Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QS8oUSNhXBr47lsgEIxWOfWquTU.roa
File: QS8oUSNhXBr47lsgEIxWOfWquTU.roa (raw, json)
Hash identifier: aJH0inaTJhPv9X2TidaQmN2ZIwb0Odaz0amisCNaB6c=
Subject key identifier: 41:2F:28:51:23:61:5C:1A:F8:EE:5B:20:10:8C:56:39:F5:AA:B9:35
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0186FF7165A55B108B83C2D7C6659BFEFC26
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QS8oUSNhXBr47lsgEIxWOfWquTU.roa
Signing time: Mon 20 Mar 2023 14:34:27 +0000
ROA not before: Mon 20 Mar 2023 14:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212953
IP address blocks: 109.121.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:71:65:a5:5b:10:8b:83:c2:d7:c6:65:9b:fe:fc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 20 14:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=412f285123615c1af8ee5b20108c5639f5aab935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:fb:5b:ef:b7:0b:7d:d2:c0:a9:b0:3f:82:
4d:ab:cc:20:7a:e1:a3:3e:35:70:98:e9:de:9e:36:
ed:7a:33:a9:03:fb:bc:03:e7:50:d0:9e:b8:af:33:
db:2a:1f:cc:41:ba:ef:3a:07:a8:f7:d0:7c:48:32:
62:14:4c:19:8d:83:fc:4c:e5:b2:a3:08:09:b5:27:
c6:31:ca:f1:ce:e1:55:ba:ac:d4:eb:06:6c:ff:86:
f0:de:43:e0:4f:75:a4:07:40:96:15:9e:8e:94:64:
20:55:98:26:b3:9a:50:25:30:18:47:a1:76:3c:74:
a5:4f:e6:c0:53:61:ef:36:9c:6b:6f:56:fd:6b:47:
13:fd:6d:80:ff:c2:d0:ef:ce:13:df:bf:c4:2a:3a:
fa:5d:0c:85:43:a7:ea:c2:50:0f:25:96:cc:29:13:
d4:23:98:84:69:99:28:c6:db:37:0b:0a:a2:7b:04:
b0:26:e1:ab:54:ce:ab:4e:48:67:25:45:d7:8d:f1:
b4:ff:77:57:2d:cc:fc:f3:03:8e:9c:06:a5:67:04:
50:f0:6a:10:64:0d:cd:74:d5:bc:63:72:71:21:f4:
01:f4:fe:84:39:d3:69:f5:13:e1:1d:46:8b:d7:8f:
7c:d4:00:0a:b0:33:92:32:ec:52:22:17:df:14:84:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:28:51:23:61:5C:1A:F8:EE:5B:20:10:8C:56:39:F5:AA:B9:35
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QS8oUSNhXBr47lsgEIxWOfWquTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.40.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b2:72:51:c4:66:d6:63:3e:b1:58:16:94:e6:ca:2b:7f:70:
1f:1e:43:a8:b3:72:91:e3:c1:c8:80:82:59:c2:86:9e:1b:07:
53:64:35:a9:ca:6b:d3:47:94:3c:81:3b:7c:a2:a4:fc:3c:04:
55:83:15:04:8b:a5:8f:94:e0:5d:34:5c:ad:1e:25:1e:9c:4c:
80:e1:79:75:4f:b9:95:4d:9f:79:ab:84:1d:f4:e4:63:2b:bb:
a8:8b:8b:c1:7a:83:7d:3c:5c:09:2d:65:ef:fa:2f:34:38:8d:
da:e1:ac:42:ba:a7:ad:74:d8:c6:9e:eb:d3:c8:0c:17:cf:87:
cd:0f:86:55:25:df:1b:fe:b1:3b:1e:65:34:ff:1e:cf:5a:0a:
5b:24:06:05:b5:b2:77:39:a7:fc:a1:7a:34:4f:e6:82:23:99:
7e:72:2f:64:51:87:40:2b:c8:03:c1:f6:28:50:d7:19:52:05:
60:01:be:6d:d0:f6:8a:a6:ae:bc:68:1b:32:d9:e8:4d:26:81:
7a:ca:d1:e5:3e:9c:39:37:8d:ce:19:98:2b:2b:98:ae:f2:7e:
70:50:7f:e4:16:ba:f2:96:42:61:a6:de:94:eb:a2:8e:bf:f8:
00:19:20:9d:20:fe:0a:e1:3a:94:22:1b:00:28:d1:87:98:99:
d1:8f:9e:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYb/cWWlWxCLg8LXxmWb/vwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwMzIwMTQzNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTJmMjg1MTIzNjE1YzFhZjhlZTViMjAxMDhjNTYzOWY1YWFiOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaz7W++3C33SwKmwP4JNq8wgeuGj
PjVwmOnenjbtejOpA/u8A+dQ0J64rzPbKh/MQbrvOgeo99B8SDJiFEwZjYP8TOWy
owgJtSfGMcrxzuFVuqzU6wZs/4bw3kPgT3WkB0CWFZ6OlGQgVZgms5pQJTAYR6F2
PHSlT+bAU2HvNpxrb1b9a0cT/W2A/8LQ784T37/EKjr6XQyFQ6fqwlAPJZbMKRPU
I5iEaZkoxts3CwqiewSwJuGrVM6rTkhnJUXXjfG0/3dXLcz88wOOnAalZwRQ8GoQ
ZA3NdNW8Y3JxIfQB9P6EOdNp9RPhHUaL14981AAKsDOSMuxSIhffFITAXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEvKFEjYVwa+O5bIBCMVjn1qrk1MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvUVM4b1VTTmhYQnI0N2xzZ0VJeFdPZldxdVRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXkoMA0G
CSqGSIb3DQEBCwUAA4IBAQBksnJRxGbWYz6xWBaU5sorf3AfHkOos3KR48HIgIJZ
woaeGwdTZDWpymvTR5Q8gTt8oqT8PARVgxUEi6WPlOBdNFytHiUenEyA4Xl1T7mV
TZ95q4Qd9ORjK7uoi4vBeoN9PFwJLWXv+i80OI3a4axCuqetdNjGnuvTyAwXz4fN
D4ZVJd8b/rE7HmU0/x7PWgpbJAYFtbJ3Oaf8oXo0T+aCI5l+ci9kUYdAK8gDwfYo
UNcZUgVgAb5t0PaKpq68aBsy2ehNJoF6ytHlPpw5N43OGZgrK5iu8n5wUH/kFrry
lkJhpt6U66KOv/gAGSCdIP4K4TqUIhsAKNGHmJnRj54z
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org