Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/vtcg60RdCHuDkqbo-R3ulPRx26g.roa
File: vtcg60RdCHuDkqbo-R3ulPRx26g.roa (raw, json)
Hash identifier: mQ6VmRzz+sCqVV//9sQ+fz69uA+mqml/f2XO4v+UtxM=
Subject key identifier: BE:D7:20:EB:44:5D:08:7B:83:92:A6:E8:F9:1D:EE:94:F4:71:DB:A8
Certificate issuer: /CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Certificate serial: 0188B94E1ABAF0A7D231FD40228AD84C713D
Authority key identifier: 1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/vtcg60RdCHuDkqbo-R3ulPRx26g.roa
Signing time: Wed 14 Jun 2023 09:48:03 +0000
ROA not before: Wed 14 Jun 2023 09:48:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50591
IP address blocks: 109.230.64.0/22 maxlen: 22
109.230.69.0/24 maxlen: 24
109.230.68.0/22 maxlen: 22
109.230.73.0/24 maxlen: 24
109.230.72.0/24 maxlen: 24
109.230.76.0/22 maxlen: 22
109.230.75.0/24 maxlen: 24
109.230.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:4e:1a:ba:f0:a7:d2:31:fd:40:22:8a:d8:4c:71:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Validity
Not Before: Jun 14 09:48:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bed720eb445d087b8392a6e8f91dee94f471dba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:2b:4d:cb:00:19:48:92:a5:45:d5:bc:48:
ab:0c:83:e4:8a:79:7b:a5:28:ea:b8:e8:4f:c9:3c:
16:77:2a:34:b2:7e:54:7e:7b:dc:0f:06:a7:e2:79:
3b:15:cc:17:b5:88:5d:22:b7:0b:b6:e1:a8:3d:0e:
f5:59:4b:dc:15:8e:6b:65:a3:f1:6a:9a:3a:0f:50:
a0:66:46:5a:a9:33:81:0a:ca:91:b0:c8:01:44:80:
c5:1b:9c:7e:f2:05:c1:02:90:26:27:85:c7:75:b5:
7b:89:69:63:07:2b:cc:7c:5e:b7:b7:fc:2a:9c:28:
77:c5:a6:13:21:87:75:d5:65:92:d0:3f:e6:45:98:
19:98:27:23:cd:16:07:d6:69:81:ae:5d:1e:52:d6:
4b:74:fa:5f:a1:c2:c0:65:fc:1b:80:ca:ed:c5:6a:
21:8b:fa:0c:88:6b:7b:89:d0:fa:0f:9b:e0:4e:b7:
27:66:aa:c8:44:5c:db:f5:70:1f:48:a8:8b:ed:b8:
00:75:85:01:fb:7a:5e:2c:18:db:f6:fd:88:a1:58:
29:95:90:b7:ab:19:13:90:ff:37:20:bc:f6:59:7e:
45:a9:3b:fb:5e:17:1c:64:ce:2b:66:b2:e3:f2:22:
2f:e0:d7:0f:ce:69:11:c4:dd:0c:0c:05:5b:06:8f:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D7:20:EB:44:5D:08:7B:83:92:A6:E8:F9:1D:EE:94:F4:71:DB:A8
X509v3 Authority Key Identifier:
keyid:1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/vtcg60RdCHuDkqbo-R3ulPRx26g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.230.64.0/20
Signature Algorithm: sha256WithRSAEncryption
79:20:ba:c7:71:59:45:02:5b:45:57:e3:2b:c4:c0:d9:e3:43:
10:60:42:bc:37:7f:5e:ec:9f:c3:a8:3d:0b:c5:33:9e:a5:99:
7d:02:45:d7:6d:93:a3:9b:27:66:dc:ad:29:99:97:79:03:08:
73:0d:ee:1c:64:32:1e:85:c2:e3:ce:c3:c4:00:a6:89:fd:23:
62:b5:e4:db:87:9c:5c:7c:a2:f4:e2:0f:fa:3b:37:5e:0f:3c:
a8:96:f0:0b:b9:da:64:65:25:24:be:5f:42:c7:72:8c:b0:d9:
4d:e3:a9:e3:9f:bf:d9:ea:98:b7:6e:f0:f0:de:33:89:e2:fa:
9e:c9:5a:77:86:d0:a8:2d:32:8c:70:8f:76:ed:ce:73:b3:b7:
ac:b8:5a:db:89:64:41:2c:f5:23:52:78:a4:c5:99:93:3c:eb:
b9:de:f8:76:20:81:77:c2:97:e3:b4:db:c6:ab:8d:2c:2d:9c:
88:be:92:1c:f0:be:c8:c6:d3:15:fa:49:1c:14:60:97:3f:87:
1e:ef:15:4c:77:1b:d3:8f:7c:5e:46:d4:da:52:45:fa:a0:2f:
36:53:9b:25:6f:eb:a5:a6:16:b3:51:71:85:ce:8a:06:97:74:
93:af:c2:d4:48:d2:9b:d4:6e:c7:a7:84:39:4b:0b:25:2d:77:
3a:aa:12:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi5Thq68KfSMf1AIorYTHE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMzkyZGZjNmJhMmQzMTg2ZDMyNjljNzA5MWI3MDE5ODE1
MzQ1ZDMwHhcNMjMwNjE0MDk0ODAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWQ3MjBlYjQ0NWQwODdiODM5MmE2ZThmOTFkZWU5NGY0NzFkYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4ErTcsAGUiSpUXVvEirDIPkinl7
pSjquOhPyTwWdyo0sn5UfnvcDwan4nk7FcwXtYhdIrcLtuGoPQ71WUvcFY5rZaPx
apo6D1CgZkZaqTOBCsqRsMgBRIDFG5x+8gXBApAmJ4XHdbV7iWljByvMfF63t/wq
nCh3xaYTIYd11WWS0D/mRZgZmCcjzRYH1mmBrl0eUtZLdPpfocLAZfwbgMrtxWoh
i/oMiGt7idD6D5vgTrcnZqrIRFzb9XAfSKiL7bgAdYUB+3peLBjb9v2IoVgplZC3
qxkTkP83ILz2WX5FqTv7XhccZM4rZrLj8iIv4NcPzmkRxN0MDAVbBo/phQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL7XIOtEXQh7g5Km6Pkd7pT0cduoMB8GA1UdIwQY
MBaAFBo5LfxrotMYbTJpxwkbcBmBU0XTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2prdF9HdWkweGh0TW1uSENSdHdHWUZUUmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zMmQ4NWQtYTcxNy00ZDY4LTgyYTYt
MmYzNjVmMjJhMThjLzEvdnRjZzYwUmRDSHVEa3Fiby1SM3VsUFJ4MjZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zMmQ4NWQtYTcxNy00ZDY4LTgyYTYtMmYzNjVmMjJhMThj
LzEvR2prdF9HdWkweGh0TW1uSENSdHdHWUZUUmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbeZAMA0G
CSqGSIb3DQEBCwUAA4IBAQB5ILrHcVlFAltFV+MrxMDZ40MQYEK8N39e7J/DqD0L
xTOepZl9AkXXbZOjmydm3K0pmZd5AwhzDe4cZDIehcLjzsPEAKaJ/SNiteTbh5xc
fKL04g/6OzdeDzyolvALudpkZSUkvl9Cx3KMsNlN46njn7/Z6pi3bvDw3jOJ4vqe
yVp3htCoLTKMcI927c5zs7esuFrbiWRBLPUjUnikxZmTPOu53vh2IIF3wpfjtNvG
q40sLZyIvpIc8L7IxtMV+kkcFGCXP4ce7xVMdxvTj3xeRtTaUkX6oC82U5slb+ul
phazUXGFzooGl3STr8LUSNKb1G7Hp4Q5SwslLXc6qhI/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org