Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/G6rDW3YqBTPTQKS1EvRPRRMBqwI.roa
File: G6rDW3YqBTPTQKS1EvRPRRMBqwI.roa (raw, json)
Hash identifier: njzTehM78bpCJDmy+fcI3uZcZa4OqXJOVfjq6FQqSUE=
Subject key identifier: 1B:AA:C3:5B:76:2A:05:33:D3:40:A4:B5:12:F4:4F:45:13:01:AB:02
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01896389074F0DCE1A1850CD47B5A6BFF264
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/G6rDW3YqBTPTQKS1EvRPRRMBqwI.roa
Signing time: Mon 17 Jul 2023 11:07:51 +0000
ROA not before: Mon 17 Jul 2023 11:07:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.105.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 21:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:89:07:4f:0d:ce:1a:18:50:cd:47:b5:a6:bf:f2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jul 17 11:07:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1baac35b762a0533d340a4b512f44f451301ab02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d8:7c:7a:3d:da:79:c5:58:a0:44:6c:fa:8f:
ac:67:b5:7b:21:09:4a:b7:4a:ac:83:4c:a1:5b:a4:
a5:c1:57:b0:32:2d:61:9c:b2:ca:e2:91:47:60:e5:
ba:d3:b1:1c:4a:ef:10:d9:60:8f:0d:54:4c:9f:6d:
5e:7e:0f:7b:7d:62:97:be:2e:14:fe:b4:ba:49:d9:
1e:21:06:66:e3:24:dc:b5:84:ea:d7:00:2b:29:97:
21:32:a2:2f:d7:df:49:e1:96:bd:ee:d4:94:5a:92:
7a:52:0d:2a:d8:97:bb:76:1a:b7:37:a6:16:b2:dd:
8f:3d:fa:df:c9:0c:31:4e:07:54:1f:fb:3a:72:da:
6b:f0:bf:71:59:ef:5b:65:a0:ed:f1:9c:af:65:1f:
4b:c3:12:1e:b8:8a:50:4a:ca:1e:73:e3:c5:12:c0:
73:49:6d:3a:3e:14:a2:e2:a4:97:da:98:1b:2a:e3:
27:22:dd:ad:5c:db:7a:c6:ad:14:e5:d1:71:7e:6c:
d1:c2:97:8b:fb:bd:69:d6:a3:97:30:ec:3b:75:bd:
17:1a:eb:b1:be:e7:57:04:c5:15:d8:89:26:57:40:
38:0a:e3:fa:61:3f:a1:aa:3c:24:c0:02:d0:d1:b1:
e6:8c:12:f8:03:85:3d:37:f2:3c:1f:30:5a:e2:87:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AA:C3:5B:76:2A:05:33:D3:40:A4:B5:12:F4:4F:45:13:01:AB:02
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/G6rDW3YqBTPTQKS1EvRPRRMBqwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.193.0/24
Signature Algorithm: sha256WithRSAEncryption
01:94:81:1f:62:c4:2c:3d:9b:bc:87:77:4c:d4:54:43:d9:1e:
ed:34:7a:e9:b3:da:2c:fb:b2:e3:b3:69:54:b8:a2:e7:a8:75:
36:d6:59:50:5a:3c:60:8e:0e:19:63:ec:c9:18:1f:68:c6:1f:
08:0f:91:0f:9d:e6:46:b4:43:eb:d3:2a:20:28:a0:be:b2:75:
bc:53:d1:5e:d2:70:40:1e:86:1f:0d:9a:47:e4:0e:2a:0e:41:
6d:fb:aa:b2:ad:8a:80:af:d5:7e:c9:53:02:1a:41:d1:e4:33:
03:e3:dc:88:32:8a:06:bb:ee:13:4a:46:ae:51:0f:1a:75:dc:
ad:24:57:02:00:08:fd:a2:27:6e:45:06:4d:de:23:0c:75:47:
8a:2a:8a:f7:b6:31:3b:df:9e:c8:67:9d:27:fa:43:1e:25:7a:
7f:f5:0b:f2:f5:d6:6f:31:96:f9:a2:8c:d7:9e:9d:96:a3:d8:
eb:36:a5:0e:5a:c5:f8:f4:3f:89:94:69:0b:d1:7e:f4:0e:83:
f8:43:c1:ff:c5:0c:5c:fb:25:9c:e1:9f:06:9f:a7:e8:f5:de:
7f:a2:80:08:72:fd:73:84:4e:de:e8:b3:cb:37:94:13:a9:5d:
a0:72:e8:40:0a:86:57:e6:87:84:53:5f:c5:08:a5:9a:e9:df:
a5:b3:8b:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYljiQdPDc4aGFDNR7Wmv/JkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjMwNzE3MTEwNzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmFhYzM1Yjc2MmEwNTMzZDM0MGE0YjUxMmY0NGY0NTEzMDFhYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdh8ej3aecVYoERs+o+sZ7V7IQlK
t0qsg0yhW6SlwVewMi1hnLLK4pFHYOW607EcSu8Q2WCPDVRMn21efg97fWKXvi4U
/rS6SdkeIQZm4yTctYTq1wArKZchMqIv199J4Za97tSUWpJ6Ug0q2Je7dhq3N6YW
st2PPfrfyQwxTgdUH/s6ctpr8L9xWe9bZaDt8ZyvZR9LwxIeuIpQSsoec+PFEsBz
SW06PhSi4qSX2pgbKuMnIt2tXNt6xq0U5dFxfmzRwpeL+71p1qOXMOw7db0XGuux
vudXBMUV2IkmV0A4CuP6YT+hqjwkwALQ0bHmjBL4A4U9N/I8HzBa4odqYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBuqw1t2KgUz00CktRL0T0UTAasCMB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvRzZyRFczWXFCVFBUUUtTMUV2UlBSUk1CcXdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWnBMA0G
CSqGSIb3DQEBCwUAA4IBAQABlIEfYsQsPZu8h3dM1FRD2R7tNHrps9os+7Ljs2lU
uKLnqHU21llQWjxgjg4ZY+zJGB9oxh8ID5EPneZGtEPr0yogKKC+snW8U9Fe0nBA
HoYfDZpH5A4qDkFt+6qyrYqAr9V+yVMCGkHR5DMD49yIMooGu+4TSkauUQ8addyt
JFcCAAj9oiduRQZN3iMMdUeKKor3tjE7357IZ50n+kMeJXp/9Qvy9dZvMZb5oozX
np2Wo9jrNqUOWsX49D+JlGkL0X70DoP4Q8H/xQxc+yWc4Z8Gn6fo9d5/ooAIcv1z
hE7e6LPLN5QTqV2gcuhACoZX5oeEU1/FCKWa6d+ls4v5
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org