Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/lczpweWV1oKcglq2Z1AtEpBJdT8.roa
File: lczpweWV1oKcglq2Z1AtEpBJdT8.roa (raw, json)
Hash identifier: B3c6oN3ubP2c7rEVMhgbtoYVVOqps8zXxXA0bHNB/l0=
Subject key identifier: 95:CC:E9:C1:E5:95:D6:82:9C:82:5A:B6:67:50:2D:12:90:49:75:3F
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018D51D2184610A27ABED886B6855D3AE406
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/lczpweWV1oKcglq2Z1AtEpBJdT8.roa
Signing time: Sun 28 Jan 2024 20:45:39 +0000
ROA not before: Sun 28 Jan 2024 20:45:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200080
IP address blocks: 109.72.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 11:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:51:d2:18:46:10:a2:7a:be:d8:86:b6:85:5d:3a:e4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 28 20:45:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95cce9c1e595d6829c825ab667502d129049753f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:c1:ba:fc:9e:50:2a:e2:1d:f1:45:eb:af:
63:51:d5:a8:b9:53:a2:a4:12:aa:b2:b1:c7:b5:1d:
94:47:58:a5:00:00:0f:a0:c1:1a:36:9c:ca:ba:60:
4d:67:c9:aa:19:34:6e:87:49:f1:a7:02:51:b3:ec:
0a:7f:bf:64:6f:61:27:33:54:92:ac:ea:88:5a:67:
70:9b:ee:75:3c:49:83:c8:b3:7b:c1:ea:4a:84:d4:
c7:6e:46:1a:ae:0f:df:29:2d:63:6e:35:75:f7:1f:
96:6a:b5:68:a9:79:07:c0:45:b2:ca:2b:c5:70:a9:
18:7a:0a:71:75:e2:14:de:d3:ca:ac:cf:1e:f3:6a:
0e:fb:71:84:91:ba:88:6e:bf:75:32:13:6b:d0:b6:
dd:74:1c:1f:d9:64:ba:ad:ab:87:72:99:32:1d:38:
e6:12:db:26:c8:42:1d:ff:98:49:d7:fb:06:fe:fc:
59:f1:b4:7f:14:76:14:3f:94:97:62:ed:e2:a7:81:
6c:95:e2:86:c9:80:d6:d0:27:6d:ea:fe:98:c4:9a:
cd:c7:8b:ac:b0:3f:fa:30:0d:5e:9e:23:fc:38:3f:
97:a0:20:10:a4:ad:07:6b:d4:f7:4e:dc:82:52:41:
5c:84:0f:af:1b:7b:39:ce:61:c3:0b:45:03:d6:18:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:E9:C1:E5:95:D6:82:9C:82:5A:B6:67:50:2D:12:90:49:75:3F
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/lczpweWV1oKcglq2Z1AtEpBJdT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:29:d1:29:12:7b:14:34:80:16:b6:e4:fa:7b:97:03:70:f4:
b8:ec:23:bf:63:f6:57:7d:eb:94:f1:46:c7:2d:a0:a8:f7:b5:
53:87:07:2f:73:33:46:e9:81:a7:db:d2:18:39:e6:fc:50:80:
c2:b0:b3:8e:9b:19:4f:ba:36:83:45:8f:94:60:8f:45:72:63:
1c:be:71:86:aa:67:72:92:68:18:97:8a:62:e5:af:b8:a7:01:
de:a8:38:87:1c:62:92:b9:df:82:0e:0c:d5:98:26:76:94:c0:
75:63:20:cd:b0:2e:fc:c7:eb:af:d9:0f:eb:7a:f6:7f:36:58:
d9:85:38:90:06:e0:3d:0e:37:fa:4a:91:23:6a:50:0a:d0:1b:
ce:30:96:67:b7:31:fb:01:81:ff:fb:01:53:86:c1:96:b5:88:
97:bb:b3:fc:0c:cd:3c:53:0c:c6:2d:c8:bc:de:88:2c:4c:8e:
1d:91:81:81:58:79:9c:85:3f:d3:de:00:c6:9c:08:7a:cd:66:
aa:e8:6e:38:55:cb:f7:b2:88:7b:78:25:35:ec:c0:b1:60:1b:
f5:ae:6b:3e:5d:b5:3d:39:f0:97:07:56:7c:8a:02:63:50:f5:
2a:10:ad:16:de:dd:c6:89:6a:a6:f7:d2:c6:47:31:a9:b5:56:
e0:3c:eb:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1R0hhGEKJ6vtiGtoVdOuQGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjQwMTI4MjA0NTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWNjZTljMWU1OTVkNjgyOWM4MjVhYjY2NzUwMmQxMjkwNDk3NTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtljBuvyeUCriHfFF669jUdWouVOi
pBKqsrHHtR2UR1ilAAAPoMEaNpzKumBNZ8mqGTRuh0nxpwJRs+wKf79kb2EnM1SS
rOqIWmdwm+51PEmDyLN7wepKhNTHbkYarg/fKS1jbjV19x+WarVoqXkHwEWyyivF
cKkYegpxdeIU3tPKrM8e82oO+3GEkbqIbr91MhNr0LbddBwf2WS6rauHcpkyHTjm
EtsmyEId/5hJ1/sG/vxZ8bR/FHYUP5SXYu3ip4FsleKGyYDW0Cdt6v6YxJrNx4us
sD/6MA1eniP8OD+XoCAQpK0Ha9T3TtyCUkFchA+vG3s5zmHDC0UD1hixMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJXM6cHlldaCnIJatmdQLRKQSXU/MB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvbGN6cHdlV1Yxb0tjZ2xxMloxQXRFcEJKZFQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh0MA0G
CSqGSIb3DQEBCwUAA4IBAQClKdEpEnsUNIAWtuT6e5cDcPS47CO/Y/ZXfeuU8UbH
LaCo97VThwcvczNG6YGn29IYOeb8UIDCsLOOmxlPujaDRY+UYI9FcmMcvnGGqmdy
kmgYl4pi5a+4pwHeqDiHHGKSud+CDgzVmCZ2lMB1YyDNsC78x+uv2Q/revZ/NljZ
hTiQBuA9Djf6SpEjalAK0BvOMJZntzH7AYH/+wFThsGWtYiXu7P8DM08UwzGLci8
3ogsTI4dkYGBWHmchT/T3gDGnAh6zWaq6G44Vcv3soh7eCU17MCxYBv1rms+XbU9
OfCXB1Z8igJjUPUqEK0W3t3GiWqm99LGRzGptVbgPOt4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org