Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/FtI_EOUhWXxeITsHoMW4yhAYcyI.roa
File: FtI_EOUhWXxeITsHoMW4yhAYcyI.roa (raw, json)
Hash identifier: 7Zz2/ao2hetZW+w7PnVAI3Gj43I/hf2wrxZ9nDLdncc=
Subject key identifier: 16:D2:3F:10:E5:21:59:7C:5E:21:3B:07:A0:C5:B8:CA:10:18:73:22
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01889B803B47607D048C52836D288C030B8E
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/FtI_EOUhWXxeITsHoMW4yhAYcyI.roa
Signing time: Thu 08 Jun 2023 14:54:12 +0000
ROA not before: Thu 08 Jun 2023 14:54:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 109.105.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Oct 2023 11:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:80:3b:47:60:7d:04:8c:52:83:6d:28:8c:03:0b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jun 8 14:54:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16d23f10e521597c5e213b07a0c5b8ca10187322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:a2:49:53:12:6d:35:94:cd:98:c6:cb:d2:
6d:64:3d:e4:7a:2b:be:3b:2b:1f:be:c8:1c:0c:97:
74:2a:f3:fb:d2:e4:42:b9:d3:2e:c0:d5:f4:24:ed:
de:6e:98:7b:10:9b:a4:b8:8b:83:c4:57:59:0c:26:
7f:10:a2:72:c1:b8:ea:83:43:6f:cf:3b:da:da:be:
c1:4b:e6:65:41:50:f4:77:57:ab:06:28:30:f2:3c:
14:8b:82:a9:19:17:8e:7e:2b:fe:02:fb:77:35:d3:
90:a8:56:0f:45:32:71:71:d2:9d:1d:14:c1:3a:1a:
88:ff:02:79:80:66:41:16:d7:9a:8d:3f:26:d4:fb:
55:e2:49:df:30:46:21:08:6a:2f:8c:de:31:2b:4e:
33:68:54:af:8e:bd:b9:be:29:b3:c6:28:ec:fd:48:
b3:ee:e6:5d:23:40:93:e2:e3:b9:a8:a3:ed:a6:fc:
0f:ab:3f:31:f0:b3:34:24:29:0d:b7:ea:7b:05:a0:
24:34:6f:3f:9a:7d:1a:8b:62:85:c8:7b:f4:69:81:
19:68:cf:af:3b:78:60:d6:13:44:cf:b5:65:cb:4a:
8b:7b:d4:04:33:01:16:95:9e:f3:71:5d:77:b5:10:
86:76:eb:b0:a0:d4:bf:b7:b7:28:eb:8f:77:5d:79:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D2:3F:10:E5:21:59:7C:5E:21:3B:07:A0:C5:B8:CA:10:18:73:22
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/FtI_EOUhWXxeITsHoMW4yhAYcyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:71:64:0d:cb:9d:b6:b4:45:b5:ec:eb:be:2d:8c:54:d5:53:
da:00:f1:3e:c3:9b:7e:67:a0:7c:e5:75:a8:3c:50:85:c1:66:
12:2a:c8:2f:1e:97:c6:32:0b:64:94:f6:76:df:75:27:05:54:
6c:07:ed:49:3a:52:95:1f:75:02:3f:96:9f:91:b9:0b:86:7d:
ba:8a:f2:7c:9c:98:3b:7d:9c:a7:ef:18:0c:77:6e:df:ab:56:
bf:81:28:98:23:39:2c:6e:bb:39:e3:6c:0e:5b:7d:9f:53:6e:
35:91:e0:d3:3b:f4:65:34:22:b6:a6:25:21:84:72:69:41:5d:
4d:98:70:3c:ac:40:92:a6:1b:b1:ae:d6:4a:dd:f3:58:a4:a0:
a6:ee:86:be:aa:ff:76:07:eb:50:5a:b3:3d:27:b5:a1:c2:fb:
29:34:60:2b:df:7c:25:d2:27:76:fa:49:6e:0e:95:b0:9f:00:
99:7a:72:98:30:fb:5b:3e:9a:54:5a:19:d2:fa:6f:11:b5:03:
4d:42:72:f6:70:cb:a5:c8:d9:8c:73:ed:4a:78:e6:12:05:8b:
e7:2b:88:37:97:33:44:a0:62:10:24:d9:d3:70:82:af:44:e4:
14:f7:bd:ba:f8:6d:1a:1b:dd:90:22:88:90:fc:b0:9c:76:b0:
b1:84:ef:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYibgDtHYH0EjFKDbSiMAwuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjMwNjA4MTQ1NDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmQyM2YxMGU1MjE1OTdjNWUyMTNiMDdhMGM1YjhjYTEwMTg3MzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/yiSVMSbTWUzZjGy9JtZD3keiu+
OysfvsgcDJd0KvP70uRCudMuwNX0JO3ebph7EJukuIuDxFdZDCZ/EKJywbjqg0Nv
zzva2r7BS+ZlQVD0d1erBigw8jwUi4KpGReOfiv+Avt3NdOQqFYPRTJxcdKdHRTB
OhqI/wJ5gGZBFteajT8m1PtV4knfMEYhCGovjN4xK04zaFSvjr25vimzxijs/Uiz
7uZdI0CT4uO5qKPtpvwPqz8x8LM0JCkNt+p7BaAkNG8/mn0ai2KFyHv0aYEZaM+v
O3hg1hNEz7Vly0qLe9QEMwEWlZ7zcV13tRCGduuwoNS/t7co6493XXmruQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBbSPxDlIVl8XiE7B6DFuMoQGHMiMB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvRnRJX0VPVWhXWHhlSVRzSG9NVzR5aEFZY3lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWnEMA0G
CSqGSIb3DQEBCwUAA4IBAQAacWQNy522tEW17Ou+LYxU1VPaAPE+w5t+Z6B85XWo
PFCFwWYSKsgvHpfGMgtklPZ233UnBVRsB+1JOlKVH3UCP5afkbkLhn26ivJ8nJg7
fZyn7xgMd27fq1a/gSiYIzksbrs542wOW32fU241keDTO/RlNCK2piUhhHJpQV1N
mHA8rECSphuxrtZK3fNYpKCm7oa+qv92B+tQWrM9J7WhwvspNGAr33wl0id2+klu
DpWwnwCZenKYMPtbPppUWhnS+m8RtQNNQnL2cMulyNmMc+1KeOYSBYvnK4g3lzNE
oGIQJNnTcIKvROQU9726+G0aG92QIoiQ/LCcdrCxhO98
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org