Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7ZZhFydY1HyVE-FYap86XhVzpAA.roa
File: 7ZZhFydY1HyVE-FYap86XhVzpAA.roa (raw, json)
Hash identifier: PEDV95Gtm3illrJvJgSHcYLAu7BijCsjJpdB8y3Or3o=
Subject key identifier: ED:96:61:17:27:58:D4:7C:95:13:E1:58:6A:9F:3A:5E:15:73:A4:00
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01856ED4E032F3413F02C5F3D442049B5E7B
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7ZZhFydY1HyVE-FYap86XhVzpAA.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 109.122.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e0:32:f3:41:3f:02:c5:f3:d4:42:04:9b:5e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed9661172758d47c9513e1586a9f3a5e1573a400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:08:fc:c7:33:f7:b9:ac:81:98:e4:b4:0d:
a5:ba:1d:94:a6:54:24:c6:9c:34:e1:75:2f:24:95:
83:6b:11:55:f2:61:73:f3:b5:09:91:09:28:6b:3b:
e7:dd:89:1f:9d:a4:42:aa:27:63:56:8d:f5:fd:4d:
56:a7:c0:62:4a:f0:69:4d:b6:6d:c9:c0:43:f9:79:
51:8d:c7:15:31:26:0f:f9:91:bd:50:fd:a7:33:f8:
23:9f:ef:a4:1b:a7:ad:89:a2:3d:68:12:7a:ec:b2:
bf:b8:34:97:8c:6e:d3:37:05:d2:ba:a0:b8:81:4f:
3f:2e:73:79:49:dc:4d:f2:55:94:e1:fc:d9:9a:7f:
a0:ad:0a:ae:fa:a1:e7:6c:d8:98:d3:ca:8e:63:63:
2c:a2:7c:2e:2b:2a:64:71:59:cb:db:22:3e:62:b0:
8c:11:9e:e4:cd:ad:b5:b1:3c:ee:c6:2f:f1:94:b5:
53:5c:4c:1e:d6:65:c3:d8:6e:c9:0f:68:2f:56:74:
4e:39:b5:24:4a:f2:89:3b:ca:34:2e:6b:4e:ce:96:
53:e2:3d:bf:99:ca:0f:cb:da:f0:ba:61:09:42:43:
ed:58:f2:9d:12:16:98:f4:9c:22:0b:01:c5:7c:9c:
2f:01:60:dd:a0:33:00:cd:52:1e:89:5d:59:76:02:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:61:17:27:58:D4:7C:95:13:E1:58:6A:9F:3A:5E:15:73:A4:00
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7ZZhFydY1HyVE-FYap86XhVzpAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:45:18:24:1a:ea:ca:30:48:d4:c3:a0:57:1a:fd:15:72:79:
81:7a:40:a1:26:4e:3d:1d:55:a9:f4:6e:ff:23:ee:d5:1c:f3:
f2:66:48:b4:bc:1e:aa:3c:bc:48:20:c9:68:65:aa:f7:88:ef:
55:2b:aa:cd:76:21:fb:b4:e7:be:40:bb:35:22:d5:7a:ba:29:
16:c0:f9:26:77:ee:13:7f:9b:92:90:26:70:44:a5:96:87:94:
f8:4e:9f:cc:06:3f:f7:0b:6a:80:5d:5a:e0:8d:f6:12:fc:df:
b7:05:45:8e:a6:2f:0e:b7:29:89:f6:94:19:92:86:5e:03:ea:
e6:e2:de:80:97:b3:1d:5c:3b:a7:40:e3:66:f7:a5:18:57:a7:
72:41:ab:ec:59:7e:1f:97:33:c2:7c:fc:f7:94:a8:c7:81:3c:
e0:55:77:53:e3:b6:59:66:d7:19:8e:77:7b:1e:d4:57:b6:62:
eb:d8:81:1e:d0:31:a2:0e:6a:7c:5c:a1:1a:b7:51:d2:1c:d0:
9f:b5:35:b6:49:79:93:7a:cf:e6:b3:b4:e8:a5:4c:ee:51:f9:
8a:43:b1:61:92:26:85:36:04:6f:7a:6e:34:e3:52:8c:49:51:
ec:22:c3:c9:ac:09:5d:d0:7a:9b:1f:45:87:6d:56:65:30:1f:
a7:2d:26:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1OAy80E/AsXz1EIEm157MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwMTAxMTkzNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDk2NjExNzI3NThkNDdjOTUxM2UxNTg2YTlmM2E1ZTE1NzNhNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO4I/Mcz97msgZjktA2luh2UplQk
xpw04XUvJJWDaxFV8mFz87UJkQkoazvn3YkfnaRCqidjVo31/U1Wp8BiSvBpTbZt
ycBD+XlRjccVMSYP+ZG9UP2nM/gjn++kG6etiaI9aBJ67LK/uDSXjG7TNwXSuqC4
gU8/LnN5SdxN8lWU4fzZmn+grQqu+qHnbNiY08qOY2MsonwuKypkcVnL2yI+YrCM
EZ7kza21sTzuxi/xlLVTXEwe1mXD2G7JD2gvVnROObUkSvKJO8o0LmtOzpZT4j2/
mcoPy9rwumEJQkPtWPKdEhaY9JwiCwHFfJwvAWDdoDMAzVIeiV1ZdgI+OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO2WYRcnWNR8lRPhWGqfOl4Vc6QAMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvN1paaEZ5ZFkxSHlWRS1GWWFwODZYaFZ6cEFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXovMA0G
CSqGSIb3DQEBCwUAA4IBAQAvRRgkGurKMEjUw6BXGv0VcnmBekChJk49HVWp9G7/
I+7VHPPyZki0vB6qPLxIIMloZar3iO9VK6rNdiH7tOe+QLs1ItV6uikWwPkmd+4T
f5uSkCZwRKWWh5T4Tp/MBj/3C2qAXVrgjfYS/N+3BUWOpi8OtymJ9pQZkoZeA+rm
4t6Al7MdXDunQONm96UYV6dyQavsWX4flzPCfPz3lKjHgTzgVXdT47ZZZtcZjnd7
HtRXtmLr2IEe0DGiDmp8XKEat1HSHNCftTW2SXmTes/ms7TopUzuUfmKQ7FhkiaF
NgRvem4041KMSVHsIsPJrAld0HqbH0WHbVZlMB+nLSaz
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org