Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/G6smgvM4EMiyHkXAQkUb1ZOeG34.roa
File: G6smgvM4EMiyHkXAQkUb1ZOeG34.roa (raw, json)
Hash identifier: sY0Y6J04Pu7eO2O3o6L7Xc/vFJy0iVVpIiK/PWuKEjg=
Subject key identifier: 1B:AB:26:82:F3:38:10:C8:B2:1E:45:C0:42:45:1B:D5:93:9E:1B:7E
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018B20463C9D63352FA4F996D6CF2287AA8D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/G6smgvM4EMiyHkXAQkUb1ZOeG34.roa
Signing time: Wed 11 Oct 2023 19:45:55 +0000
ROA not before: Wed 11 Oct 2023 19:45:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 109.122.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:20:46:3c:9d:63:35:2f:a4:f9:96:d6:cf:22:87:aa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 11 19:45:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bab2682f33810c8b21e45c042451bd5939e1b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1f:42:ed:48:d8:bc:6a:d1:4c:ea:3a:a7:24:
8d:ff:50:f8:7a:9f:ed:11:59:a7:de:26:7b:b3:66:
dc:38:13:70:ad:96:a1:30:6e:19:65:f1:e4:41:fc:
16:1f:9a:a1:09:28:35:33:80:bb:b1:23:2b:d1:11:
c6:76:d1:40:9f:4b:e9:d1:11:64:be:0c:62:d0:ae:
dd:ac:e7:35:ee:0c:77:97:78:ec:06:1b:db:f2:15:
d7:49:8d:94:23:0d:62:2b:4f:18:6d:d8:20:72:6d:
8d:24:1d:5f:2d:ed:01:c0:ee:d7:7e:c3:05:35:72:
ee:26:a0:b3:c3:25:0b:e5:28:93:18:88:a0:8c:b7:
c8:86:5c:3b:d4:4b:f9:3d:bd:3b:1f:53:0f:19:e3:
0f:d4:e8:c0:44:00:83:ef:ce:37:04:ee:52:b8:44:
f5:e9:93:b8:6c:4c:c2:bb:c5:82:0d:28:07:7e:0d:
6c:42:96:47:b2:98:01:25:1f:72:fd:12:73:b6:e2:
fa:76:d2:a5:7f:a4:fd:5b:ef:ec:a2:cb:6b:a7:68:
bc:08:d9:19:f1:1e:69:81:61:44:49:b5:af:13:62:
5a:c3:a7:83:6c:ec:a2:cb:6d:f0:71:df:b9:d7:9d:
8d:b8:6d:3b:02:09:26:7b:b2:26:92:15:61:16:75:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AB:26:82:F3:38:10:C8:B2:1E:45:C0:42:45:1B:D5:93:9E:1B:7E
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/G6smgvM4EMiyHkXAQkUb1ZOeG34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.47.0/24
Signature Algorithm: sha256WithRSAEncryption
80:af:4c:01:ec:48:6b:15:bb:12:3c:74:d1:7e:c5:da:3c:42:
d3:eb:bd:1a:d2:27:ed:ca:12:44:f5:30:cc:94:55:63:2b:1d:
3e:40:e4:57:c2:f1:ff:37:b7:87:23:b3:b6:9b:5e:54:62:31:
23:9a:6b:6f:20:13:53:9c:ae:19:b2:1b:e1:fc:be:05:a2:bc:
ec:32:dd:bd:ec:1b:87:ee:49:23:79:00:75:59:f5:c7:32:5a:
62:fc:81:cb:63:ae:3b:3f:f9:1f:e5:0f:0d:5a:7d:b7:4c:1b:
55:79:b3:a8:29:9e:07:3e:8d:03:86:bb:7a:1b:8e:a3:f7:a7:
20:1d:83:22:49:10:0e:40:23:2c:f9:fa:8d:91:66:fa:3d:16:
8b:a0:ac:73:6f:f3:88:80:51:e4:c4:fe:32:78:fb:32:62:5f:
9e:54:aa:44:29:0f:c6:d8:a5:f0:42:4a:cc:e1:6c:0e:69:38:
d4:42:8b:b2:0d:f2:72:1b:35:0d:3e:f7:ec:d0:b2:d9:82:47:
a6:97:f4:30:f4:cf:1a:85:0a:7e:c1:04:82:5e:41:cd:61:42:
fe:07:98:e6:f2:91:90:68:70:b2:83:a4:cd:bb:ab:39:d2:f5:
46:61:28:5d:6e:80:0b:c2:74:47:77:52:cb:d5:89:9f:64:dc:
24:f1:58:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsgRjydYzUvpPmW1s8ih6qNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMxMDExMTk0NTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmFiMjY4MmYzMzgxMGM4YjIxZTQ1YzA0MjQ1MWJkNTkzOWUxYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx9C7UjYvGrRTOo6pySN/1D4ep/t
EVmn3iZ7s2bcOBNwrZahMG4ZZfHkQfwWH5qhCSg1M4C7sSMr0RHGdtFAn0vp0RFk
vgxi0K7drOc17gx3l3jsBhvb8hXXSY2UIw1iK08Ybdggcm2NJB1fLe0BwO7XfsMF
NXLuJqCzwyUL5SiTGIigjLfIhlw71Ev5Pb07H1MPGeMP1OjARACD7843BO5SuET1
6ZO4bEzCu8WCDSgHfg1sQpZHspgBJR9y/RJztuL6dtKlf6T9W+/sostrp2i8CNkZ
8R5pgWFESbWvE2Jaw6eDbOyiy23wcd+5152NuG07Agkme7ImkhVhFnXWnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBurJoLzOBDIsh5FwEJFG9WTnht+MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvRzZzbWd2TTRFTWl5SGtYQVFrVWIxWk9lRzM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXovMA0G
CSqGSIb3DQEBCwUAA4IBAQCAr0wB7EhrFbsSPHTRfsXaPELT670a0iftyhJE9TDM
lFVjKx0+QORXwvH/N7eHI7O2m15UYjEjmmtvIBNTnK4Zshvh/L4ForzsMt297BuH
7kkjeQB1WfXHMlpi/IHLY647P/kf5Q8NWn23TBtVebOoKZ4HPo0Dhrt6G46j96cg
HYMiSRAOQCMs+fqNkWb6PRaLoKxzb/OIgFHkxP4yePsyYl+eVKpEKQ/G2KXwQkrM
4WwOaTjUQouyDfJyGzUNPvfs0LLZgkeml/Qw9M8ahQp+wQSCXkHNYUL+B5jm8pGQ
aHCyg6TNu6s50vVGYShdboALwnRHd1LL1YmfZNwk8VgD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org