Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fSJuGs1-P1nCK_ESQoSEnZTjV9c.roa
File: fSJuGs1-P1nCK_ESQoSEnZTjV9c.roa (raw, json)
Hash identifier: UajyAPx04bnwwGGOuQmxew3t3w6mcYx5ffhQC5i/9L0=
Subject key identifier: 7D:22:6E:1A:CD:7E:3F:59:C2:2B:F1:12:42:84:84:9D:94:E3:57:D7
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018BF069678B14EA5A024D7A46B3B3FF042D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fSJuGs1-P1nCK_ESQoSEnZTjV9c.roa
Signing time: Tue 21 Nov 2023 05:45:21 +0000
ROA not before: Tue 21 Nov 2023 05:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.40.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Nov 2023 06:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:69:67:8b:14:ea:5a:02:4d:7a:46:b3:b3:ff:04:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Nov 21 05:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d226e1acd7e3f59c22bf1124284849d94e357d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:df:c5:b0:71:74:64:ca:60:b6:d6:31:80:46:
60:bf:30:f2:c0:6c:4b:d5:30:83:d1:b7:0e:47:4a:
92:83:9e:72:8b:b0:7a:dc:a4:6c:a0:90:a3:bc:45:
ff:4c:cc:86:b8:6c:48:95:58:89:9c:cf:6b:b4:2d:
f4:8e:dc:79:b7:5c:83:50:6f:63:b0:83:db:81:24:
14:ba:a3:29:1f:99:8f:48:27:39:ed:59:0d:91:b2:
09:0b:8b:d5:1a:ed:5b:bc:58:f9:a6:86:21:de:09:
fa:82:54:7d:6a:82:98:97:ae:fa:7e:f8:57:31:dd:
4f:8b:30:95:e9:4f:4b:a0:31:fa:19:c2:a0:de:c3:
e8:b4:3c:97:23:81:21:0d:07:e3:e0:90:a3:6d:06:
99:2c:a1:65:f9:04:9e:d7:dc:e3:94:6b:30:1c:44:
48:6a:b1:35:83:12:cc:4a:71:41:fd:2b:8e:99:d2:
17:29:a3:eb:48:b8:85:22:8b:24:0c:69:bf:6a:45:
cf:0c:b9:d4:5b:95:b6:a5:99:07:d6:18:fe:10:f6:
47:bb:d2:e6:cc:e4:8d:2d:e2:6f:27:11:89:10:43:
17:93:93:37:d2:95:ed:a2:ff:80:5a:5d:eb:8b:ad:
5d:f1:90:18:8b:b4:0e:c8:24:4f:dd:7b:29:27:81:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:22:6E:1A:CD:7E:3F:59:C2:2B:F1:12:42:84:84:9D:94:E3:57:D7
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fSJuGs1-P1nCK_ESQoSEnZTjV9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ee:94:b5:81:97:4c:3d:5b:d7:a3:6a:02:19:12:6c:4f:bd:
fe:06:e0:13:b0:44:1b:f9:0c:ad:66:40:1f:40:f0:b6:9c:63:
51:fa:16:7a:0f:0e:bb:10:7d:17:a9:c3:90:f7:4f:9a:12:fc:
9b:61:da:82:1b:52:85:7f:91:ca:34:83:8d:86:03:87:a5:ec:
81:b0:d0:9f:da:25:66:c3:9f:11:84:38:b7:ac:ff:b7:0a:4a:
a9:1f:74:b9:29:62:8b:3d:52:b5:61:a3:9e:bc:2d:2f:38:d5:
da:1d:57:07:06:1c:f7:90:a1:a8:b7:b0:73:ac:cd:0f:00:8b:
50:83:30:5e:f7:24:c4:0f:70:12:fc:53:97:0a:53:82:df:dc:
a8:70:e4:92:0e:05:e3:64:6e:71:55:fd:96:18:ea:0a:ef:e0:
c4:ec:3a:e0:cc:2d:18:ce:16:12:7e:49:01:b7:d5:7d:6d:d1:
b3:4d:ab:29:d7:46:e8:7a:c0:e1:df:dc:ef:7c:a7:43:14:f8:
9e:f0:62:44:a3:31:f0:e0:17:9b:74:ee:7c:14:a8:55:36:0d:
c2:39:c5:3b:b2:90:c5:bb:65:55:a9:e8:f9:83:bc:34:dc:81:
d9:ac:00:7b:ce:01:4b:51:20:e4:35:d1:0c:b8:58:ab:ce:1b:
99:ed:f2:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYvwaWeLFOpaAk16RrOz/wQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMxMTIxMDU0NTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDIyNmUxYWNkN2UzZjU5YzIyYmYxMTI0Mjg0ODQ5ZDk0ZTM1N2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid/FsHF0ZMpgttYxgEZgvzDywGxL
1TCD0bcOR0qSg55yi7B63KRsoJCjvEX/TMyGuGxIlViJnM9rtC30jtx5t1yDUG9j
sIPbgSQUuqMpH5mPSCc57VkNkbIJC4vVGu1bvFj5poYh3gn6glR9aoKYl676fvhX
Md1PizCV6U9LoDH6GcKg3sPotDyXI4EhDQfj4JCjbQaZLKFl+QSe19zjlGswHERI
arE1gxLMSnFB/SuOmdIXKaPrSLiFIoskDGm/akXPDLnUW5W2pZkH1hj+EPZHu9Lm
zOSNLeJvJxGJEEMXk5M30pXtov+AWl3ri61d8ZAYi7QOyCRP3XspJ4G7uQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH0ibhrNfj9ZwivxEkKEhJ2U41fXMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvZlNKdUdzMS1QMW5DS19FU1FvU0VuWlRqVjljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXooAwQA
bXouMA0GCSqGSIb3DQEBCwUAA4IBAQCB7pS1gZdMPVvXo2oCGRJsT73+BuATsEQb
+QytZkAfQPC2nGNR+hZ6Dw67EH0XqcOQ90+aEvybYdqCG1KFf5HKNIONhgOHpeyB
sNCf2iVmw58RhDi3rP+3CkqpH3S5KWKLPVK1YaOevC0vONXaHVcHBhz3kKGot7Bz
rM0PAItQgzBe9yTED3AS/FOXClOC39yocOSSDgXjZG5xVf2WGOoK7+DE7DrgzC0Y
zhYSfkkBt9V9bdGzTasp10boesDh39zvfKdDFPie8GJEozHw4BebdO58FKhVNg3C
OcU7spDFu2VVqej5g7w03IHZrAB7zgFLUSDkNdEMuFirzhuZ7fLa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org