Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/GeyHA8UOhmTfcevs0_ACqIlNsCg.roa
File: GeyHA8UOhmTfcevs0_ACqIlNsCg.roa (raw, json)
Hash identifier: 8W5f1rWg+9wg6aX1xTdd46PKTqMY5zHeBj4npDCwQyo=
Subject key identifier: 19:EC:87:03:C5:0E:86:64:DF:71:EB:EC:D3:F0:02:A8:89:4D:B0:28
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018BB88618313B5E8BDD33EB8715743C3F7F
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/GeyHA8UOhmTfcevs0_ACqIlNsCg.roa
Signing time: Fri 10 Nov 2023 09:17:57 +0000
ROA not before: Fri 10 Nov 2023 09:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 109.72.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Dec 2023 08:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:86:18:31:3b:5e:8b:dd:33:eb:87:15:74:3c:3f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Nov 10 09:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19ec8703c50e8664df71ebecd3f002a8894db028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:6f:2c:18:a6:36:86:11:61:da:40:3a:04:
f1:8c:57:da:ab:17:87:7b:78:d2:b5:16:92:d5:c2:
2e:59:60:4e:bf:17:91:b3:2c:55:8a:7d:75:55:52:
df:4e:9c:2b:31:58:32:38:78:39:4f:15:5b:e4:b0:
b5:45:87:6a:ca:3e:8f:7d:be:9e:fd:55:bf:e4:9f:
e9:0f:14:c6:d7:3b:c6:53:7d:c2:02:ac:7e:55:3a:
19:a1:08:62:3f:9a:ee:51:67:3d:70:04:10:79:cb:
fc:cf:09:22:02:7d:84:f4:62:8d:76:ce:73:1e:0d:
d6:5e:3e:cf:c9:04:29:ce:11:29:d5:68:71:51:cc:
dc:10:9c:a6:c2:41:22:71:f0:fd:71:16:dc:95:81:
cc:11:d1:c4:e1:c4:95:ab:b0:85:ca:af:ad:f9:c0:
a5:36:c0:ca:62:a1:80:9f:36:29:2d:17:11:ce:b4:
d1:be:82:00:6d:62:8c:d9:57:01:49:26:99:69:cb:
4e:b5:1a:a9:02:d4:4b:d7:46:1d:6d:af:a3:cd:c2:
98:aa:64:ba:6d:46:5e:aa:3d:ae:8c:b0:81:c7:8f:
5f:00:2e:82:b9:72:7e:25:df:3f:5a:43:9c:75:a0:
9b:aa:d7:41:64:c4:c8:d0:7b:b7:4f:c3:49:d1:81:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EC:87:03:C5:0E:86:64:DF:71:EB:EC:D3:F0:02:A8:89:4D:B0:28
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/GeyHA8UOhmTfcevs0_ACqIlNsCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.113.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f1:28:45:29:0e:8d:e7:d4:c1:a0:1f:9e:62:c4:9e:1f:e9:
1d:8e:eb:6e:95:d9:84:2b:86:fd:68:87:22:77:1b:9e:55:62:
e3:33:a2:f3:ff:90:9c:7f:7f:ee:0c:cd:50:46:b1:13:c8:80:
d1:0e:b3:89:7b:c8:b3:a7:95:1a:f1:97:1f:00:8a:68:23:09:
2d:dc:91:d5:a8:c5:f7:c7:8d:4c:1f:7b:2b:a6:2b:43:b3:51:
78:97:6f:a6:0a:98:33:04:47:d0:e1:6d:d2:74:c8:61:bd:33:
56:f9:ea:20:2c:1c:e2:ea:41:96:73:0d:4c:a2:df:f4:ae:2c:
9f:eb:23:be:41:38:a9:06:c9:42:a9:1f:4c:25:d9:3b:f9:bf:
e7:ad:65:5b:76:b7:44:44:8c:24:75:ae:61:75:d6:3b:d1:b5:
d8:88:16:08:49:f1:d2:d3:48:55:de:7b:d4:40:b5:69:54:2c:
fa:a6:6f:21:57:d4:fb:51:08:0b:7e:c1:39:70:48:4e:ee:5d:
17:b6:c0:ba:b1:5b:31:55:61:01:2f:24:8c:1d:b9:81:ad:60:
4d:4a:55:c2:03:90:d2:7e:5b:7c:a2:04:93:4e:9d:a4:fe:26:
16:d3:d8:25:10:b0:ba:44:72:a7:18:38:41:cf:df:27:85:24:
73:d2:7e:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYu4hhgxO16L3TPrhxV0PD9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMxMTEwMDkxNzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWVjODcwM2M1MGU4NjY0ZGY3MWViZWNkM2YwMDJhODg5NGRiMDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurJvLBimNoYRYdpAOgTxjFfaqxeH
e3jStRaS1cIuWWBOvxeRsyxVin11VVLfTpwrMVgyOHg5TxVb5LC1RYdqyj6Pfb6e
/VW/5J/pDxTG1zvGU33CAqx+VToZoQhiP5ruUWc9cAQQecv8zwkiAn2E9GKNds5z
Hg3WXj7PyQQpzhEp1WhxUczcEJymwkEicfD9cRbclYHMEdHE4cSVq7CFyq+t+cCl
NsDKYqGAnzYpLRcRzrTRvoIAbWKM2VcBSSaZactOtRqpAtRL10Ydba+jzcKYqmS6
bUZeqj2ujLCBx49fAC6CuXJ+Jd8/WkOcdaCbqtdBZMTI0Hu3T8NJ0YETRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBnshwPFDoZk33Hr7NPwAqiJTbAoMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvR2V5SEE4VU9obVRmY2V2czBfQUNxSWxOc0NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUhxMA0G
CSqGSIb3DQEBCwUAA4IBAQCY8ShFKQ6N59TBoB+eYsSeH+kdjutuldmEK4b9aIci
dxueVWLjM6Lz/5Ccf3/uDM1QRrETyIDRDrOJe8izp5Ua8ZcfAIpoIwkt3JHVqMX3
x41MH3srpitDs1F4l2+mCpgzBEfQ4W3SdMhhvTNW+eogLBzi6kGWcw1Mot/0riyf
6yO+QTipBslCqR9MJdk7+b/nrWVbdrdERIwkda5hddY70bXYiBYISfHS00hV3nvU
QLVpVCz6pm8hV9T7UQgLfsE5cEhO7l0XtsC6sVsxVWEBLySMHbmBrWBNSlXCA5DS
flt8ogSTTp2k/iYW09glELC6RHKnGDhBz98nhSRz0n5g
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org