Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/60JpGf9rqAaV1XW9SQqA1WliA4Q.roa
File: 60JpGf9rqAaV1XW9SQqA1WliA4Q.roa (raw, json)
Hash identifier: mnUxoQr5mi8K5XnF/7gw9Uhs4lzbzzSJyNdE7ekfP1k=
Subject key identifier: EB:42:69:19:FF:6B:A8:06:95:D5:75:BD:49:0A:80:D5:69:62:03:84
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01884CC341F24CAB7EE7E5531AE1373AB227
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/60JpGf9rqAaV1XW9SQqA1WliA4Q.roa
Signing time: Wed 24 May 2023 07:57:24 +0000
ROA not before: Wed 24 May 2023 07:57:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.32.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 09:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4c:c3:41:f2:4c:ab:7e:e7:e5:53:1a:e1:37:3a:b2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 24 07:57:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb426919ff6ba80695d575bd490a80d569620384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:56:93:32:6f:28:7e:a0:f7:17:4a:b1:c7:
ef:85:be:77:1c:84:07:2e:60:d1:ba:43:f2:ae:72:
94:23:e4:ae:f5:e8:b3:8c:dd:00:23:a4:b4:09:25:
23:00:2c:c6:b7:d5:3c:03:40:fe:2a:f0:e1:6f:04:
b8:37:3a:a8:19:c3:4c:6a:df:c5:11:66:0c:6b:6f:
77:3b:82:27:ce:ad:dc:6d:39:33:b3:8d:72:11:29:
12:c9:00:89:4a:53:78:01:45:bd:4b:aa:9f:0e:fb:
07:e3:ef:82:1d:69:5f:5e:81:e4:80:cf:0f:93:f5:
da:8b:8e:ee:04:63:d6:55:d1:da:15:45:b7:08:97:
ce:04:4e:c8:6f:12:d2:85:af:2c:94:c8:bc:73:e8:
c7:67:c2:4e:be:e9:2a:95:4f:28:72:38:b8:d0:dc:
08:64:58:73:5a:0e:87:62:7e:2e:fd:14:ec:14:f4:
7e:53:b1:16:54:d0:05:9d:7f:8a:22:53:a9:23:c1:
9c:e4:f9:1f:87:f5:09:10:f6:a7:07:b6:73:a7:e2:
63:c0:e7:fb:32:7a:fd:0d:bd:1b:d3:66:9d:31:03:
8c:b4:8a:10:c2:ab:1e:12:c8:e2:98:27:48:10:8f:
79:af:57:68:84:de:7a:25:72:29:b5:c4:9d:8c:8f:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:42:69:19:FF:6B:A8:06:95:D5:75:BD:49:0A:80:D5:69:62:03:84
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/60JpGf9rqAaV1XW9SQqA1WliA4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.32.0/24
109.121.43.0-109.121.44.255
109.121.46.0/24
188.255.128.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1a:48:e0:da:3b:0b:69:ee:72:fb:1a:37:5d:c9:ac:b8:ab:
66:ca:b6:a7:a1:37:2d:d3:df:a2:d3:6c:4d:75:56:82:33:e5:
1f:b0:a6:be:58:e4:77:bf:0c:d4:1d:d5:a8:84:50:b7:0b:bf:
96:c9:2d:3b:92:fb:87:52:ad:58:8d:09:51:2b:d6:5d:e3:85:
f0:ee:fa:67:ec:d1:cd:c7:a6:e6:df:59:23:21:7f:cf:3e:bd:
1c:61:71:6d:eb:42:bc:1b:42:61:da:f3:b1:dc:67:5f:d5:50:
a6:aa:5f:45:20:4f:9f:83:78:e4:46:aa:4f:6b:72:db:12:f7:
e3:6f:ea:db:19:d6:1b:2b:93:c3:c6:b1:be:16:1e:17:16:0d:
3a:6b:c8:30:84:57:79:8e:9e:8b:2e:6f:3e:5a:39:66:2d:06:
57:25:6e:34:eb:9b:8d:dd:d9:90:ca:b5:d8:df:e6:9c:f3:79:
47:35:af:71:e8:f4:04:63:80:e7:fb:8a:38:ac:c4:a2:4d:18:
e8:c0:d0:09:59:8f:ee:ed:e8:b5:7b:fb:80:a3:ad:90:d0:1e:
a1:11:1e:2c:d7:8c:d9:3d:3e:cb:48:da:bc:23:b0:f6:ff:61:
d6:b1:e2:23:68:70:02:3c:22:a4:1c:c2:58:13:56:67:c3:ef:
9b:e2:5b:aa
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYhMw0HyTKt+5+VTGuE3OrInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwNTI0MDc1NzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjQyNjkxOWZmNmJhODA2OTVkNTc1YmQ0OTBhODBkNTY5NjIwMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvlWkzJvKH6g9xdKscfvhb53HIQH
LmDRukPyrnKUI+Su9eizjN0AI6S0CSUjACzGt9U8A0D+KvDhbwS4NzqoGcNMat/F
EWYMa293O4Inzq3cbTkzs41yESkSyQCJSlN4AUW9S6qfDvsH4++CHWlfXoHkgM8P
k/Xai47uBGPWVdHaFUW3CJfOBE7IbxLSha8slMi8c+jHZ8JOvukqlU8ocji40NwI
ZFhzWg6HYn4u/RTsFPR+U7EWVNAFnX+KIlOpI8Gc5Pkfh/UJEPanB7Zzp+JjwOf7
Mnr9Db0b02adMQOMtIoQwqseEsjimCdIEI95r1dohN56JXIptcSdjI/AeQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFOtCaRn/a6gGldV1vUkKgNVpYgOEMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvNjBKcEdmOXJxQWFWMVhXOVNRcUExV2xpQTRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAbXkgMAwD
BABteSsDBABteSwDBABteS4DBAC8/4ADBADURQ0wDQYJKoZIhvcNAQELBQADggEB
AAUaSODaOwtp7nL7Gjddyay4q2bKtqehNy3T36LTbE11VoIz5R+wpr5Y5He/DNQd
1aiEULcLv5bJLTuS+4dSrViNCVEr1l3jhfDu+mfs0c3HpubfWSMhf88+vRxhcW3r
QrwbQmHa87HcZ1/VUKaqX0UgT5+DeORGqk9rctsS9+Nv6tsZ1hsrk8PGsb4WHhcW
DTpryDCEV3mOnosubz5aOWYtBlclbjTrm43d2ZDKtdjf5pzzeUc1r3Ho9ARjgOf7
ijisxKJNGOjA0AlZj+7t6LV7+4CjrZDQHqERHizXjNk9PstI2rwjsPb/Ydax4iNo
cAI8IqQcwlgTVmfD75viW6o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:25 2024 by rpki-client on console-fra.rpki-client.org