Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/T9JHMnkuPvBYQRTbeljfkeGY268.roa
File: T9JHMnkuPvBYQRTbeljfkeGY268.roa (raw, json)
Hash identifier: z8vENwoBhYXB7jfg0s1g2wBAKDaJByyNSmk/381Y5v0=
Subject key identifier: 4F:D2:47:32:79:2E:3E:F0:58:41:14:DB:7A:58:DF:91:E1:98:DB:AF
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0186F16BA26699076F678BC4817EB4E11AEB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/T9JHMnkuPvBYQRTbeljfkeGY268.roa
Signing time: Fri 17 Mar 2023 21:13:28 +0000
ROA not before: Fri 17 Mar 2023 21:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.32.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f1:6b:a2:66:99:07:6f:67:8b:c4:81:7e:b4:e1:1a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 17 21:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fd24732792e3ef0584114db7a58df91e198dbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fe:08:aa:70:7e:45:86:5b:37:26:47:e7:0f:
0c:f9:14:9c:bc:8c:85:61:eb:e6:a5:cf:78:c2:ad:
e4:9b:c5:df:5b:4d:1f:3c:e6:a8:7e:30:67:b4:44:
16:2c:b0:ca:7d:45:2d:5d:83:69:61:d9:0e:41:82:
88:32:34:fc:cb:ea:6a:8a:13:bc:45:09:be:c2:05:
ee:ee:f3:a1:64:48:6b:85:21:fe:a9:8a:78:0e:4d:
81:e4:fc:27:98:69:fb:f6:db:51:f4:4a:82:02:04:
ef:e3:99:27:95:a9:81:42:2a:c5:5e:c3:e0:d5:de:
fd:fc:db:81:ce:80:dc:41:49:50:97:d2:09:21:78:
27:46:ad:a8:76:58:c3:4d:1a:87:cd:8c:8b:11:d1:
35:f3:2c:e6:01:bf:6d:53:c5:e3:9e:33:a2:04:cb:
32:49:36:9d:b7:3e:59:05:5d:ca:a2:9b:db:60:40:
1a:ca:c3:a8:62:42:ff:29:0b:82:87:08:b9:2e:56:
1b:ee:25:18:81:58:dc:fb:f9:b5:ca:46:cb:a3:78:
0e:ae:48:c6:e7:5b:da:a2:69:06:54:cc:0b:df:d1:
6c:34:09:cb:f5:13:d2:7f:ad:5e:c4:b1:18:8a:71:
4b:e3:56:40:69:a4:3e:23:66:10:6e:2d:a0:ce:43:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D2:47:32:79:2E:3E:F0:58:41:14:DB:7A:58:DF:91:E1:98:DB:AF
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/T9JHMnkuPvBYQRTbeljfkeGY268.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.32.0/24
109.121.43.0-109.121.44.255
109.121.46.0/24
188.255.128.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a6:b0:8a:11:38:b1:4d:33:b4:b0:70:72:9c:1b:25:b6:38:
ff:ce:dd:fe:9f:02:5f:38:6a:7c:6f:14:27:76:b5:8a:33:05:
fa:0c:1b:00:dd:e1:9f:32:f9:87:29:fe:3e:4a:88:a9:81:c5:
f6:ff:32:d8:b5:05:96:e6:df:81:19:14:1a:e9:6d:11:bd:4d:
5a:45:d9:a0:68:b5:ef:ec:1a:33:e0:64:8c:96:3d:60:f4:03:
b7:70:bd:f3:72:5c:d8:6f:1f:f2:e8:bc:fe:16:c8:4d:66:68:
58:f3:fa:8b:11:0e:de:96:05:37:c6:e4:b3:99:65:0d:84:3f:
dc:10:3e:d3:6c:35:6a:8b:53:a9:1e:7b:a5:76:e0:5f:dc:71:
37:c9:1a:bc:ea:2d:28:a3:33:3f:ca:04:36:7a:f8:04:e4:f2:
94:5a:77:1c:b9:c9:83:d8:5a:7e:1f:0a:e0:c9:09:0b:43:66:
4c:36:92:f5:26:68:84:ee:94:f0:69:f8:ca:34:f2:bd:ae:b7:
d3:20:9a:4e:2a:0a:48:ac:3d:61:8d:ba:a2:e7:14:3d:07:6d:
3f:cf:9a:96:76:c6:89:f8:9e:b3:18:2c:53:d5:4e:f4:a1:84:
83:67:53:16:69:d2:95:96:3e:3a:24:c4:17:b6:85:c1:a7:c1:
5c:c0:e0:c7
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYbxa6JmmQdvZ4vEgX604RrrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwMzE3MjExMzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmQyNDczMjc5MmUzZWYwNTg0MTE0ZGI3YTU4ZGY5MWUxOThkYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv4IqnB+RYZbNyZH5w8M+RScvIyF
Yevmpc94wq3km8XfW00fPOaofjBntEQWLLDKfUUtXYNpYdkOQYKIMjT8y+pqihO8
RQm+wgXu7vOhZEhrhSH+qYp4Dk2B5PwnmGn79ttR9EqCAgTv45knlamBQirFXsPg
1d79/NuBzoDcQUlQl9IJIXgnRq2odljDTRqHzYyLEdE18yzmAb9tU8XjnjOiBMsy
STadtz5ZBV3KopvbYEAaysOoYkL/KQuChwi5LlYb7iUYgVjc+/m1ykbLo3gOrkjG
51vaomkGVMwL39FsNAnL9RPSf61exLEYinFL41ZAaaQ+I2YQbi2gzkPURwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFE/SRzJ5Lj7wWEEU23pY35HhmNuvMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvVDlKSE1ua3VQdkJZUVJUYmVsamZrZUdZMjY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAbXkgMAwD
BABteSsDBABteSwDBABteS4DBAC8/4AwDQYJKoZIhvcNAQELBQADggEBAI+msIoR
OLFNM7SwcHKcGyW2OP/O3f6fAl84anxvFCd2tYozBfoMGwDd4Z8y+Ycp/j5KiKmB
xfb/Mti1BZbm34EZFBrpbRG9TVpF2aBote/sGjPgZIyWPWD0A7dwvfNyXNhvH/Lo
vP4WyE1maFjz+osRDt6WBTfG5LOZZQ2EP9wQPtNsNWqLU6kee6V24F/ccTfJGrzq
LSijMz/KBDZ6+ATk8pRadxy5yYPYWn4fCuDJCQtDZkw2kvUmaITulPBp+Mo08r2u
t9Mgmk4qCkisPWGNuqLnFD0HbT/PmpZ2xon4nrMYLFPVTvShhINnUxZp0pWWPjok
xBe2hcGnwVzA4Mc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org