7f:c7:67:bf:
98:bc:9b:c2:aa:df:60:4c:08:af:7c:2c:28:e6:f9:42:ec:0f:
87:58:8d:ed:77:ce:a7:98:66:3a:14:0e:ec:6f:a8:75:f9:5b:
76:7e:8b:0c:41:d3:b1:49:a0:b7:0f:4e:63:be:6a:e7:07:f8:
bb:a8:51:46:db:24:50:db:8b:02:bb:37:a5:12:b8:25:12:31:
65:af:2a:d1:ae:23:ee:78:fc:7e:10:6e:22:18:cf:78:2e:bf:
fa:fe:d2:a0:a5:94:26:db:04:0f:13:1f:5d:db:08:cc:ae:8d:
e6:74:86:6b:20:96:2b:84:08:2d:2e:46:0c:f4:3d:d2:01:b8:
61:ac:a7:97:34:85:6e:fd:85:a0:90:e5:33:9d:06:06:80:1f:
69:19:90:6f:50:0b:e1:9b:7f:ae:f1:cb:59:c6:76:ae:39:6c:
47:2d:65:e1:fa:5a:87:4c:34:a9:d9:42:ed:68:ca:60:25:1d:
11:01:4a:c2:e7:4f:e7:3f:05:2e:55:31:6f:e3:4a:0d:36:a5:
61:ca:d0:e7:85:e1:67:d8:cc:39:4d:12:09:14:55:9e:ae:af:
49:15:da:bc:d0:74:8c:32:2a:75:fe:29:ad:70:88:34:66:48:
f4:d3:d1:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZzAdRQUjAFzzhHWMgw7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwMTAyMDI1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTk4ZjRiNzQ3OGZlOTg4ODY0YTVjYzAyYjk5MWQ4OGNjZGI3ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRsOILXoeiqdMbPZZdvSy+fjgzKa
HMetJ8/BWV9XK0GLZlNt68WV0RuaLmrZIscPtyo9qkINNc7sczZN8A8MddxpuSd2
C673lmetnHNxBL3+UBcE3hWkLkJwljP8ErrBDcYN6q5srbYcKDI5QVkBjG9rbAjA
RceJJW+n9mMONUjdKmYreapBjmU4s7jy0/309D6aqHc64W5sMpWaoRJduEK8ex2w
Rq+tTmCVbxXgOhFKEbFND7qX+OU/oqheN4JxqCL6RyQDFazXjJAtJF9NpunwWyvT
CRVaim7ewS7hT70yXF31cjPqdFFeE/TasYFK+loOWkSWhi9hUbefFiPQXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPWY9LdHj+mIhkpcwCuZHYjM23++MB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvOVpqMHQwZVA2WWlHU2x6QUs1a2RpTXpiZjc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh5MA0G
CSqGSIb3DQEBCwUAA4IBAQCdVT3fZhnlTGf8TgfCdH/HZ7+YvJvCqt9gTAivfCwo
5vlC7A+HWI3td86nmGY6FA7sb6h1+Vt2fosMQdOxSaC3D05jvmrnB/i7qFFG2yRQ
24sCuzelErglEjFlryrRriPuePx+EG4iGM94Lr/6/tKgpZQm2wQPEx9d2wjMro3m
dIZrIJYrhAgtLkYM9D3SAbhhrKeXNIVu/YWgkOUznQYGgB9pGZBvUAvhm3+u8ctZ
xnauOWxHLWXh+lqHTDSp2ULtaMpgJR0RAUrC50/nPwUuVTFv40oNNqVhytDnheFn
2Mw5TRIJFFWerq9JFdq80HSMMip1/imtcIg0Zkj009FN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org