Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/_NtGMu2I0HZGZ_ilUydFMx-UR_c.roa
File: _NtGMu2I0HZGZ_ilUydFMx-UR_c.roa (raw, json)
Hash identifier: JEeZgSxlXiJBZdNmlRnqCVDDSQVuTe1xh3DxU+gfq00=
Subject key identifier: FC:DB:46:32:ED:88:D0:76:46:67:F8:A5:53:27:45:33:1F:94:47:F7
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0188C610B44CC37017EFE767CFE7ACD5255A
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/_NtGMu2I0HZGZ_ilUydFMx-UR_c.roa
Signing time: Fri 16 Jun 2023 21:16:03 +0000
ROA not before: Fri 16 Jun 2023 21:16:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49614
IP address blocks: 109.105.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 11:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c6:10:b4:4c:c3:70:17:ef:e7:67:cf:e7:ac:d5:25:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jun 16 21:16:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcdb4632ed88d0764667f8a5532745331f9447f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:64:a9:ce:15:9a:5f:73:79:2e:38:40:74:d7:
61:07:bc:33:94:27:8e:da:8f:1c:a8:d8:62:cc:df:
70:a0:aa:b1:ea:99:6f:ce:25:06:a5:80:57:22:5b:
e7:91:4a:63:99:a5:24:38:27:30:b6:04:88:a1:9a:
83:97:a4:20:bf:41:89:8c:39:5a:af:d8:12:62:08:
c2:1f:0b:e8:5f:cc:80:e7:d8:c7:20:8d:3b:d9:ca:
9b:8c:b5:55:fc:fb:b6:2a:b4:63:0d:fd:5d:70:74:
5f:41:80:dd:c4:15:37:94:ce:c5:19:69:00:19:c2:
1d:ae:99:cd:39:83:85:5c:86:09:c8:c6:17:ea:6e:
db:bd:4d:b3:0a:52:a9:2f:33:13:7d:9f:ea:8d:0d:
e4:00:65:44:dc:67:df:56:71:06:54:4d:d5:33:e9:
e0:90:62:72:32:2e:c6:fe:bd:c2:47:43:0e:01:58:
24:61:a8:a8:73:d0:d8:72:45:7d:62:f9:24:e3:19:
32:5d:a6:cb:1c:61:61:9c:53:ae:51:70:ee:8d:ca:
23:d8:30:a1:06:3d:6b:7b:ee:f3:e6:cb:f9:3a:46:
37:72:35:68:25:33:72:39:d0:ee:bf:6c:11:2a:ee:
33:56:91:98:5c:a8:6b:ba:1d:4a:12:96:b0:c5:77:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:46:32:ED:88:D0:76:46:67:F8:A5:53:27:45:33:1F:94:47:F7
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/_NtGMu2I0HZGZ_ilUydFMx-UR_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.193.0/24
Signature Algorithm: sha256WithRSAEncryption
31:32:2d:c1:d7:65:50:9a:dc:5c:3a:e8:3f:c2:3f:dc:99:91:
88:9e:3e:58:c0:cc:36:6a:b9:94:67:3f:e7:80:57:28:9a:ae:
cc:9f:0c:d0:f4:45:96:e1:6d:56:1c:5b:65:a6:b1:4c:a3:df:
62:44:7b:e0:6b:ac:7c:c0:07:4d:a2:3e:50:1c:dd:b0:b1:1b:
bc:a4:b0:d6:5b:1e:18:a7:b7:8a:c6:cf:b7:a7:9f:5d:8d:26:
cf:8d:92:d4:d1:c2:67:dd:4d:4f:0f:79:4b:80:e2:86:dc:00:
b3:fc:8c:6e:12:8d:c9:fb:dd:d8:63:74:fb:11:a5:c2:52:f0:
36:e6:ed:21:96:f9:58:08:d5:22:24:6a:ff:35:a1:c3:30:25:
8d:19:dd:9f:28:15:fb:7d:83:9a:7f:f4:47:cf:a0:e6:3b:e3:
64:3a:0f:53:19:b3:f9:2d:c0:2b:80:12:9a:75:82:8a:54:9c:
a2:a4:6b:97:ed:b8:28:eb:12:26:d1:6f:a9:09:ce:ea:fb:ea:
99:68:73:4d:a7:9d:66:65:c9:a9:ca:a8:c5:09:c5:32:d4:01:
50:02:1f:6d:3c:50:13:b5:88:60:7c:f0:ab:ee:45:82:a8:37:
06:ed:0e:c6:2a:b4:55:28:3b:b2:6b:cd:0d:f9:7f:d0:3d:d6:
1a:0a:7a:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjGELRMw3AX7+dnz+es1SVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjMwNjE2MjExNjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2RiNDYzMmVkODhkMDc2NDY2N2Y4YTU1MzI3NDUzMzFmOTQ0N2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGSpzhWaX3N5LjhAdNdhB7wzlCeO
2o8cqNhizN9woKqx6plvziUGpYBXIlvnkUpjmaUkOCcwtgSIoZqDl6Qgv0GJjDla
r9gSYgjCHwvoX8yA59jHII072cqbjLVV/Pu2KrRjDf1dcHRfQYDdxBU3lM7FGWkA
GcIdrpnNOYOFXIYJyMYX6m7bvU2zClKpLzMTfZ/qjQ3kAGVE3GffVnEGVE3VM+ng
kGJyMi7G/r3CR0MOAVgkYaioc9DYckV9Yvkk4xkyXabLHGFhnFOuUXDujcoj2DCh
Bj1re+7z5sv5OkY3cjVoJTNyOdDuv2wRKu4zVpGYXKhruh1KEpawxXcaHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPzbRjLtiNB2Rmf4pVMnRTMflEf3MB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvX050R011MkkwSFpHWl9pbFV5ZEZNeC1VUl9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWnBMA0G
CSqGSIb3DQEBCwUAA4IBAQAxMi3B12VQmtxcOug/wj/cmZGInj5YwMw2armUZz/n
gFcomq7MnwzQ9EWW4W1WHFtlprFMo99iRHvga6x8wAdNoj5QHN2wsRu8pLDWWx4Y
p7eKxs+3p59djSbPjZLU0cJn3U1PD3lLgOKG3ACz/IxuEo3J+93YY3T7EaXCUvA2
5u0hlvlYCNUiJGr/NaHDMCWNGd2fKBX7fYOaf/RHz6DmO+NkOg9TGbP5LcArgBKa
dYKKVJyipGuX7bgo6xIm0W+pCc7q++qZaHNNp51mZcmpyqjFCcUy1AFQAh9tPFAT
tYhgfPCr7kWCqDcG7Q7GKrRVKDuya80N+X/QPdYaCnom
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org