Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/mTDm7GDXMhO6q4XD74e9w6sgctM.roa
File: mTDm7GDXMhO6q4XD74e9w6sgctM.roa (raw, json)
Hash identifier: 7QFLH7aCB3pzG1DBNq1CjSjKKZtuHZjUeuTvLXVoxpg=
Subject key identifier: 99:30:E6:EC:60:D7:32:13:BA:AB:85:C3:EF:87:BD:C3:AB:20:72:D3
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0189BC29B7EA3C4BEF45097A1936ACAA1130
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/mTDm7GDXMhO6q4XD74e9w6sgctM.roa
Signing time: Thu 03 Aug 2023 16:09:57 +0000
ROA not before: Thu 03 Aug 2023 16:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.105.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Aug 2023 01:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bc:29:b7:ea:3c:4b:ef:45:09:7a:19:36:ac:aa:11:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Aug 3 16:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9930e6ec60d73213baab85c3ef87bdc3ab2072d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5b:cc:e2:20:c3:13:83:a3:67:47:2f:58:77:
69:8b:df:99:fc:9f:04:01:19:75:c7:14:8e:1a:7c:
db:b2:8f:36:cd:9b:e0:22:07:eb:a7:72:cc:bf:77:
c6:22:24:a6:82:ac:22:c9:c3:6c:3f:af:b2:72:1b:
8c:d4:6c:b9:b7:74:e1:da:c3:c5:eb:8f:00:bf:55:
88:8b:33:6d:35:5c:f7:b5:53:7f:6c:c8:60:c2:55:
7c:93:82:e1:7b:12:a2:bb:07:d0:3a:3c:25:ce:b3:
c6:4c:78:57:c9:00:a0:b7:a1:18:6f:4c:0b:b7:2a:
c5:1d:5e:48:6e:14:b5:0b:55:66:a7:2c:11:d8:12:
c2:b7:77:e4:32:d1:18:5b:d9:84:c2:d3:84:96:b1:
4f:8f:6a:2c:2e:8c:3d:4d:99:26:eb:e9:81:66:75:
92:08:20:c8:3a:07:fd:c1:f9:51:65:96:fc:38:71:
06:87:cb:33:b9:f7:7f:22:28:e2:22:d2:4e:19:e4:
9c:8a:6c:5e:db:3a:9c:56:1c:97:29:d1:2f:d3:1c:
4b:f4:61:c7:50:50:0d:7d:7c:f8:cd:98:ed:19:55:
0e:ac:f8:ac:30:86:7b:c4:32:cf:71:78:a5:20:c0:
7e:ba:0b:e5:da:30:47:90:f0:7d:b0:34:6b:3b:3b:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:30:E6:EC:60:D7:32:13:BA:AB:85:C3:EF:87:BD:C3:AB:20:72:D3
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/mTDm7GDXMhO6q4XD74e9w6sgctM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.198.0/24
Signature Algorithm: sha256WithRSAEncryption
53:dd:fd:ac:e7:d5:0c:64:7d:b9:eb:cb:ba:73:27:1a:8e:7d:
10:b1:10:87:c6:f1:54:0f:72:38:69:81:a8:35:ea:76:ef:f6:
13:c2:90:a8:5a:3b:6c:6a:ea:b2:6f:60:7f:76:eb:e5:36:90:
ea:51:1c:33:b5:bf:77:20:8a:b7:97:bb:d7:37:5a:18:08:c9:
eb:5e:54:92:60:64:fd:66:c7:d7:31:93:23:76:db:dc:e4:92:
de:39:54:ed:9c:33:e3:89:5e:1f:77:d4:32:d2:7b:fb:6e:51:
d9:34:94:35:47:cb:18:40:59:34:73:9b:c3:4c:5e:4e:9c:92:
0f:e1:d4:9e:9d:13:38:5b:21:50:4d:24:e6:c9:41:f3:ad:02:
30:72:4e:1f:62:5b:57:44:c2:57:41:80:a5:5b:5c:08:08:a7:
5f:01:25:0d:b9:45:97:58:3c:a4:a4:6a:62:c2:16:9d:3a:59:
09:bb:c4:07:90:2c:74:38:a2:82:88:68:7d:70:d0:6e:42:c3:
31:71:76:ba:99:9b:c2:eb:56:99:8e:46:24:de:91:7e:38:87:
b6:b4:08:e3:0e:b5:d9:fe:40:e5:82:d5:58:a9:fd:b5:66:d0:
49:ee:c5:3f:f8:a4:2a:28:c4:db:ed:4a:63:7d:15:c2:fd:de:
97:37:d5:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYm8KbfqPEvvRQl6GTasqhEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjMwODAzMTYwOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTMwZTZlYzYwZDczMjEzYmFhYjg1YzNlZjg3YmRjM2FiMjA3MmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1vM4iDDE4OjZ0cvWHdpi9+Z/J8E
ARl1xxSOGnzbso82zZvgIgfrp3LMv3fGIiSmgqwiycNsP6+ychuM1Gy5t3Th2sPF
648Av1WIizNtNVz3tVN/bMhgwlV8k4LhexKiuwfQOjwlzrPGTHhXyQCgt6EYb0wL
tyrFHV5IbhS1C1VmpywR2BLCt3fkMtEYW9mEwtOElrFPj2osLow9TZkm6+mBZnWS
CCDIOgf9wflRZZb8OHEGh8szufd/IijiItJOGeScimxe2zqcVhyXKdEv0xxL9GHH
UFANfXz4zZjtGVUOrPisMIZ7xDLPcXilIMB+ugvl2jBHkPB9sDRrOzvaSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJkw5uxg1zITuquFw++HvcOrIHLTMB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvbVREbTdHRFhNaE82cTRYRDc0ZTl3NnNnY3RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWnGMA0G
CSqGSIb3DQEBCwUAA4IBAQBT3f2s59UMZH2568u6cycajn0QsRCHxvFUD3I4aYGo
Nep27/YTwpCoWjtsauqyb2B/duvlNpDqURwztb93IIq3l7vXN1oYCMnrXlSSYGT9
ZsfXMZMjdtvc5JLeOVTtnDPjiV4fd9Qy0nv7blHZNJQ1R8sYQFk0c5vDTF5OnJIP
4dSenRM4WyFQTSTmyUHzrQIwck4fYltXRMJXQYClW1wICKdfASUNuUWXWDykpGpi
whadOlkJu8QHkCx0OKKCiGh9cNBuQsMxcXa6mZvC61aZjkYk3pF+OIe2tAjjDrXZ
/kDlgtVYqf21ZtBJ7sU/+KQqKMTb7UpjfRXC/d6XN9VM
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org