Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GDvKSF9ijXYFsFf6D59AdjP--aY.roa
File: GDvKSF9ijXYFsFf6D59AdjP--aY.roa (raw, json)
Hash identifier: tJj9yZKIp9SGMGytkFXtDI/hj5/RBIhzxfBthkoWqqA=
Subject key identifier: 18:3B:CA:48:5F:62:8D:76:05:B0:57:FA:0F:9F:40:76:33:FE:F9:A6
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0187849D1BFB499CCDB568F37B182A9B276E
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GDvKSF9ijXYFsFf6D59AdjP--aY.roa
Signing time: Sat 15 Apr 2023 11:11:41 +0000
ROA not before: Sat 15 Apr 2023 11:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 May 2023 19:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:84:9d:1b:fb:49:9c:cd:b5:68:f3:7b:18:2a:9b:27:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 15 11:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=183bca485f628d7605b057fa0f9f407633fef9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:11:eb:83:83:19:21:86:23:69:36:39:c5:
b6:45:5b:ec:32:af:49:ab:ea:17:7d:d2:fa:80:be:
53:46:b8:ba:d4:a5:cb:6c:bf:de:f9:80:b4:16:f7:
ca:57:62:3b:4d:b3:76:86:dc:2c:ed:90:1e:64:a0:
74:80:14:da:a9:ca:d4:dd:41:4e:04:a6:06:2d:5e:
c6:0d:8f:af:a5:7d:49:80:4e:06:17:d0:eb:37:e4:
62:35:07:9d:9a:9c:b3:96:22:56:69:1f:6b:c0:7a:
87:f1:0e:af:e3:99:34:9e:e2:65:18:08:38:e8:32:
b7:c7:3e:9e:d1:11:61:4e:9d:36:92:56:4e:36:51:
2c:9c:c1:fb:42:c7:01:49:dd:d3:46:f7:9a:3d:b3:
c8:0b:83:76:6d:49:e2:56:5f:de:f1:da:1c:c8:41:
51:10:fc:06:5b:39:80:e6:ff:3f:11:92:44:f7:ef:
87:82:c9:c4:8d:ea:51:18:e6:54:53:9c:8d:12:32:
6f:f8:83:01:99:97:57:2f:8e:8c:d7:62:86:c9:bf:
f8:93:13:df:1c:a0:55:3e:fc:be:3f:fe:c2:79:6b:
ca:0e:ac:a0:16:ea:37:46:69:73:b8:7d:60:e4:f5:
cd:d2:80:e0:5d:09:89:06:da:14:80:4e:6d:65:bd:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3B:CA:48:5F:62:8D:76:05:B0:57:FA:0F:9F:40:76:33:FE:F9:A6
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GDvKSF9ijXYFsFf6D59AdjP--aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:76:09:03:5e:cd:0b:b5:82:8b:d5:65:d5:11:c1:48:47:2e:
eb:e5:40:76:df:0a:57:da:c3:58:99:b8:d1:1f:66:1e:55:68:
95:27:35:82:4d:53:e1:a7:11:b7:db:3e:97:e7:31:a2:b8:da:
56:c6:a0:e4:38:4f:b2:52:9e:40:2e:92:ff:98:5e:26:41:3f:
3d:27:af:27:de:e9:51:a9:72:6f:61:11:ee:5a:09:6e:45:7f:
b7:78:5b:cf:3c:7d:08:b2:2f:8e:60:83:20:7e:a1:36:6b:69:
11:8f:d3:66:2e:0e:b7:e4:e8:06:17:d6:6b:2b:aa:db:c2:3d:
09:a9:b1:fa:e4:65:8c:12:7f:03:9f:66:ac:77:a4:68:7e:29:
b6:36:f3:25:c7:85:c5:28:81:31:6c:46:f3:62:bf:b8:e2:c9:
2e:de:53:72:34:a1:d0:8b:e6:ec:c2:f0:bf:08:9b:c1:47:dc:
bf:10:46:b7:c4:f0:2e:3c:6a:bd:95:dc:fa:9a:69:8b:22:51:
33:99:e6:e2:46:b7:fc:e4:14:f4:08:f5:74:ba:8f:a2:f2:76:
50:3c:1b:fc:ee:0a:5f:d2:d9:9e:98:42:24:81:d5:c3:4e:7d:
47:96:a9:12:17:a9:f0:ad:46:7e:f9:c5:7e:59:9b:8a:6a:a8:
c4:41:e6:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeEnRv7SZzNtWjzexgqmyduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwNDE1MTExMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODNiY2E0ODVmNjI4ZDc2MDViMDU3ZmEwZjlmNDA3NjMzZmVmOWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZIR64ODGSGGI2k2OcW2RVvsMq9J
q+oXfdL6gL5TRri61KXLbL/e+YC0FvfKV2I7TbN2htws7ZAeZKB0gBTaqcrU3UFO
BKYGLV7GDY+vpX1JgE4GF9DrN+RiNQedmpyzliJWaR9rwHqH8Q6v45k0nuJlGAg4
6DK3xz6e0RFhTp02klZONlEsnMH7QscBSd3TRveaPbPIC4N2bUniVl/e8docyEFR
EPwGWzmA5v8/EZJE9++HgsnEjepRGOZUU5yNEjJv+IMBmZdXL46M12KGyb/4kxPf
HKBVPvy+P/7CeWvKDqygFuo3RmlzuH1g5PXN0oDgXQmJBtoUgE5tZb08AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBg7ykhfYo12BbBX+g+fQHYz/vmmMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvR0R2S1NGOWlqWFlGc0ZmNkQ1OUFkalAtLWFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoqMA0G
CSqGSIb3DQEBCwUAA4IBAQCOdgkDXs0LtYKL1WXVEcFIRy7r5UB23wpX2sNYmbjR
H2YeVWiVJzWCTVPhpxG32z6X5zGiuNpWxqDkOE+yUp5ALpL/mF4mQT89J68n3ulR
qXJvYRHuWgluRX+3eFvPPH0Isi+OYIMgfqE2a2kRj9NmLg635OgGF9ZrK6rbwj0J
qbH65GWMEn8Dn2asd6Rofim2NvMlx4XFKIExbEbzYr+44sku3lNyNKHQi+bswvC/
CJvBR9y/EEa3xPAuPGq9ldz6mmmLIlEzmebiRrf85BT0CPV0uo+i8nZQPBv87gpf
0tmemEIkgdXDTn1HlqkSF6nwrUZ++cV+WZuKaqjEQeZd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org