Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/jCd5u2H4HwzIHFXESZFko2NG5Ac.roa
File: jCd5u2H4HwzIHFXESZFko2NG5Ac.roa (raw, json)
Hash identifier: mdxYsIhsOPGT8JYzVeRwgmkDEMN234JycZEj08Mz7MY=
Subject key identifier: 8C:27:79:BB:61:F8:1F:0C:C8:1C:55:C4:49:91:64:A3:63:46:E4:07
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0185E4B2FCB70743D62984ECF82CC695DAC5
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/jCd5u2H4HwzIHFXESZFko2NG5Ac.roa
Signing time: Tue 24 Jan 2023 16:53:33 +0000
ROA not before: Tue 24 Jan 2023 16:53:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 109.72.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 16:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:b2:fc:b7:07:43:d6:29:84:ec:f8:2c:c6:95:da:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 24 16:53:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c2779bb61f81f0cc81c55c4499164a36346e407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:30:c0:12:76:04:b8:09:ea:15:91:ea:3f:
b0:82:0b:60:5c:7e:59:47:30:7c:48:23:6c:6a:7f:
9d:2c:1c:d4:a0:09:68:cc:0d:0b:4f:41:d3:fa:3a:
25:d0:45:25:e7:cb:96:b6:49:ef:17:95:f9:a2:a0:
1a:3c:0e:25:6e:7a:f6:39:3a:82:85:fd:1e:fc:1f:
49:8a:f9:03:7a:d0:2e:a4:95:bd:d0:6d:df:fb:25:
42:57:fd:9a:f6:e5:84:4c:b0:86:b0:9f:71:0f:95:
40:1d:2b:0e:15:80:5f:7f:e0:b9:4a:35:5d:ac:93:
73:fe:d1:9f:45:69:9c:ec:aa:07:40:16:49:67:83:
64:b8:8e:ac:67:ab:3b:d3:3a:89:ca:9f:c6:30:e2:
7a:06:03:c5:a7:78:25:6d:43:bc:43:3b:79:10:e7:
98:d4:57:e4:64:ad:15:a7:3e:f4:db:61:1c:b1:31:
e5:d1:44:a9:00:8d:af:47:4d:99:10:c6:81:98:45:
3c:a4:bc:4a:6c:21:c3:77:bd:3d:ba:a6:eb:20:46:
e1:6b:fb:a3:f9:4d:1b:03:72:4e:67:e2:14:0a:81:
63:2a:b3:30:85:bc:d1:67:a5:e0:43:b6:f3:98:27:
8e:37:0b:7c:8b:99:dc:29:99:21:a4:7f:56:ab:34:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:27:79:BB:61:F8:1F:0C:C8:1C:55:C4:49:91:64:A3:63:46:E4:07
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/jCd5u2H4HwzIHFXESZFko2NG5Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.126.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:91:f0:ef:6f:3d:a1:ee:07:07:f8:bf:ce:7c:29:76:a7:7f:
dc:2f:bf:f0:85:3e:cb:be:1a:f6:4e:41:17:01:de:79:df:ab:
3e:04:0e:ca:c2:c5:e4:0e:83:8f:83:be:30:c4:43:24:aa:72:
a1:65:81:65:e4:3c:b4:f8:0f:7f:96:81:c7:23:0d:c2:5e:36:
c9:5c:70:24:ea:bb:17:31:1f:1a:fd:78:b6:b7:c1:bd:96:f1:
5f:05:e6:6a:67:34:09:a2:bc:6d:a4:30:5d:fd:69:a8:bd:3c:
38:e9:54:71:c5:30:21:0b:7c:f8:78:ff:70:b9:4b:2f:00:80:
05:ab:11:0b:4b:95:c1:08:e5:46:19:51:5a:a3:8f:2c:6b:24:
52:39:6f:40:9c:07:5a:93:de:76:12:2e:87:71:74:29:e7:04:
0f:df:6f:78:17:3b:40:b1:a2:c4:73:0d:29:bc:de:78:aa:69:
e9:f3:13:92:92:79:cd:da:fd:72:f9:02:82:b1:2d:8c:ee:f2:
51:d0:59:9c:cf:d7:1d:9b:97:1e:f7:28:41:d6:de:81:19:c6:
14:3f:60:6c:12:53:77:d0:3a:1d:c9:21:b8:17:52:a6:c3:bf:
cf:bc:f8:f0:4e:58:dc:56:c9:c5:3e:55:ea:3e:bd:44:8e:19:
cf:3c:02:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXksvy3B0PWKYTs+CzGldrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwMTI0MTY1MzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzI3NzliYjYxZjgxZjBjYzgxYzU1YzQ0OTkxNjRhMzYzNDZlNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TUwwBJ2BLgJ6hWR6j+wggtgXH5Z
RzB8SCNsan+dLBzUoAlozA0LT0HT+jol0EUl58uWtknvF5X5oqAaPA4lbnr2OTqC
hf0e/B9JivkDetAupJW90G3f+yVCV/2a9uWETLCGsJ9xD5VAHSsOFYBff+C5SjVd
rJNz/tGfRWmc7KoHQBZJZ4NkuI6sZ6s70zqJyp/GMOJ6BgPFp3glbUO8Qzt5EOeY
1FfkZK0Vpz7022EcsTHl0USpAI2vR02ZEMaBmEU8pLxKbCHDd709uqbrIEbha/uj
+U0bA3JOZ+IUCoFjKrMwhbzRZ6XgQ7bzmCeONwt8i5ncKZkhpH9WqzSc0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIwnebth+B8MyBxVxEmRZKNjRuQHMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvakNkNXUySDRId3pJSEZYRVNaRmtvMk5HNUFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh+MA0G
CSqGSIb3DQEBCwUAA4IBAQBOkfDvbz2h7gcH+L/OfCl2p3/cL7/whT7Lvhr2TkEX
Ad5536s+BA7KwsXkDoOPg74wxEMkqnKhZYFl5Dy0+A9/loHHIw3CXjbJXHAk6rsX
MR8a/Xi2t8G9lvFfBeZqZzQJorxtpDBd/WmovTw46VRxxTAhC3z4eP9wuUsvAIAF
qxELS5XBCOVGGVFao48sayRSOW9AnAdak952Ei6HcXQp5wQP3294FztAsaLEcw0p
vN54qmnp8xOSknnN2v1y+QKCsS2M7vJR0Fmcz9cdm5ce9yhB1t6BGcYUP2BsElN3
0DodySG4F1Kmw7/PvPjwTljcVsnFPlXqPr1EjhnPPAIw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org