Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/NHWXw5NJgkZsc1IBoOqrHgRlZ7k.roa
File: NHWXw5NJgkZsc1IBoOqrHgRlZ7k.roa (raw, json)
Hash identifier: EsFI0ThCjcXo5iHSlc63CboOBKP/SAgD1+mtgQMuYk0=
Subject key identifier: 34:75:97:C3:93:49:82:46:6C:73:52:01:A0:EA:AB:1E:04:65:67:B9
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0186E63DAD5E6E5742B9B92CA55636327E6F
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/NHWXw5NJgkZsc1IBoOqrHgRlZ7k.roa
Signing time: Wed 15 Mar 2023 17:07:27 +0000
ROA not before: Wed 15 Mar 2023 17:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.42.0/24 maxlen: 24
109.122.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Apr 2023 11:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:3d:ad:5e:6e:57:42:b9:b9:2c:a5:56:36:32:7e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 15 17:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=347597c3934982466c735201a0eaab1e046567b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:d7:de:8a:20:45:d0:a5:3a:29:79:37:fa:
0a:58:ae:22:ed:89:b4:d8:29:bc:54:23:4d:48:91:
1c:32:7b:18:e2:6f:bc:f7:b9:89:ae:58:f8:85:c6:
89:c5:9e:ca:24:98:f4:0f:39:00:75:4d:ac:c1:a1:
a7:5f:b1:c9:2c:36:9e:83:45:23:44:2a:31:17:e8:
f4:d4:b4:bf:95:d3:0b:24:aa:e7:09:65:e7:56:59:
3c:f6:a0:6b:7c:2c:ca:31:03:2c:54:57:3f:29:b2:
5a:1b:4c:bc:bf:dd:15:f0:94:01:8a:c8:3f:ea:9e:
e2:3b:70:8b:ac:ce:33:d4:d0:1b:6a:50:c1:55:a7:
43:6e:ad:c4:64:79:ac:4f:08:46:ad:f9:2d:53:ce:
25:ae:0b:2a:50:2a:de:cc:09:a6:af:73:87:f7:d6:
8b:1b:a8:7a:d2:1e:cf:b5:6f:cd:2c:d0:1d:97:79:
00:ec:94:7e:ff:b1:23:52:33:bb:37:2b:d5:27:c2:
d0:d2:17:63:ba:a9:d3:33:12:24:07:32:b0:18:7d:
77:6f:54:a9:27:03:83:05:7c:5b:69:ca:a3:52:95:
18:5f:14:2f:c7:a0:36:53:a2:8b:02:98:7b:5c:4f:
29:77:22:34:28:b2:07:2d:c6:57:f7:87:ab:2e:ec:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:97:C3:93:49:82:46:6C:73:52:01:A0:EA:AB:1E:04:65:67:B9
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/NHWXw5NJgkZsc1IBoOqrHgRlZ7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0/24
109.122.42.0/24
Signature Algorithm: sha256WithRSAEncryption
32:de:b3:a7:70:5e:60:92:c4:0c:66:14:68:89:e2:c1:34:33:
f7:b5:24:c7:10:e0:8c:7f:68:df:d0:86:8b:0b:84:bc:f4:6b:
84:6f:d3:71:5e:e3:bd:44:a9:85:3e:85:16:02:78:c3:ea:15:
25:4b:2d:60:ac:d4:e5:d4:f2:f3:57:2b:e9:ac:fb:a5:3a:19:
4d:7d:8a:78:ab:6c:e0:8a:59:1c:49:26:a0:5b:03:1c:a0:0f:
48:27:d8:cc:3b:34:e7:7a:45:75:c4:0b:52:f7:28:59:ad:d5:
e9:68:e5:2f:cd:da:c0:51:fa:df:7b:b5:4c:aa:58:3f:cf:fc:
4c:e4:44:6d:84:85:7c:55:a5:38:9b:83:3a:ce:07:94:70:4f:
ef:82:82:6b:13:ad:94:ca:18:11:40:b3:c8:9b:ee:17:14:64:
88:30:33:43:38:a7:5d:b2:9f:57:be:19:8a:ec:88:b5:e0:23:
9b:56:0e:98:16:9a:f4:16:be:91:c2:30:16:b2:47:d3:c6:7f:
96:74:a3:bb:d1:29:ce:ec:e7:a9:67:31:64:f9:6f:91:f3:0b:
e9:00:a6:65:a8:94:09:46:14:2e:0e:b1:b8:a1:85:8d:9b:e5:
b1:ca:6a:0a:21:10:09:99:98:61:3a:f9:4a:fa:bf:eb:43:bd:
42:ed:9a:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYbmPa1ebldCubkspVY2Mn5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwMzE1MTcwNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDc1OTdjMzkzNDk4MjQ2NmM3MzUyMDFhMGVhYWIxZTA0NjU2N2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK3X3oogRdClOil5N/oKWK4i7Ym0
2Cm8VCNNSJEcMnsY4m+897mJrlj4hcaJxZ7KJJj0DzkAdU2swaGnX7HJLDaeg0Uj
RCoxF+j01LS/ldMLJKrnCWXnVlk89qBrfCzKMQMsVFc/KbJaG0y8v90V8JQBisg/
6p7iO3CLrM4z1NAbalDBVadDbq3EZHmsTwhGrfktU84lrgsqUCrezAmmr3OH99aL
G6h60h7PtW/NLNAdl3kA7JR+/7EjUjO7NyvVJ8LQ0hdjuqnTMxIkBzKwGH13b1Sp
JwODBXxbacqjUpUYXxQvx6A2U6KLAph7XE8pdyI0KLIHLcZX94erLuzicwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDR1l8OTSYJGbHNSAaDqqx4EZWe5MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvTkhXWHc1Tkpna1pzYzFJQm9PcXJIZ1JsWjdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXooAwQA
bXoqMA0GCSqGSIb3DQEBCwUAA4IBAQAy3rOncF5gksQMZhRoieLBNDP3tSTHEOCM
f2jf0IaLC4S89GuEb9NxXuO9RKmFPoUWAnjD6hUlSy1grNTl1PLzVyvprPulOhlN
fYp4q2zgilkcSSagWwMcoA9IJ9jMOzTnekV1xAtS9yhZrdXpaOUvzdrAUfrfe7VM
qlg/z/xM5ERthIV8VaU4m4M6zgeUcE/vgoJrE62UyhgRQLPIm+4XFGSIMDNDOKdd
sp9XvhmK7Ii14CObVg6YFpr0Fr6RwjAWskfTxn+WdKO70SnO7OepZzFk+W+R8wvp
AKZlqJQJRhQuDrG4oYWNm+WxymoKIRAJmZhhOvlK+r/rQ71C7Zph
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org