Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WsjABwDN4lkvo2ENca_Z_gjhrgo.roa
File: WsjABwDN4lkvo2ENca_Z_gjhrgo.roa (raw, json)
Hash identifier: B4K4PFk7Mt3mKCpGuvVKg4VJ44HsonVUPJy/9J6FQgA=
Subject key identifier: 5A:C8:C0:07:00:CD:E2:59:2F:A3:61:0D:71:AF:D9:FE:08:E1:AE:0A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01886B98F0646AE65C7DA7724385742A18DE
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WsjABwDN4lkvo2ENca_Z_gjhrgo.roa
Signing time: Tue 30 May 2023 07:39:25 +0000
ROA not before: Tue 30 May 2023 07:39:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.35.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 09:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:98:f0:64:6a:e6:5c:7d:a7:72:43:85:74:2a:18:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 30 07:39:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ac8c00700cde2592fa3610d71afd9fe08e1ae0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:62:1a:ab:a7:49:52:ec:00:2b:79:1c:50:
db:14:73:76:4a:e4:3a:96:9d:ac:82:07:86:7a:61:
52:c0:dd:de:7f:57:04:3e:69:e8:a7:39:d8:10:21:
fa:fc:87:2b:60:e3:57:3a:7d:52:36:a2:2d:64:40:
7a:ab:82:cf:86:1b:ee:b3:8f:4e:7d:91:57:14:bf:
3c:83:e3:eb:2d:56:c6:c9:e9:8d:95:7d:db:ef:66:
62:5c:28:41:c1:d6:ad:9e:cb:cb:d5:1a:31:9b:cf:
6b:6e:4b:0f:24:b5:5a:ba:6f:6c:95:fa:1f:54:aa:
d2:d1:aa:b2:86:9b:3a:03:f7:b0:63:be:26:df:62:
e4:4c:b8:1e:ca:94:34:7d:e3:ee:05:e2:64:e1:3e:
ad:87:9a:27:e6:94:7b:41:aa:1c:21:5c:d8:45:ef:
2a:cb:c1:30:68:47:40:1f:88:15:9e:e2:23:fc:98:
01:d2:5b:52:5c:80:cf:48:0e:ee:e9:10:4a:e4:3b:
0b:fc:39:fc:aa:1e:49:89:e9:21:89:0e:be:32:1c:
db:07:0e:88:c4:3c:ba:db:3c:65:87:d7:8d:1f:51:
f6:18:24:50:2d:4e:6d:f3:71:79:1d:38:ca:10:49:
ee:99:de:94:1c:5c:a0:4a:fa:78:5c:22:cc:34:6b:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C8:C0:07:00:CD:E2:59:2F:A3:61:0D:71:AF:D9:FE:08:E1:AE:0A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WsjABwDN4lkvo2ENca_Z_gjhrgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.35.0/24
109.121.40.0/24
109.233.185.0/24
188.255.140.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3f:c5:1f:8b:10:58:13:59:4d:ee:88:13:39:3e:b4:d7:62:
39:7c:b7:72:f4:3c:49:a9:3a:f9:07:e3:17:17:87:97:db:dd:
85:a4:38:fd:e5:a4:39:36:29:62:19:50:91:e6:d6:a8:47:29:
40:f5:39:ce:8e:07:01:1a:a0:c3:dc:e8:65:46:0a:91:20:12:
6a:40:0b:27:8e:76:95:3b:26:86:bf:24:b9:59:87:3d:2a:78:
db:02:c9:5b:fb:38:d3:c5:01:c9:49:08:8d:5a:20:1a:d7:e8:
54:25:0e:9d:e4:64:86:d0:08:1e:7f:c6:4e:cf:ed:4b:88:7c:
6a:74:c5:f6:44:b9:6f:e2:56:fa:17:67:93:ab:ae:de:8e:cd:
f4:b2:98:62:46:9d:5d:2d:7d:5b:4c:92:5a:d3:0a:06:1e:02:
74:54:dd:07:00:21:25:a7:ad:59:8d:bb:dc:27:ca:67:01:d5:
bc:b2:41:fa:84:02:92:f9:12:58:c7:33:e6:94:9b:19:70:67:
da:12:35:33:1c:6b:c9:9d:0d:25:ec:30:c0:7e:e5:b9:4d:04:
67:74:2a:dc:54:78:9b:e9:c9:21:74:e9:c6:51:88:0c:09:34:
63:fe:5b:64:e1:92:64:00:71:8f:e6:c5:53:fa:33:01:8e:ff:
b6:cc:f7:63
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYhrmPBkauZcfadyQ4V0KhjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwNTMwMDczOTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWM4YzAwNzAwY2RlMjU5MmZhMzYxMGQ3MWFmZDlmZTA4ZTFhZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCJiGqunSVLsACt5HFDbFHN2SuQ6
lp2sggeGemFSwN3ef1cEPmnopznYECH6/IcrYONXOn1SNqItZEB6q4LPhhvus49O
fZFXFL88g+PrLVbGyemNlX3b72ZiXChBwdatnsvL1Roxm89rbksPJLVaum9slfof
VKrS0aqyhps6A/ewY74m32LkTLgeypQ0fePuBeJk4T6th5on5pR7QaocIVzYRe8q
y8EwaEdAH4gVnuIj/JgB0ltSXIDPSA7u6RBK5DsL/Dn8qh5JiekhiQ6+MhzbBw6I
xDy62zxlh9eNH1H2GCRQLU5t83F5HTjKEEnumd6UHFygSvp4XCLMNGu5+QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFrIwAcAzeJZL6NhDXGv2f4I4a4KMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvV3NqQUJ3RE40bGt2bzJFTmNhX1pfZ2pocmdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAbXkjAwQA
bXkoAwQAbem5AwQAvP+MMA0GCSqGSIb3DQEBCwUAA4IBAQAJP8UfixBYE1lN7ogT
OT6012I5fLdy9DxJqTr5B+MXF4eX292FpDj95aQ5NiliGVCR5taoRylA9TnOjgcB
GqDD3OhlRgqRIBJqQAsnjnaVOyaGvyS5WYc9KnjbAslb+zjTxQHJSQiNWiAa1+hU
JQ6d5GSG0Agef8ZOz+1LiHxqdMX2RLlv4lb6F2eTq67ejs30sphiRp1dLX1bTJJa
0woGHgJ0VN0HACElp61ZjbvcJ8pnAdW8skH6hAKS+RJYxzPmlJsZcGfaEjUzHGvJ
nQ0l7DDAfuW5TQRndCrcVHib6ckhdOnGUYgMCTRj/ltk4ZJkAHGP5sVT+jMBjv+2
zPdj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org