Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/aZU4YkzbE1m-KgZqWaT0AYrnBNs.roa
File: aZU4YkzbE1m-KgZqWaT0AYrnBNs.roa (raw, json)
Hash identifier: Ue7TNLebQGNhLr4bk7H4F5LOnC/D1Nn5bP6OYwhsrkc=
Subject key identifier: 69:95:38:62:4C:DB:13:59:BE:2A:06:6A:59:A4:F4:01:8A:E7:04:DB
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188BE153EE6BC45B25EDF6737064A5A95F5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/aZU4YkzbE1m-KgZqWaT0AYrnBNs.roa
Signing time: Thu 15 Jun 2023 08:04:03 +0000
ROA not before: Thu 15 Jun 2023 08:04:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.35.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:15:3e:e6:bc:45:b2:5e:df:67:37:06:4a:5a:95:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 15 08:04:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=699538624cdb1359be2a066a59a4f4018ae704db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:cf:4e:13:63:17:51:f5:8f:6e:0b:ed:11:
f1:07:28:bb:1f:92:67:7d:e0:9f:81:00:43:b7:e3:
57:72:d2:12:19:0b:fb:7f:63:21:54:33:c1:d6:a8:
40:22:85:e3:50:6f:0b:1a:2e:05:35:ad:4f:2e:74:
fd:30:a3:c0:96:e8:92:21:09:1c:68:7c:ad:e4:57:
4f:31:0d:0c:99:6f:3d:59:00:4e:ab:0a:7d:17:2a:
aa:ad:5d:1d:76:d3:b7:35:a6:2f:5c:e3:25:9b:38:
c7:0f:2b:56:d7:b5:72:52:86:04:98:1c:38:9a:ab:
f9:8e:66:a6:fb:cb:0a:c3:0c:ff:3f:d5:30:d4:40:
97:eb:74:5b:68:47:d3:7d:06:fa:ab:1c:9b:d8:aa:
1e:8a:89:c0:1a:fd:fa:52:e3:ab:33:9b:51:dc:f9:
d5:2a:6d:4b:4e:5e:77:5a:fc:68:76:98:d3:1f:e6:
02:44:2e:35:7b:c7:56:26:e7:3a:fe:60:c2:b3:00:
3b:b6:aa:1c:05:1e:02:21:02:aa:87:6a:59:55:d4:
12:01:b2:20:31:04:02:4b:70:f6:65:6d:7f:dd:a6:
0e:fd:71:9d:36:e3:ae:7a:a1:13:8f:23:c4:41:18:
6a:c4:dd:98:30:11:50:65:aa:60:8c:bb:3b:1c:44:
7b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:95:38:62:4C:DB:13:59:BE:2A:06:6A:59:A4:F4:01:8A:E7:04:DB
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/aZU4YkzbE1m-KgZqWaT0AYrnBNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.35.0/24
109.121.41.0/24
109.121.43.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2d:62:52:5f:57:0b:71:e6:bd:54:68:bd:5a:c0:a3:a3:97:
4a:be:1c:da:ea:83:74:12:5f:78:03:29:34:fd:e9:56:31:dc:
e9:34:84:f7:db:c2:37:3f:e0:79:34:1d:96:d7:eb:a6:6d:e4:
76:75:05:25:4e:90:79:8e:e1:c6:3b:fe:a1:fa:98:99:b3:23:
47:1b:5c:12:27:57:81:30:1b:ec:3c:34:c4:bf:2f:8f:e5:6f:
69:69:a9:bc:4a:14:40:be:47:05:53:4a:3c:d9:39:70:3c:23:
ea:e3:30:5a:20:e5:95:3b:12:9d:69:2f:56:16:10:b0:56:e1:
2d:0e:25:1f:04:6c:3c:5a:d4:af:b7:73:9e:bc:8f:98:11:f3:
91:bc:1d:62:85:70:e3:fd:50:b4:04:94:93:7c:9f:68:ce:3f:
cc:3b:bb:14:73:05:99:22:9f:79:6a:b7:b5:1f:00:b5:59:c6:
62:f9:b4:c0:e0:7c:9d:6e:cb:3f:26:7e:0b:0d:20:63:e2:2d:
0b:03:b4:1c:5c:d9:4b:2c:03:39:c0:af:7f:51:39:0e:b9:c4:
4c:b2:93:c1:91:31:b7:0b:9f:07:7b:26:f4:9e:ed:4f:fe:5a:
84:70:e9:7d:90:3f:74:cd:34:7f:f5:66:2c:d8:c1:55:9a:18:
26:9c:2b:ab
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYi+FT7mvEWyXt9nNwZKWpX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwNjE1MDgwNDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTk1Mzg2MjRjZGIxMzU5YmUyYTA2NmE1OWE0ZjQwMThhZTcwNGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcHPThNjF1H1j24L7RHxByi7H5Jn
feCfgQBDt+NXctISGQv7f2MhVDPB1qhAIoXjUG8LGi4FNa1PLnT9MKPAluiSIQkc
aHyt5FdPMQ0MmW89WQBOqwp9FyqqrV0ddtO3NaYvXOMlmzjHDytW17VyUoYEmBw4
mqv5jmam+8sKwwz/P9Uw1ECX63RbaEfTfQb6qxyb2KoeionAGv36UuOrM5tR3PnV
Km1LTl53WvxodpjTH+YCRC41e8dWJuc6/mDCswA7tqocBR4CIQKqh2pZVdQSAbIg
MQQCS3D2ZW1/3aYO/XGdNuOueqETjyPEQRhqxN2YMBFQZapgjLs7HER7mQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGmVOGJM2xNZvioGalmk9AGK5wTbMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvYVpVNFlremJFMW0tS2dacVdhVDBBWXJuQk5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXkjAwQA
bXkpAwQAbXkrMA0GCSqGSIb3DQEBCwUAA4IBAQCRLWJSX1cLcea9VGi9WsCjo5dK
vhza6oN0El94Ayk0/elWMdzpNIT328I3P+B5NB2W1+umbeR2dQUlTpB5juHGO/6h
+piZsyNHG1wSJ1eBMBvsPDTEvy+P5W9paam8ShRAvkcFU0o82TlwPCPq4zBaIOWV
OxKdaS9WFhCwVuEtDiUfBGw8WtSvt3OevI+YEfORvB1ihXDj/VC0BJSTfJ9ozj/M
O7sUcwWZIp95are1HwC1WcZi+bTA4Hydbss/Jn4LDSBj4i0LA7QcXNlLLAM5wK9/
UTkOucRMspPBkTG3C58Heyb0nu1P/lqEcOl9kD90zTR/9WYs2MFVmhgmnCur
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org