Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/R5Me_OqX52MnRTYPrOtcpWz_7NE.roa
File: R5Me_OqX52MnRTYPrOtcpWz_7NE.roa (raw, json)
Hash identifier: RermrvXxDsvp6zyB0Qe94HxMdvNov2CMX9cSlKSrKQM=
Subject key identifier: 47:93:1E:FC:EA:97:E7:63:27:45:36:0F:AC:EB:5C:A5:6C:FF:EC:D1
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018D135FFC1360E50DC13852DB408DA40F04
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/R5Me_OqX52MnRTYPrOtcpWz_7NE.roa
Signing time: Tue 16 Jan 2024 17:44:34 +0000
ROA not before: Tue 16 Jan 2024 17:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 17:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:5f:fc:13:60:e5:0d:c1:38:52:db:40:8d:a4:0f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 16 17:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47931efcea97e7632745360faceb5ca56cffecd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:90:a6:b8:42:d9:f2:53:f9:97:d3:6f:bf:
b9:5a:f4:83:c2:e5:d4:da:6e:5c:c8:2c:01:e6:f6:
b5:47:58:2d:b2:8b:60:a6:c0:b0:91:76:85:24:25:
c0:38:68:2e:f6:3a:5b:a9:ec:d9:25:6f:b7:2d:a2:
70:77:84:6a:2f:44:49:51:93:68:42:bb:56:56:c9:
67:ed:f4:28:83:00:e2:a0:f8:42:fd:29:36:40:ef:
05:7b:9d:cf:01:79:74:22:5b:4f:4d:62:ce:ec:a8:
70:b2:d2:8e:22:1d:d4:c1:42:75:3b:7a:b9:72:e1:
92:ef:70:b6:83:d7:7a:df:7d:b6:fa:d8:9d:08:1c:
8d:f3:47:1f:08:f8:cb:8e:07:2b:a7:53:91:48:8d:
b9:7d:d3:53:43:77:03:d9:03:83:ca:1d:32:15:d5:
31:f3:1b:83:2c:1e:1b:47:6a:5e:5b:d9:66:bf:c8:
d9:a7:4b:b6:94:69:a4:1b:9a:d1:f6:5f:eb:51:7c:
0d:d2:78:b3:fa:d1:be:26:82:96:9a:16:1b:e9:39:
65:55:1d:86:d3:d2:0d:c8:40:87:64:eb:f2:45:0e:
40:1c:b6:46:7a:91:86:1d:ca:6e:3a:7b:7d:7b:c1:
61:aa:a1:c3:ab:7a:78:cc:57:db:93:18:52:a9:9e:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:93:1E:FC:EA:97:E7:63:27:45:36:0F:AC:EB:5C:A5:6C:FF:EC:D1
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/R5Me_OqX52MnRTYPrOtcpWz_7NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d1:8f:bf:28:da:e9:ae:c0:17:b7:2d:03:ca:6c:b3:b6:de:
40:40:c2:88:04:6b:ae:d0:88:4f:05:ed:8b:a7:5f:76:b1:c3:
a4:de:00:18:ab:84:35:5b:fc:26:64:44:d4:27:bc:b4:04:40:
b5:f5:29:52:fb:61:96:e1:44:aa:22:d2:60:14:dd:56:06:b9:
63:a4:10:3c:44:95:6c:80:9c:5e:84:06:02:87:22:22:58:52:
75:83:d0:ce:56:23:1b:21:29:6b:ce:7f:f1:2d:18:99:43:c9:
63:03:1c:ac:43:93:6e:3a:29:83:af:00:b4:bb:f2:4a:4d:c5:
33:c2:fd:63:94:76:f4:25:b7:18:5c:06:88:c8:45:c5:89:31:
42:57:1b:63:fa:26:c1:bc:ad:80:e4:3c:06:2e:4e:db:2d:c2:
f4:81:2a:a4:a8:79:7e:63:38:ef:63:9e:bd:00:79:0d:89:3e:
2c:4a:9e:d6:5a:4d:e7:a6:ee:46:cf:74:29:9b:e1:81:ab:be:
f1:41:d8:3d:5c:00:0a:67:25:ea:60:67:49:e1:13:53:3f:71:
87:0d:b6:7f:c8:b9:83:2b:e2:f4:4a:f9:c5:16:31:66:3c:6c:
b5:46:a9:8f:73:c7:de:05:80:22:a6:63:08:4e:4c:24:4d:5f:
79:02:aa:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0TX/wTYOUNwThS20CNpA8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjQwMTE2MTc0NDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzkzMWVmY2VhOTdlNzYzMjc0NTM2MGZhY2ViNWNhNTZjZmZlY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8qQprhC2fJT+ZfTb7+5WvSDwuXU
2m5cyCwB5va1R1gtsotgpsCwkXaFJCXAOGgu9jpbqezZJW+3LaJwd4RqL0RJUZNo
QrtWVsln7fQogwDioPhC/Sk2QO8Fe53PAXl0IltPTWLO7KhwstKOIh3UwUJ1O3q5
cuGS73C2g9d63322+tidCByN80cfCPjLjgcrp1ORSI25fdNTQ3cD2QODyh0yFdUx
8xuDLB4bR2peW9lmv8jZp0u2lGmkG5rR9l/rUXwN0niz+tG+JoKWmhYb6TllVR2G
09INyECHZOvyRQ5AHLZGepGGHcpuOnt9e8FhqqHDq3p4zFfbkxhSqZ5vxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEeTHvzql+djJ0U2D6zrXKVs/+zRMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvUjVNZV9PcVg1Mk1uUlRZUHJPdGNwV3pfN05FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXouMA0G
CSqGSIb3DQEBCwUAA4IBAQCH0Y+/KNrprsAXty0Dymyztt5AQMKIBGuu0IhPBe2L
p192scOk3gAYq4Q1W/wmZETUJ7y0BEC19SlS+2GW4USqItJgFN1WBrljpBA8RJVs
gJxehAYChyIiWFJ1g9DOViMbISlrzn/xLRiZQ8ljAxysQ5NuOimDrwC0u/JKTcUz
wv1jlHb0JbcYXAaIyEXFiTFCVxtj+ibBvK2A5DwGLk7bLcL0gSqkqHl+YzjvY569
AHkNiT4sSp7WWk3npu5Gz3Qpm+GBq77xQdg9XAAKZyXqYGdJ4RNTP3GHDbZ/yLmD
K+L0SvnFFjFmPGy1RqmPc8feBYAipmMITkwkTV95Aqq9
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org