Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mOdCzKT_jy9Zsv1Hr_YmjNF05eE.roa
File: mOdCzKT_jy9Zsv1Hr_YmjNF05eE.roa (raw, json)
Hash identifier: MddzDxUHXOQ94H05FzMMIjVbBMmRXMZJoCqhsJdI8KU=
Subject key identifier: 98:E7:42:CC:A4:FF:8F:2F:59:B2:FD:47:AF:F6:26:8C:D1:74:E5:E1
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0185ED5641222B78AA39BD061FA1ACDACA8D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mOdCzKT_jy9Zsv1Hr_YmjNF05eE.roa
Signing time: Thu 26 Jan 2023 09:08:51 +0000
ROA not before: Thu 26 Jan 2023 09:08:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.69.10.0/23 maxlen: 23
109.233.184.0/23 maxlen: 24
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
Validation: Failed, certificate revoked on Fri 24 Mar 2023 11:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:56:41:22:2b:78:aa:39:bd:06:1f:a1:ac:da:ca:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 26 09:08:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98e742cca4ff8f2f59b2fd47aff6268cd174e5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:9d:74:47:7d:54:28:e4:bd:09:f0:5c:0c:
42:fd:d6:12:35:18:00:20:a4:40:75:f5:08:4c:f5:
bd:88:53:b8:e0:49:55:32:92:37:5a:af:f2:ad:21:
5f:97:93:19:01:ba:12:91:3b:3d:da:33:55:5f:c5:
9e:0e:b8:b5:5a:f8:99:24:a4:2e:df:17:b1:5f:59:
8a:0e:57:c4:5f:4b:bc:09:c3:e6:b9:b7:9f:7a:20:
c8:ee:a9:15:35:50:4c:ab:ca:af:b3:d3:a7:24:61:
51:bd:5f:2b:ca:d8:6a:d7:8a:7f:97:40:c0:b9:75:
52:4e:cf:20:ab:e9:1b:99:64:fa:d2:ed:fa:a3:fe:
7a:8c:9a:d6:fc:46:fa:13:38:99:6a:80:55:3d:83:
d3:72:85:83:07:8b:a8:62:24:ee:64:f9:31:ae:5e:
8b:3e:d4:76:e7:07:60:34:e3:f6:d0:df:57:22:cb:
3d:ab:d7:87:67:15:3a:33:59:93:c1:0a:a8:61:31:
ed:bc:f3:1c:7c:e5:0e:80:e5:3a:4f:80:e1:b8:4c:
f5:e3:2d:7f:22:b0:5e:6e:34:fc:40:05:bf:e8:25:
98:07:c2:bc:19:89:75:b9:31:98:64:94:69:1f:ec:
43:2d:64:36:a9:31:e9:20:8c:7f:2d:b3:f2:a7:6a:
6a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:42:CC:A4:FF:8F:2F:59:B2:FD:47:AF:F6:26:8C:D1:74:E5:E1
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mOdCzKT_jy9Zsv1Hr_YmjNF05eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
109.233.184.0/23
178.253.237.0/24
212.69.10.0/23
Signature Algorithm: sha256WithRSAEncryption
41:e6:d0:5e:2a:54:5c:8d:b3:22:f0:86:a5:df:4b:ca:ed:1f:
d4:d5:7d:34:6e:9c:1d:ed:60:c2:cd:94:81:68:45:76:5f:1a:
07:be:63:71:35:b1:07:b5:21:24:5e:b3:f3:5a:83:85:42:e1:
90:5d:11:9e:4e:50:ab:2e:2a:0b:d4:8a:fe:2e:b7:bc:a1:54:
41:69:df:8e:f9:c4:37:04:9e:86:b2:31:4e:e9:9e:80:fa:a8:
e1:8e:e7:82:ae:8d:1d:a8:b2:0e:e8:f2:61:e9:5d:d7:3d:59:
b6:79:dd:9a:64:ff:b6:87:b2:7b:e0:f7:a4:5a:79:7d:f4:7a:
88:cd:b4:9a:28:1f:1a:24:93:1a:fc:3a:81:af:61:1d:38:ad:
a8:6c:d4:56:d8:31:2a:8c:47:e8:c2:44:53:b2:90:27:40:81:
ea:0a:a7:39:23:36:ac:ea:fa:8f:7a:c3:88:3c:28:32:86:98:
b4:9f:30:cb:be:66:06:73:10:68:1e:e9:22:1e:c5:e3:83:d9:
c8:1b:bc:6f:c4:52:71:26:ea:30:bb:96:41:be:2b:38:f1:48:
27:26:68:a3:9c:22:43:da:77:16:3f:b0:21:43:1a:6a:a1:5b:
3d:86:12:17:87:9a:50:9b:45:2e:37:81:f4:43:aa:be:0e:54:
8e:98:c0:d8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYXtVkEiK3iqOb0GH6Gs2sqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwMTI2MDkwODUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGU3NDJjY2E0ZmY4ZjJmNTliMmZkNDdhZmY2MjY4Y2QxNzRlNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFiddEd9VCjkvQnwXAxC/dYSNRgA
IKRAdfUITPW9iFO44ElVMpI3Wq/yrSFfl5MZAboSkTs92jNVX8WeDri1WviZJKQu
3xexX1mKDlfEX0u8CcPmubefeiDI7qkVNVBMq8qvs9OnJGFRvV8rythq14p/l0DA
uXVSTs8gq+kbmWT60u36o/56jJrW/Eb6EziZaoBVPYPTcoWDB4uoYiTuZPkxrl6L
PtR25wdgNOP20N9XIss9q9eHZxU6M1mTwQqoYTHtvPMcfOUOgOU6T4DhuEz14y1/
IrBebjT8QAW/6CWYB8K8GYl1uTGYZJRpH+xDLWQ2qTHpIIx/LbPyp2pqwwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJjnQsyk/48vWbL9R6/2JozRdOXhMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvbU9kQ3pLVF9qeTlac3YxSHJfWW1qTkYwNWVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFbXkAAwQB
bem4AwQAsv3tAwQB1EUKMA0GCSqGSIb3DQEBCwUAA4IBAQBB5tBeKlRcjbMi8Ial
30vK7R/U1X00bpwd7WDCzZSBaEV2XxoHvmNxNbEHtSEkXrPzWoOFQuGQXRGeTlCr
LioL1Ir+Lre8oVRBad+O+cQ3BJ6GsjFO6Z6A+qjhjueCro0dqLIO6PJh6V3XPVm2
ed2aZP+2h7J74PekWnl99HqIzbSaKB8aJJMa/DqBr2EdOK2obNRW2DEqjEfowkRT
spAnQIHqCqc5Izas6vqPesOIPCgyhpi0nzDLvmYGcxBoHukiHsXjg9nIG7xvxFJx
Juowu5ZBvis48UgnJmijnCJD2ncWP7AhQxpqoVs9hhIXh5pQm0UuN4H0Q6q+DlSO
mMDY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org