Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/0epqh_hurozr5TPy2faIHYKw73I.roa
File: 0epqh_hurozr5TPy2faIHYKw73I.roa (raw, json)
Hash identifier: xGNyBmvpJQfRqo2o0QcieqVwnq1veKXyH8loK4VoCXA=
Subject key identifier: D1:EA:6A:87:F8:6E:AE:8C:EB:E5:33:F2:D9:F6:88:1D:82:B0:EF:72
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 01856FF966448794FFF57C3A967078011D5D
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/0epqh_hurozr5TPy2faIHYKw73I.roa
Signing time: Mon 02 Jan 2023 00:54:53 +0000
ROA not before: Mon 02 Jan 2023 00:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197211
IP address blocks: 109.104.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:66:44:87:94:ff:f5:7c:3a:96:70:78:01:1d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Jan 2 00:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1ea6a87f86eae8cebe533f2d9f6881d82b0ef72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:d4:46:37:b6:c6:a3:05:2e:05:0e:9a:2f:
4f:53:70:eb:77:ec:e7:5e:b5:26:67:b9:cd:75:72:
00:07:34:eb:7c:99:3e:77:78:5d:49:95:b5:38:b8:
0f:48:c4:84:f9:a2:c9:26:86:ea:52:f4:1e:30:e7:
2f:c9:b2:0e:3d:5d:d6:72:90:4f:5e:72:ad:98:3f:
27:a0:43:95:47:99:77:e5:86:fb:cc:b0:7a:92:0f:
03:ea:92:32:d7:b2:b0:25:eb:c1:c2:1b:f5:5f:21:
28:8a:2d:e6:90:bc:16:d3:8a:6d:90:87:e4:61:ee:
51:b5:9b:c6:0a:b1:4e:72:50:aa:e9:d2:f5:e7:24:
60:ce:f0:e2:04:a6:10:38:f8:20:b5:7f:f4:4b:15:
cd:1b:50:6f:36:73:d0:5b:3f:5c:b0:da:a2:de:96:
0c:7a:5f:8f:9a:db:c6:7d:a1:00:7e:3e:b5:17:62:
36:45:85:8c:99:aa:9d:0a:87:d7:9f:85:2d:20:f0:
e8:b0:bb:e6:64:60:44:9d:f1:ee:ab:72:ef:24:a2:
bd:41:12:85:94:de:56:40:67:76:d1:5a:e5:ee:a5:
8a:bc:9c:93:01:19:5d:ce:c4:1a:0a:d3:e9:4c:60:
07:0d:b4:c8:e9:40:46:f5:87:5b:d1:88:7f:61:11:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EA:6A:87:F8:6E:AE:8C:EB:E5:33:F2:D9:F6:88:1D:82:B0:EF:72
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/0epqh_hurozr5TPy2faIHYKw73I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.246.0/24
Signature Algorithm: sha256WithRSAEncryption
11:4b:f6:b0:1e:07:92:df:98:64:08:0b:07:0f:1b:d9:b3:f4:
2d:4d:ea:8a:ca:f1:71:48:dd:3f:38:2f:56:2e:7a:f8:fc:74:
98:f5:b5:7d:98:f7:fc:b0:fb:72:04:38:6c:7b:4c:e5:9b:f4:
cb:fc:22:2c:2e:03:5c:6d:49:ad:66:0d:c5:44:f4:bf:a4:ca:
da:e8:b5:90:77:76:3b:02:6b:ed:03:c7:dc:b6:58:92:51:f3:
88:a7:4c:4b:ec:b1:df:e2:56:7c:bc:8c:5e:2c:20:b3:cd:f4:
ed:09:f3:b5:b6:ec:5d:ba:e7:1d:dc:15:b7:7d:53:23:b9:99:
31:e4:aa:ea:12:dc:2d:a7:05:71:2c:fa:05:d2:f6:96:6e:88:
77:58:5f:b8:69:9e:ba:77:09:c2:96:65:15:23:16:43:95:01:
19:18:27:82:d3:3e:58:b4:6d:f8:53:5c:5e:8f:50:cf:c9:fd:
86:43:8b:c5:49:40:9a:a7:1a:a5:32:1c:da:dd:b6:0d:ec:65:
83:46:9c:c5:78:48:38:90:1f:fc:d5:c0:7a:3e:8d:9f:89:cc:
6c:52:f0:32:20:57:d2:e1:4a:72:8a:5c:fc:5c:4f:c3:40:f3:
ab:66:5e:8c:45:0d:bc:7b:3e:a1:a9:89:3b:48:39:72:e2:85:
00:b5:e6:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv+WZEh5T/9Xw6lnB4AR1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzUwZDAyNGFmMDFmOGVhZjEyNTcxN2NhYTAzYWFmYWQx
ODRlMWQwHhcNMjMwMTAyMDA1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWVhNmE4N2Y4NmVhZThjZWJlNTMzZjJkOWY2ODgxZDgyYjBlZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWTURje2xqMFLgUOmi9PU3Drd+zn
XrUmZ7nNdXIABzTrfJk+d3hdSZW1OLgPSMSE+aLJJobqUvQeMOcvybIOPV3WcpBP
XnKtmD8noEOVR5l35Yb7zLB6kg8D6pIy17KwJevBwhv1XyEoii3mkLwW04ptkIfk
Ye5RtZvGCrFOclCq6dL15yRgzvDiBKYQOPggtX/0SxXNG1BvNnPQWz9csNqi3pYM
el+PmtvGfaEAfj61F2I2RYWMmaqdCofXn4UtIPDosLvmZGBEnfHuq3LvJKK9QRKF
lN5WQGd20Vrl7qWKvJyTARldzsQaCtPpTGAHDbTI6UBG9Ydb0Yh/YRE2TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNHqaof4bq6M6+Uz8tn2iB2CsO9yMB8GA1UdIwQY
MBaAFHo1DQJK8B+OrxJXF8qgOq+tGE4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTkt
ZDAwM2U1NmZlNzUzLzEvMGVwcWhfaHVyb3pyNVRQeTJmYUlIWUt3NzNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTktZDAwM2U1NmZlNzUz
LzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWj2MA0G
CSqGSIb3DQEBCwUAA4IBAQARS/awHgeS35hkCAsHDxvZs/QtTeqKyvFxSN0/OC9W
Lnr4/HSY9bV9mPf8sPtyBDhse0zlm/TL/CIsLgNcbUmtZg3FRPS/pMra6LWQd3Y7
AmvtA8fctliSUfOIp0xL7LHf4lZ8vIxeLCCzzfTtCfO1tuxduucd3BW3fVMjuZkx
5KrqEtwtpwVxLPoF0vaWboh3WF+4aZ66dwnClmUVIxZDlQEZGCeC0z5YtG34U1xe
j1DPyf2GQ4vFSUCapxqlMhza3bYN7GWDRpzFeEg4kB/81cB6Po2ficxsUvAyIFfS
4Upyilz8XE/DQPOrZl6MRQ28ez6hqYk7SDly4oUAteZN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:25 2024 by rpki-client on console-ams.rpki-client.org