Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ByykkHvW9xAvL7c_TZE5tYu6tz8.roa
File: ByykkHvW9xAvL7c_TZE5tYu6tz8.roa (raw, json)
Hash identifier: a7sMQjS75fWMlauIYgo6Rd2+yJnr+LxOpjFyaMj+kis=
Subject key identifier: 07:2C:A4:90:7B:D6:F7:10:2F:2F:B7:3F:4D:91:39:B5:8B:BA:B7:3F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E10D0D6DAFADA71971287DDAD8D38
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ByykkHvW9xAvL7c_TZE5tYu6tz8.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.34.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 08:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:10:d0:d6:da:fa:da:71:97:12:87:dd:ad:8d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=072ca4907bd6f7102f2fb73f4d9139b58bbab73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c1:a9:a1:a9:45:af:e1:84:b4:81:3c:79:f6:
bf:55:ff:1d:63:bb:a2:6c:c6:d6:89:b0:66:9a:98:
d1:19:61:cc:01:b5:48:84:09:69:f2:70:a8:1a:ed:
e6:01:d5:df:be:59:a4:6c:6d:3a:cc:fa:1b:78:af:
9d:c7:b2:5d:d5:8d:88:f5:ca:44:47:cf:4e:29:fa:
a7:e7:7f:5c:9e:bc:fc:d3:45:fa:73:16:78:87:9a:
84:6c:c3:4c:f1:86:19:f0:fe:f2:a9:7a:3e:b2:1c:
d8:9f:cc:30:89:e5:11:b8:97:dd:16:d7:75:af:15:
08:53:5d:5d:0c:47:a4:84:d8:e3:40:5b:ac:f4:ec:
a8:4d:8a:f2:6e:66:87:7f:79:1b:d2:9f:45:b4:80:
5a:82:9d:df:46:3a:bf:54:3e:6f:5c:a8:31:e5:21:
80:2e:2c:53:23:97:3c:da:b1:79:8b:ec:b4:a8:05:
e7:b6:c9:9a:b4:b5:42:b9:6b:1b:4d:ac:ea:d4:f2:
7e:90:0e:8f:86:f7:f8:76:df:49:ce:6a:33:65:51:
b2:95:f8:f3:97:6d:2b:60:47:a3:99:be:8a:8b:11:
ee:96:d5:1d:1a:52:be:a8:a1:0d:39:8d:44:f3:88:
97:be:78:a1:80:78:b4:e3:b7:88:5b:82:9a:bc:e7:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2C:A4:90:7B:D6:F7:10:2F:2F:B7:3F:4D:91:39:B5:8B:BA:B7:3F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ByykkHvW9xAvL7c_TZE5tYu6tz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.34.0/24
109.121.44.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
52:fd:6e:7c:88:0a:f7:09:5a:d1:e6:35:fb:97:4d:57:34:ed:
80:84:66:73:4f:b5:dc:5c:30:3d:1e:af:d4:27:f7:40:db:bd:
cc:bf:88:14:4a:00:4a:f1:78:5d:bd:51:79:91:76:82:af:64:
a8:92:5b:e5:4e:cd:49:b1:b2:d7:3c:d7:10:85:fd:ee:8b:ba:
01:62:2e:ad:fa:5c:66:bc:09:a4:af:14:1a:4b:5f:45:fb:6b:
50:e9:5d:ae:bc:0b:17:fc:ac:c3:0a:8e:1f:91:73:5d:25:e2:
41:89:a3:0f:96:63:f0:21:1e:ec:a7:99:9a:e2:3b:1e:13:52:
26:a9:95:af:8d:04:fb:d5:c8:d4:22:e8:37:63:48:25:df:dc:
e8:d1:4e:14:17:df:62:d0:13:88:05:f2:cd:a9:dd:02:9a:98:
42:71:c9:8c:6d:30:80:d2:48:78:c2:81:0c:62:56:5b:31:c8:
9e:58:64:b0:fa:ea:7a:ed:4e:8b:5b:16:75:8e:8d:6c:09:1c:
a8:ca:a3:ba:99:12:f0:57:0a:dc:05:b7:35:e1:fc:47:5f:bb:
e3:5a:13:89:fe:f2:24:41:3c:65:9f:5e:b5:3b:67:a6:ff:bb:
48:a8:6a:0d:dc:62:85:83:d0:81:1b:4e:d3:53:ee:b6:f2:bc:
49:e9:9e:b0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzFbhDQ1tr62nGXEofdrY04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjQwMTAxMTQyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzJjYTQ5MDdiZDZmNzEwMmYyZmI3M2Y0ZDkxMzliNThiYmFiNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcGpoalFr+GEtIE8efa/Vf8dY7ui
bMbWibBmmpjRGWHMAbVIhAlp8nCoGu3mAdXfvlmkbG06zPobeK+dx7Jd1Y2I9cpE
R89OKfqn539cnrz800X6cxZ4h5qEbMNM8YYZ8P7yqXo+shzYn8wwieURuJfdFtd1
rxUIU11dDEekhNjjQFus9OyoTYrybmaHf3kb0p9FtIBagp3fRjq/VD5vXKgx5SGA
LixTI5c82rF5i+y0qAXntsmatLVCuWsbTazq1PJ+kA6Phvf4dt9JzmozZVGylfjz
l20rYEejmb6KixHultUdGlK+qKENOY1E84iXvnihgHi047eIW4KavOc8IQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAcspJB71vcQLy+3P02RObWLurc/MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvQnl5a2tIdlc5eEF2TDdjX1RaRTV0WXU2dHo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXkiAwQA
bXksAwQA1EUNMA0GCSqGSIb3DQEBCwUAA4IBAQBS/W58iAr3CVrR5jX7l01XNO2A
hGZzT7XcXDA9Hq/UJ/dA273Mv4gUSgBK8XhdvVF5kXaCr2SoklvlTs1JsbLXPNcQ
hf3ui7oBYi6t+lxmvAmkrxQaS19F+2tQ6V2uvAsX/KzDCo4fkXNdJeJBiaMPlmPw
IR7sp5ma4jseE1ImqZWvjQT71cjUIug3Y0gl39zo0U4UF99i0BOIBfLNqd0CmphC
ccmMbTCA0kh4woEMYlZbMcieWGSw+up67U6LWxZ1jo1sCRyoyqO6mRLwVwrcBbc1
4fxHX7vjWhOJ/vIkQTxln161O2em/7tIqGoN3GKFg9CBG07TU+628rxJ6Z6w
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org