Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/1nsm_9C9u2M9K-hqQ-iO0XlQL1w.roa
File: 1nsm_9C9u2M9K-hqQ-iO0XlQL1w.roa (raw, json)
Hash identifier: bt2nEGCVwoyuD0YpIVVjGll4+c6VyilrUmUopf6usZI=
Subject key identifier: D6:7B:26:FF:D0:BD:BB:63:3D:2B:E8:6A:43:E8:8E:D1:79:50:2F:5C
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018C3A8EA1ABC0322F3029595D034E289E16
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/1nsm_9C9u2M9K-hqQ-iO0XlQL1w.roa
Signing time: Tue 05 Dec 2023 15:17:55 +0000
ROA not before: Tue 05 Dec 2023 15:17:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 109.206.250.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 05 Dec 2023 15:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:8e:a1:ab:c0:32:2f:30:29:59:5d:03:4e:28:9e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 5 15:17:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d67b26ffd0bdbb633d2be86a43e88ed179502f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:8a:e9:87:fe:14:ba:27:2a:b7:35:45:d5:
62:ef:71:e1:67:a2:44:82:eb:b4:3d:cc:9e:b0:58:
94:ae:1d:f2:9b:3e:d6:41:0a:8b:e6:d9:f3:80:13:
2b:49:21:7d:41:f9:7b:b3:34:90:c3:48:3e:50:5a:
40:be:ff:67:f0:26:76:e5:f2:2e:35:8d:5c:5f:88:
80:0a:90:d7:33:c8:b2:80:5c:13:98:bb:fa:af:38:
af:4b:98:4a:b1:d0:be:b5:a1:23:52:0f:63:4f:33:
f9:9a:94:13:bc:fa:ed:18:64:0e:62:f6:91:a9:43:
75:b9:26:0e:7a:a9:fd:2b:38:4b:8e:b0:0c:51:2d:
76:cd:9f:ec:bc:7e:54:66:ce:fc:a7:85:cc:24:b5:
a2:cd:9f:6b:1d:93:6d:21:eb:f0:17:ae:2f:14:c2:
d6:32:ac:67:54:80:2c:75:2d:c2:e2:a9:46:6e:7e:
fa:00:90:dd:46:a0:ce:c0:f0:f4:7f:2f:99:f0:b2:
04:9f:16:f3:df:84:b3:8e:e0:91:9c:ea:e3:ae:f1:
e7:a9:14:c3:7d:4b:4b:98:9b:2f:89:6e:b3:19:d7:
b2:fd:95:1b:4d:f9:08:50:23:44:a6:42:de:a5:f1:
ea:a1:1c:82:6d:39:a1:bd:e9:ba:57:19:ef:bd:88:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7B:26:FF:D0:BD:BB:63:3D:2B:E8:6A:43:E8:8E:D1:79:50:2F:5C
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/1nsm_9C9u2M9K-hqQ-iO0XlQL1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.250.0/23
Signature Algorithm: sha256WithRSAEncryption
03:cc:83:b6:c8:aa:e0:fd:55:34:41:e8:62:79:78:ce:36:28:
b9:ae:fe:bd:7b:9f:d6:73:f5:4f:3a:bd:5f:ab:dd:d7:d6:97:
ff:26:7b:57:50:38:77:a9:7a:1f:9a:c1:de:11:51:f5:74:f5:
40:57:95:c8:a8:7d:c5:df:09:47:30:3c:3e:1d:0e:ee:1a:83:
48:9c:cf:9b:4a:46:d9:9f:f4:e0:d0:31:bd:51:db:ea:1b:26:
e9:fb:11:54:50:a0:cf:e4:45:c8:9b:d4:46:1c:cb:27:9c:76:
bb:b9:9e:90:97:3e:4f:84:ed:a6:45:bd:17:01:39:33:c0:ab:
c3:77:90:34:b7:79:9c:90:ac:53:56:02:17:5b:04:12:8d:eb:
21:62:14:22:7a:e6:c1:f3:08:c1:01:a1:7b:11:8b:1e:4e:67:
ef:8c:6c:69:18:b8:91:c3:f1:2e:42:13:e2:7a:96:b0:9e:1e:
30:1c:90:eb:93:95:ab:fc:61:b7:44:90:ea:97:c3:bc:14:dd:
ba:41:8e:cb:b8:3a:e7:b8:44:dc:63:f5:73:dd:e2:54:80:f4:
82:07:81:85:36:ef:1b:58:b8:15:94:ec:7b:a9:a4:d9:1b:b0:
47:32:9d:62:7a:9a:ed:c9:2b:18:d2:7c:79:7f:3c:94:8c:10:
a2:7f:04:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYw6jqGrwDIvMClZXQNOKJ4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjMxMjA1MTUxNzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjdiMjZmZmQwYmRiYjYzM2QyYmU4NmE0M2U4OGVkMTc5NTAyZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsiK6Yf+FLonKrc1RdVi73HhZ6JE
guu0PcyesFiUrh3ymz7WQQqL5tnzgBMrSSF9Qfl7szSQw0g+UFpAvv9n8CZ25fIu
NY1cX4iACpDXM8iygFwTmLv6rzivS5hKsdC+taEjUg9jTzP5mpQTvPrtGGQOYvaR
qUN1uSYOeqn9KzhLjrAMUS12zZ/svH5UZs78p4XMJLWizZ9rHZNtIevwF64vFMLW
MqxnVIAsdS3C4qlGbn76AJDdRqDOwPD0fy+Z8LIEnxbz34SzjuCRnOrjrvHnqRTD
fUtLmJsviW6zGdey/ZUbTfkIUCNEpkLepfHqoRyCbTmhvem6VxnvvYhFKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZ7Jv/QvbtjPSvoakPojtF5UC9cMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvMW5zbV85Qzl1Mk05Sy1ocVEtaU8wWGxRTDF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbc76MA0G
CSqGSIb3DQEBCwUAA4IBAQADzIO2yKrg/VU0QehieXjONii5rv69e5/Wc/VPOr1f
q93X1pf/JntXUDh3qXofmsHeEVH1dPVAV5XIqH3F3wlHMDw+HQ7uGoNInM+bSkbZ
n/Tg0DG9UdvqGybp+xFUUKDP5EXIm9RGHMsnnHa7uZ6Qlz5PhO2mRb0XATkzwKvD
d5A0t3mckKxTVgIXWwQSjeshYhQieubB8wjBAaF7EYseTmfvjGxpGLiRw/EuQhPi
epawnh4wHJDrk5Wr/GG3RJDql8O8FN26QY7LuDrnuETcY/Vz3eJUgPSCB4GFNu8b
WLgVlOx7qaTZG7BHMp1ieprtySsY0nx5fzyUjBCifwRd
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org