Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/IYkFd9DTbT-AUV9LNGQeOpDL0G8.roa
File: IYkFd9DTbT-AUV9LNGQeOpDL0G8.roa (raw, json)
Hash identifier: 3liVc9sOxG12WCH8H13o5yXZZ7JUF0VVxRw0E4oZDpE=
Subject key identifier: 21:89:05:77:D0:D3:6D:3F:80:51:5F:4B:34:64:1E:3A:90:CB:D0:6F
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 0186BAED52F46925D5D945A5B37FD6B5876B
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/IYkFd9DTbT-AUV9LNGQeOpDL0G8.roa
Signing time: Tue 07 Mar 2023 07:16:00 +0000
ROA not before: Tue 07 Mar 2023 07:16:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13045
IP address blocks: 192.109.36.0/24 maxlen: 24
2001:678:b10::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:ed:52:f4:69:25:d5:d9:45:a5:b3:7f:d6:b5:87:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Mar 7 07:16:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21890577d0d36d3f80515f4b34641e3a90cbd06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0c:eb:95:e9:7c:17:f0:0c:c4:27:77:2e:41:
fb:53:45:46:7f:d9:97:87:9a:05:08:49:4b:c2:30:
c8:f9:e7:ba:1e:db:fb:a5:1f:bd:6f:ea:29:48:7b:
19:df:2d:1d:67:73:93:0c:7c:03:91:7a:8d:85:15:
36:fe:a4:41:d1:93:c3:a9:f9:a9:c0:c4:03:be:60:
8c:73:09:c6:39:02:5a:9f:f2:ce:8d:1f:9b:b2:99:
2c:6d:75:c6:a0:6d:ef:99:b6:ce:e6:4c:f6:c4:12:
0f:dd:c8:78:19:e4:75:b4:6d:3d:56:4a:e7:98:27:
28:f1:62:62:bf:07:cf:4b:1e:95:4d:df:b5:dc:7a:
d7:76:1f:99:21:f1:5d:42:98:3b:e7:f3:f3:2f:8b:
da:cb:d6:db:9a:76:6f:37:d7:d0:3f:0d:62:55:85:
6f:ab:0a:c7:28:99:8a:98:1e:06:3e:29:e7:3e:57:
9c:f6:6b:ea:f0:d6:45:68:51:7a:5b:c4:e7:77:30:
08:8c:93:59:c5:2d:14:ae:ec:59:d7:ad:1e:cb:03:
bc:74:e8:20:33:2e:df:b2:cf:e8:f8:16:f6:bb:f5:
fa:62:46:4b:e6:e5:0b:44:f7:81:2c:f2:47:87:13:
e3:fe:5a:24:b8:0f:74:db:8d:0b:fd:a4:c9:ce:3d:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:89:05:77:D0:D3:6D:3F:80:51:5F:4B:34:64:1E:3A:90:CB:D0:6F
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/IYkFd9DTbT-AUV9LNGQeOpDL0G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.36.0/24
IPv6:
2001:678:b10::/48
Signature Algorithm: sha256WithRSAEncryption
86:79:17:cb:ec:4c:4f:a1:5f:9a:fc:5f:a9:16:7b:a4:f8:c6:
ef:53:30:cb:3b:ce:da:a0:1c:32:d4:b5:05:1e:d5:08:d5:3d:
aa:9a:7c:62:ee:99:80:b5:19:35:76:1e:02:a4:d0:16:55:e1:
27:e2:99:f7:ad:92:13:d3:b6:57:39:a7:87:b0:fc:76:88:43:
5e:d5:8d:f5:f9:19:5f:a8:0c:78:77:43:7d:e6:bf:0a:18:f1:
1d:dd:23:44:1e:7f:bb:0c:e5:f6:47:fc:67:91:af:c4:d4:8e:
0c:42:45:d3:d8:59:3b:69:25:46:71:36:1b:64:e0:a5:40:8a:
6e:3e:d2:19:e1:7c:d5:da:1e:5a:fb:eb:0a:e7:58:6e:b6:27:
57:6d:ec:f8:69:ae:22:c7:fe:a4:12:75:73:bf:77:5b:2e:fa:
e6:84:9e:56:f3:88:39:20:3b:e7:3a:9e:86:86:8d:b2:08:6e:
3e:4b:11:ae:03:28:ce:f4:d2:37:02:97:3d:ad:0b:9e:50:17:
16:75:61:f4:66:a7:0e:8e:a6:a4:f5:aa:75:dd:9d:0d:a2:da:
b7:26:9d:27:5e:eb:d8:a4:c7:6e:18:f8:4e:bb:a6:a4:81:b6:
47:39:01:1a:a4:07:f6:65:55:2b:0c:77:87:93:08:e0:a8:53:
f3:2c:f6:7c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYa67VL0aSXV2UWls3/WtYdrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTZkOWMxNGE4YWI1ZDhiMGI0MDgxODdlY2UxNWEwZDIz
Y2VlMWMwHhcNMjMwMzA3MDcxNjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTg5MDU3N2QwZDM2ZDNmODA1MTVmNGIzNDY0MWUzYTkwY2JkMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gzrlel8F/AMxCd3LkH7U0VGf9mX
h5oFCElLwjDI+ee6Htv7pR+9b+opSHsZ3y0dZ3OTDHwDkXqNhRU2/qRB0ZPDqfmp
wMQDvmCMcwnGOQJan/LOjR+bspksbXXGoG3vmbbO5kz2xBIP3ch4GeR1tG09Vkrn
mCco8WJivwfPSx6VTd+13HrXdh+ZIfFdQpg75/PzL4vay9bbmnZvN9fQPw1iVYVv
qwrHKJmKmB4GPinnPlec9mvq8NZFaFF6W8TndzAIjJNZxS0UruxZ160eywO8dOgg
My7fss/o+Bb2u/X6YkZL5uULRPeBLPJHhxPj/lokuA90240L/aTJzj0BKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCGJBXfQ020/gFFfSzRkHjqQy9BvMB8GA1UdIwQY
MBaAFGiW2cFKirXYsLQIGH7OFaDSPO4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQt
Zjg1ZTMzZGQ4OTQ2LzEvSVlrRmQ5RFRiVC1BVVY5TE5HUWVPcERMMEc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQtZjg1ZTMzZGQ4OTQ2
LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwG0kMA8E
AgACMAkDBwAgAQZ4CxAwDQYJKoZIhvcNAQELBQADggEBAIZ5F8vsTE+hX5r8X6kW
e6T4xu9TMMs7ztqgHDLUtQUe1QjVPaqafGLumYC1GTV2HgKk0BZV4SfimfetkhPT
tlc5p4ew/HaIQ17VjfX5GV+oDHh3Q33mvwoY8R3dI0Qef7sM5fZH/GeRr8TUjgxC
RdPYWTtpJUZxNhtk4KVAim4+0hnhfNXaHlr76wrnWG62J1dt7PhpriLH/qQSdXO/
d1su+uaEnlbziDkgO+c6noaGjbIIbj5LEa4DKM700jcClz2tC55QFxZ1YfRmpw6O
pqT1qnXdnQ2i2rcmnSde69ikx24Y+E67pqSBtkc5ARqkB/ZlVSsMd4eTCOCoU/Ms
9nw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:13 2024 by rpki-client on console-fra.rpki-client.org