Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/E1dBlvOevNIf1Z7wVcxpeXYhxpo.roa
File: E1dBlvOevNIf1Z7wVcxpeXYhxpo.roa (raw, json)
Hash identifier: 9wEPIvtzBUAwweaJmIo5EefMEB3lZilzx/qL1zdddT8=
Subject key identifier: 13:57:41:96:F3:9E:BC:D2:1F:D5:9E:F0:55:CC:69:79:76:21:C6:9A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018BAF2016C306ECEEB031997F2E209343A1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/E1dBlvOevNIf1Z7wVcxpeXYhxpo.roa
Signing time: Wed 08 Nov 2023 13:29:57 +0000
ROA not before: Wed 08 Nov 2023 13:29:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.35.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
212.69.10.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:20:16:c3:06:ec:ee:b0:31:99:7f:2e:20:93:43:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 8 13:29:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13574196f39ebcd21fd59ef055cc69797621c69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d1:04:ec:d3:58:b4:17:f0:88:c7:6f:6c:a3:
a7:7a:1f:1c:37:3f:4b:3d:2a:fd:42:92:aa:79:a8:
2f:9f:45:f6:bf:de:20:92:73:b7:94:74:29:08:82:
e3:41:aa:0a:26:fc:e0:3b:96:65:22:f8:f4:27:89:
95:e7:26:34:ab:e9:ed:d9:be:fa:1d:9f:65:54:1e:
f4:25:2a:21:13:9d:d8:fb:18:fd:82:f4:84:a7:00:
ba:57:3a:db:dc:e4:f6:b4:ee:5f:bf:39:08:1f:5c:
5e:29:58:93:91:d0:1b:30:58:58:00:1a:34:4d:da:
b3:12:23:2a:47:a9:24:1e:46:99:36:45:39:37:78:
9f:5e:6b:39:c7:f4:25:31:d9:89:82:92:0e:85:8b:
62:4f:be:b8:3a:7b:b5:76:96:44:b1:45:42:44:4a:
85:34:65:b8:71:be:06:2d:75:c9:bf:d0:d0:4a:56:
6f:0c:c7:0c:7e:b9:eb:70:83:8e:a4:ed:56:05:23:
5d:30:7f:bb:3d:a4:9d:d7:c9:b4:80:19:97:be:df:
48:b8:81:73:a3:c7:25:e4:7b:6f:e3:f0:39:c7:d3:
58:42:e0:5a:f2:df:30:d2:dc:16:43:b0:3c:c2:cb:
8b:11:d4:3b:f1:76:50:a2:34:45:2b:cd:db:02:3c:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:57:41:96:F3:9E:BC:D2:1F:D5:9E:F0:55:CC:69:79:76:21:C6:9A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/E1dBlvOevNIf1Z7wVcxpeXYhxpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.35.0/24
109.121.43.0/24
185.47.91.0/24
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
15:6a:29:4c:e4:1f:2e:c1:06:78:c1:3e:b6:1b:39:99:7d:41:
a2:d8:4b:3e:30:d5:95:94:ae:00:df:d0:cc:80:fa:6b:c9:7e:
d0:f5:32:4b:0e:4d:e7:b1:38:c4:b6:69:0f:d0:41:8b:54:1b:
f7:94:c2:60:6a:04:18:3d:ff:bb:e3:80:f9:f5:68:40:ad:9b:
2a:0a:22:2b:de:27:63:3b:b0:eb:a4:00:8c:6d:18:8d:ad:95:
c5:a5:9c:c1:f4:08:ee:9b:63:4d:3b:b2:c5:cc:d5:12:68:68:
a9:3f:9f:83:9a:b5:71:58:c3:a6:6d:65:84:b9:c4:1a:00:7f:
c1:88:d1:90:51:2d:75:f1:f8:e4:18:1e:33:1a:b2:50:3e:ee:
07:72:40:dd:d2:bb:31:77:c0:35:a4:a4:63:97:3d:5f:80:98:
51:5c:91:b7:78:c3:ff:d1:50:46:13:e8:de:93:88:0c:13:49:
ca:e2:0d:9f:d6:bb:c7:75:c1:5b:d2:8b:b3:5d:ae:05:b1:1a:
dc:2c:57:58:62:cb:99:64:c8:17:32:a7:5a:c1:bf:e4:e8:96:
cb:e8:21:fc:2f:5b:3d:71:32:de:e7:d3:f6:85:65:ee:71:a2:
dd:44:f5:7c:5c:63:f2:c7:af:2a:a6:87:10:05:fd:d1:88:16:
a5:6b:28:a4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYuvIBbDBuzusDGZfy4gk0OhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMxMTA4MTMyOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzU3NDE5NmYzOWViY2QyMWZkNTllZjA1NWNjNjk3OTc2MjFjNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9EE7NNYtBfwiMdvbKOneh8cNz9L
PSr9QpKqeagvn0X2v94gknO3lHQpCILjQaoKJvzgO5ZlIvj0J4mV5yY0q+nt2b76
HZ9lVB70JSohE53Y+xj9gvSEpwC6Vzrb3OT2tO5fvzkIH1xeKViTkdAbMFhYABo0
TdqzEiMqR6kkHkaZNkU5N3ifXms5x/QlMdmJgpIOhYtiT764Onu1dpZEsUVCREqF
NGW4cb4GLXXJv9DQSlZvDMcMfrnrcIOOpO1WBSNdMH+7PaSd18m0gBmXvt9IuIFz
o8cl5Htv4/A5x9NYQuBa8t8w0twWQ7A8wsuLEdQ78XZQojRFK83bAjxpBwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBNXQZbznrzSH9We8FXMaXl2IcaaMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvRTFkQmx2T2V2TklmMVo3d1ZjeHBlWFloeHBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAbXkjAwQA
bXkrAwQAuS9bAwQA1EUKMA0GCSqGSIb3DQEBCwUAA4IBAQAVailM5B8uwQZ4wT62
GzmZfUGi2Es+MNWVlK4A39DMgPpryX7Q9TJLDk3nsTjEtmkP0EGLVBv3lMJgagQY
Pf+744D59WhArZsqCiIr3idjO7DrpACMbRiNrZXFpZzB9Ajum2NNO7LFzNUSaGip
P5+DmrVxWMOmbWWEucQaAH/BiNGQUS118fjkGB4zGrJQPu4HckDd0rsxd8A1pKRj
lz1fgJhRXJG3eMP/0VBGE+jek4gME0nK4g2f1rvHdcFb0ouzXa4FsRrcLFdYYsuZ
ZMgXMqdawb/k6JbL6CH8L1s9cTLe59P2hWXucaLdRPV8XGPyx68qpocQBf3RiBal
ayik
-----END CERTIFICATE-----
Generated at Tue Dec 5 16:45:23 2023 by rpki-client on console-fra.rpki-client.org