Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/6U63yrJl8Ydirh0U6bSim6r2IoE.roa
File: 6U63yrJl8Ydirh0U6bSim6r2IoE.roa (raw, json)
Hash identifier: UehHwLJvc3HZKd9uYWRmb8R4nlAa4U0eII5kQk9rBLI=
Subject key identifier: E9:4E:B7:CA:B2:65:F1:87:62:AE:1D:14:E9:B4:A2:9B:AA:F6:22:81
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01875B945BCBE78960308AA760371EF03E0D
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/6U63yrJl8Ydirh0U6bSim6r2IoE.roa
Signing time: Fri 07 Apr 2023 11:57:42 +0000
ROA not before: Fri 07 Apr 2023 11:57:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147001
IP address blocks: 109.206.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:94:5b:cb:e7:89:60:30:8a:a7:60:37:1e:f0:3e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Apr 7 11:57:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e94eb7cab265f18762ae1d14e9b4a29baaf62281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:ef:4b:5b:56:46:c5:b1:41:88:72:09:38:
89:a4:af:27:11:f8:04:4c:57:1a:46:c1:a6:1e:42:
a8:b5:97:b8:0e:e1:10:75:88:1a:47:b8:21:cd:a8:
52:a5:d6:aa:29:68:b2:c0:df:98:be:53:6d:3b:2d:
5f:a1:be:40:9d:bf:f7:32:68:e0:61:95:d6:89:60:
10:c3:ac:a7:16:10:50:25:11:bf:89:8c:c7:33:05:
8f:86:38:d6:5d:8c:13:c1:ed:90:01:a8:85:e5:3f:
67:71:d6:a5:47:6b:ed:35:c5:4b:8d:56:34:90:de:
b7:ed:bc:d0:92:a0:12:10:f1:a8:16:c9:64:f9:e4:
c5:37:93:2d:6d:74:50:d2:84:10:d1:26:63:09:3b:
4d:c7:5c:88:e7:d1:dc:4c:9d:c4:f7:8d:cb:b7:bb:
18:56:db:76:4c:27:8a:94:69:3a:2e:6c:8d:df:97:
16:13:3c:af:a4:87:3c:0d:40:a1:cb:be:df:cc:39:
e0:e3:19:2c:cd:b5:db:7e:7f:0e:a0:94:4b:10:89:
94:50:91:e0:fe:b2:75:b7:cf:40:32:17:08:8a:d2:
ff:0d:4a:f7:b2:00:07:36:0b:79:84:b4:f3:5a:25:
a6:8f:df:71:9a:b6:e3:64:90:d5:74:7d:0d:29:0e:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:B7:CA:B2:65:F1:87:62:AE:1D:14:E9:B4:A2:9B:AA:F6:22:81
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/6U63yrJl8Ydirh0U6bSim6r2IoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.244.0/24
Signature Algorithm: sha256WithRSAEncryption
53:5e:52:2d:e1:3d:ef:65:f4:82:66:6a:84:74:92:30:45:65:
5a:1a:fe:95:77:94:5c:66:53:9a:e1:83:98:c4:64:86:dc:fb:
40:03:53:c4:bb:18:f4:ed:48:68:3b:e4:a1:02:36:59:32:9c:
d5:3b:53:ae:d3:1e:81:f0:5b:08:34:33:48:23:16:98:78:6d:
df:b9:ed:43:4e:b6:90:ab:e5:8d:54:be:c4:53:ca:2a:bd:08:
e1:5b:02:64:18:bb:52:9e:8f:28:40:c2:82:4e:a6:df:2b:b9:
99:42:2d:67:09:2e:d2:19:16:5e:fc:a5:f3:ec:bc:71:ee:2e:
72:32:14:f6:c4:3a:6d:f7:05:f7:61:50:4f:e7:9b:b0:33:1f:
a6:06:c9:a6:f8:02:ac:e2:4d:71:4e:ce:a0:35:b9:d7:8d:5f:
a5:86:fd:f6:d3:b9:5c:31:29:9b:9b:c1:d8:81:c5:23:79:e5:
7e:36:d8:eb:a1:96:d6:7e:0f:f2:de:66:89:ee:59:3e:7f:6a:
69:70:e6:6f:2f:8b:29:c7:f3:5b:c7:81:c2:ad:ba:ca:96:81:
e1:68:ef:31:de:03:9c:85:17:26:9b:b1:30:75:92:65:2f:2a:
b4:85:85:b2:2f:e7:4d:03:6c:ee:85:66:ba:69:21:27:74:38:
76:dd:5b:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdblFvL54lgMIqnYDce8D4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4
Y2RhNmUwHhcNMjMwNDA3MTE1NzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTRlYjdjYWIyNjVmMTg3NjJhZTFkMTRlOWI0YTI5YmFhZjYyMjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6bvS1tWRsWxQYhyCTiJpK8nEfgE
TFcaRsGmHkKotZe4DuEQdYgaR7ghzahSpdaqKWiywN+YvlNtOy1fob5Anb/3Mmjg
YZXWiWAQw6ynFhBQJRG/iYzHMwWPhjjWXYwTwe2QAaiF5T9ncdalR2vtNcVLjVY0
kN637bzQkqASEPGoFslk+eTFN5MtbXRQ0oQQ0SZjCTtNx1yI59HcTJ3E943Lt7sY
Vtt2TCeKlGk6LmyN35cWEzyvpIc8DUChy77fzDng4xkszbXbfn8OoJRLEImUUJHg
/rJ1t89AMhcIitL/DUr3sgAHNgt5hLTzWiWmj99xmrbjZJDVdH0NKQ6s/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlOt8qyZfGHYq4dFOm0opuq9iKBMB8GA1UdIwQY
MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt
NjUzMzJiNDdmNWViLzEvNlU2M3lySmw4WWRpcmgwVTZiU2ltNnIySW9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi
LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc70MA0G
CSqGSIb3DQEBCwUAA4IBAQBTXlIt4T3vZfSCZmqEdJIwRWVaGv6Vd5RcZlOa4YOY
xGSG3PtAA1PEuxj07UhoO+ShAjZZMpzVO1Ou0x6B8FsINDNIIxaYeG3fue1DTraQ
q+WNVL7EU8oqvQjhWwJkGLtSno8oQMKCTqbfK7mZQi1nCS7SGRZe/KXz7Lxx7i5y
MhT2xDpt9wX3YVBP55uwMx+mBsmm+AKs4k1xTs6gNbnXjV+lhv3207lcMSmbm8HY
gcUjeeV+NtjroZbWfg/y3maJ7lk+f2ppcOZvL4spx/Nbx4HCrbrKloHhaO8x3gOc
hRcmm7EwdZJlLyq0hYWyL+dNA2zuhWa6aSEndDh23Vt+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:20 2023 by rpki-client on console-ams.rpki-client.org