Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/lcfvBPZd63pau2MRzsV-avISrzA.roa
File: lcfvBPZd63pau2MRzsV-avISrzA.roa (raw, json)
Hash identifier: 8A3ZKrSJwsRVNQivM+aI/ObcJ6g6cJ53ZbGXeYZK0RE=
Subject key identifier: 95:C7:EF:04:F6:5D:EB:7A:5A:BB:63:11:CE:C5:7E:6A:F2:12:AF:30
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018ACAADB8A3B8179FEE5880D93D763C3083
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/lcfvBPZd63pau2MRzsV-avISrzA.roa
Signing time: Mon 25 Sep 2023 04:51:37 +0000
ROA not before: Mon 25 Sep 2023 04:51:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Oct 2023 10:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ca:ad:b8:a3:b8:17:9f:ee:58:80:d9:3d:76:3c:30:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 25 04:51:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95c7ef04f65deb7a5abb6311cec57e6af212af30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:55:5c:cd:ce:64:7c:4c:e4:e4:5b:f3:21:
c9:b3:bf:14:d1:42:c2:a0:dc:cf:ef:bf:5c:60:89:
7d:55:da:3e:6b:fd:74:86:86:23:15:3d:5c:fb:78:
2f:15:f4:1f:79:f7:09:dd:37:94:57:8d:5d:9b:c3:
fd:20:2d:25:70:62:85:79:af:3f:2e:fc:94:3e:44:
ab:ca:22:51:ef:30:e2:c7:4f:55:47:9d:be:d6:a8:
33:df:14:56:ef:e4:39:87:80:93:30:00:d7:4a:56:
f5:22:f0:35:5a:97:42:99:8e:29:81:24:30:f2:70:
2d:87:9b:03:02:e7:2c:07:3f:95:af:ca:6d:df:5a:
3d:ad:0d:fe:df:34:94:2b:58:fc:34:b5:f8:56:6e:
19:dd:a9:27:a4:8c:eb:57:53:12:ac:9f:b5:fa:53:
10:f6:f4:21:bc:33:f6:5b:b3:fa:79:be:d8:f3:45:
63:8f:51:ab:cd:da:3e:39:78:eb:30:5a:fe:30:90:
94:7d:f2:20:11:f3:b6:2c:bd:7c:2e:b5:f4:12:07:
c3:4b:15:56:db:c5:24:f7:ab:53:72:e2:71:47:58:
79:9f:83:79:e4:d8:52:29:de:06:a1:ae:8b:67:b5:
68:b6:e0:4a:29:95:af:fd:f0:86:7b:61:b5:f5:ff:
16:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C7:EF:04:F6:5D:EB:7A:5A:BB:63:11:CE:C5:7E:6A:F2:12:AF:30
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/lcfvBPZd63pau2MRzsV-avISrzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
60:18:df:c6:ed:73:48:57:03:4a:f8:22:e1:8c:93:56:1c:f8:
86:b6:fa:2d:1d:f7:ad:f7:ba:c6:0e:28:99:12:fb:4b:ca:d5:
50:8a:f7:8f:34:a6:7c:fd:b1:ab:3d:e5:fa:0d:ad:79:c0:b5:
dc:eb:73:d3:58:9b:21:1a:08:3b:4d:6d:f4:62:29:92:d5:03:
b2:92:5f:00:87:ff:d0:a9:bf:bd:7f:2a:4a:ae:3f:f9:52:cf:
21:d4:f9:5d:0d:b9:6d:a0:7a:3d:38:64:30:c9:84:38:b2:85:
54:cc:cf:70:b3:9a:e5:64:f6:fb:a9:07:9d:64:e3:e1:fc:e2:
83:f6:de:77:86:c5:b6:e6:18:47:9f:8d:55:21:09:22:b8:db:
dc:9d:a9:81:18:81:c0:28:4c:3a:d8:5e:53:a5:57:a6:09:8f:
b1:42:c0:06:56:9a:a3:00:80:5b:bf:90:9c:28:8c:e0:11:8e:
e8:79:cc:4a:a9:bb:52:85:2a:c7:3f:d1:f5:9d:9f:6d:de:1d:
d3:74:a6:dd:e7:5a:2f:19:15:10:06:18:7d:e4:20:0b:be:5a:
65:0d:05:33:e7:80:d7:dd:af:56:83:87:a0:24:ae:49:33:fc:
f0:b6:17:03:91:79:b5:ee:91:90:d4:c9:d6:26:1c:ee:f2:cc:
9c:c0:00:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrKrbijuBef7liA2T12PDCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwOTI1MDQ1MTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWM3ZWYwNGY2NWRlYjdhNWFiYjYzMTFjZWM1N2U2YWYyMTJhZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidBVXM3OZHxM5ORb8yHJs78U0ULC
oNzP779cYIl9Vdo+a/10hoYjFT1c+3gvFfQfefcJ3TeUV41dm8P9IC0lcGKFea8/
LvyUPkSryiJR7zDix09VR52+1qgz3xRW7+Q5h4CTMADXSlb1IvA1WpdCmY4pgSQw
8nAth5sDAucsBz+Vr8pt31o9rQ3+3zSUK1j8NLX4Vm4Z3aknpIzrV1MSrJ+1+lMQ
9vQhvDP2W7P6eb7Y80Vjj1Grzdo+OXjrMFr+MJCUffIgEfO2LL18LrX0EgfDSxVW
28Uk96tTcuJxR1h5n4N55NhSKd4Goa6LZ7VotuBKKZWv/fCGe2G19f8W1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJXH7wT2Xet6WrtjEc7FfmryEq8wMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvbGNmdkJQWmQ2M3BhdTJNUnpzVi1hdklTcnpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXouMA0G
CSqGSIb3DQEBCwUAA4IBAQBgGN/G7XNIVwNK+CLhjJNWHPiGtvotHfet97rGDiiZ
EvtLytVQivePNKZ8/bGrPeX6Da15wLXc63PTWJshGgg7TW30YimS1QOykl8Ah//Q
qb+9fypKrj/5Us8h1PldDbltoHo9OGQwyYQ4soVUzM9ws5rlZPb7qQedZOPh/OKD
9t53hsW25hhHn41VIQkiuNvcnamBGIHAKEw62F5TpVemCY+xQsAGVpqjAIBbv5Cc
KIzgEY7oecxKqbtShSrHP9H1nZ9t3h3TdKbd51ovGRUQBhh95CALvlplDQUz54DX
3a9Wg4egJK5JM/zwthcDkXm17pGQ1MnWJhzu8sycwAA9
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org