Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8IHNZKq3wzTlqOkEZu4-3_2Yn-E.roa
File: 8IHNZKq3wzTlqOkEZu4-3_2Yn-E.roa (raw, json)
Hash identifier: Xsrv/CYgSf1iR0Ua++4yMLq+ow2ueqTk9KPrDck9NwY=
Subject key identifier: F0:81:CD:64:AA:B7:C3:34:E5:A8:E9:04:66:EE:3E:DF:FD:98:9F:E1
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018DC47A8B7594DDBC0C27BEEE3744833836
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8IHNZKq3wzTlqOkEZu4-3_2Yn-E.roa
Signing time: Tue 20 Feb 2024 03:06:21 +0000
ROA not before: Tue 20 Feb 2024 03:06:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 12:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c4:7a:8b:75:94:dd:bc:0c:27:be:ee:37:44:83:38:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 20 03:06:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f081cd64aab7c334e5a8e90466ee3edffd989fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:43:a5:93:8a:18:2c:6e:5a:c7:f7:ba:e2:eb:
34:34:0e:0c:d8:f3:55:8d:de:b6:e6:81:d9:50:f4:
74:3c:a8:13:95:26:f9:9c:ad:b5:03:88:35:95:65:
6a:43:8a:37:d8:8c:dd:a3:eb:72:c0:f5:49:e2:36:
c7:67:f0:db:3e:01:6b:a6:93:f4:e2:f9:e5:3c:f2:
c8:0d:e3:07:b8:58:03:ee:ef:77:71:47:24:c2:12:
ed:f6:13:aa:d9:26:8e:85:8d:bf:37:bf:5c:e1:1c:
03:a1:ff:f9:d3:47:91:b5:4a:f2:28:73:eb:3d:c9:
00:29:41:e9:e2:77:2a:40:87:bf:47:06:59:14:87:
f2:9c:72:08:26:73:27:a3:43:34:bb:75:be:a0:64:
f1:71:15:bd:43:ea:4c:94:45:a3:08:4d:20:1e:66:
09:02:c4:0a:dd:27:db:75:66:a4:71:aa:34:59:f3:
aa:24:39:45:ce:e0:9a:fc:79:83:81:3c:3b:60:a0:
e0:90:e6:a5:67:a7:32:a9:4c:2c:0d:38:24:2d:1f:
c1:7c:1d:f1:2c:4c:3b:61:fb:1c:e4:d3:bd:bb:2f:
6b:54:b4:e3:a8:c5:fa:c5:49:8b:c8:b6:5c:97:2e:
83:db:f2:b1:03:5b:08:2f:d9:9a:f1:97:7b:00:33:
4d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:81:CD:64:AA:B7:C3:34:E5:A8:E9:04:66:EE:3E:DF:FD:98:9F:E1
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8IHNZKq3wzTlqOkEZu4-3_2Yn-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
63:21:5a:75:21:09:ca:4d:a2:af:a7:17:1d:4b:6a:47:b6:96:
9b:c6:8f:e0:5a:20:f9:f3:8a:b2:e3:1a:23:83:a6:83:3f:94:
06:66:31:67:45:b0:c3:19:56:60:01:ce:df:19:11:3d:a7:eb:
43:c9:a7:d8:d2:fa:af:bc:22:9c:af:54:cb:18:bc:ef:51:ed:
1f:cf:5e:40:0c:cf:26:7a:f0:20:d1:b5:d1:58:96:2b:66:dc:
34:9f:55:30:16:30:f9:f2:a6:35:b4:d8:ad:e4:44:95:1b:2a:
e1:81:e2:1a:e5:ee:d9:c2:c8:c7:6b:68:fa:0a:0b:09:f8:8f:
98:7e:4b:29:83:70:63:56:98:e1:06:d6:db:6b:fa:8d:ba:ca:
2e:a2:52:81:66:6d:92:36:5c:80:40:fe:31:b5:31:7c:21:55:
80:60:4b:61:a1:61:10:5c:88:72:48:15:30:aa:42:2d:8b:3b:
96:af:b7:40:36:98:15:70:f7:60:35:79:a5:f4:31:f3:b8:26:
f9:46:1a:a3:24:fd:10:c0:0f:3f:1c:fc:98:d4:f8:57:4e:47:
99:7c:5e:99:10:13:27:de:01:da:9f:a7:00:eb:ac:7e:ec:23:
77:87:17:b8:cf:08:9a:15:08:5c:14:38:b8:4d:2d:3d:ff:db:
78:c7:31:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3Eeot1lN28DCe+7jdEgzg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjQwMjIwMDMwNjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDgxY2Q2NGFhYjdjMzM0ZTVhOGU5MDQ2NmVlM2VkZmZkOTg5ZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EOlk4oYLG5ax/e64us0NA4M2PNV
jd625oHZUPR0PKgTlSb5nK21A4g1lWVqQ4o32Izdo+tywPVJ4jbHZ/DbPgFrppP0
4vnlPPLIDeMHuFgD7u93cUckwhLt9hOq2SaOhY2/N79c4RwDof/500eRtUryKHPr
PckAKUHp4ncqQIe/RwZZFIfynHIIJnMno0M0u3W+oGTxcRW9Q+pMlEWjCE0gHmYJ
AsQK3SfbdWakcao0WfOqJDlFzuCa/HmDgTw7YKDgkOalZ6cyqUwsDTgkLR/BfB3x
LEw7Yfsc5NO9uy9rVLTjqMX6xUmLyLZcly6D2/KxA1sIL9ma8Zd7ADNNywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPCBzWSqt8M05ajpBGbuPt/9mJ/hMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvOElITlpLcTN3elRscU9rRVp1NC0zXzJZbi1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXouMA0G
CSqGSIb3DQEBCwUAA4IBAQBjIVp1IQnKTaKvpxcdS2pHtpabxo/gWiD584qy4xoj
g6aDP5QGZjFnRbDDGVZgAc7fGRE9p+tDyafY0vqvvCKcr1TLGLzvUe0fz15ADM8m
evAg0bXRWJYrZtw0n1UwFjD58qY1tNit5ESVGyrhgeIa5e7ZwsjHa2j6CgsJ+I+Y
fkspg3BjVpjhBtbba/qNusouolKBZm2SNlyAQP4xtTF8IVWAYEthoWEQXIhySBUw
qkItizuWr7dANpgVcPdgNXml9DHzuCb5RhqjJP0QwA8/HPyY1PhXTkeZfF6ZEBMn
3gHan6cA66x+7CN3hxe4zwiaFQhcFDi4TS09/9t4xzF9
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org