Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nPsQiYYHlRjHEKq289koNOTRjvo.roa
File: nPsQiYYHlRjHEKq289koNOTRjvo.roa (raw, json)
Hash identifier: Hf9o/r6/5LdeJ59riJYznUUL0aGlurSj21dTgPTFNu4=
Subject key identifier: 9C:FB:10:89:86:07:95:18:C7:10:AA:B6:F3:D9:28:34:E4:D1:8E:FA
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E0AF5D0FD78EEE6E82AA0BA0C8510
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nPsQiYYHlRjHEKq289koNOTRjvo.roa
Signing time: Mon 01 Jan 2024 14:29:32 +0000
ROA not before: Mon 01 Jan 2024 14:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 212.69.10.0/23 maxlen: 23
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
Validation: Failed, certificate revoked on Sun 17 Mar 2024 22:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0a:f5:d0:fd:78:ee:e6:e8:2a:a0:ba:0c:85:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cfb108986079518c710aab6f3d92834e4d18efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:28:55:f4:28:87:c9:48:00:c7:83:20:c4:
b0:f4:b2:75:4f:8a:42:08:7c:42:ed:95:72:f5:a7:
bd:dd:7d:85:ad:ac:ad:74:a8:0a:de:ab:42:12:ac:
a7:4c:eb:43:1a:1a:ca:0d:e2:93:6a:86:1d:0f:09:
f2:d2:81:b6:ee:69:25:28:ed:3c:16:88:9f:fb:e2:
f6:de:29:b0:3e:79:a2:f4:83:f0:ae:b6:27:fc:5a:
6b:ef:d2:d2:b0:8a:f5:80:a6:b3:8d:c0:22:4d:e7:
2f:6c:71:bb:49:f4:de:e8:34:73:30:9a:55:1b:54:
85:e5:cb:f8:9f:be:1d:6b:42:96:6a:c8:9c:ab:d7:
27:0f:0c:a9:66:55:f8:75:30:4c:8f:ba:31:e9:9e:
de:75:59:7b:b2:8a:b5:38:77:35:78:82:9c:9f:e1:
b9:62:13:b3:de:a8:26:f4:2d:f4:84:0a:86:f3:be:
26:ae:82:13:4f:ab:c5:90:1c:a5:74:f8:93:22:dd:
51:13:f1:17:c3:18:27:1d:a0:e8:ea:61:0a:e1:0f:
38:dc:27:66:72:07:79:25:49:9f:bd:23:bc:5e:e7:
17:ca:fc:bf:f0:ba:b9:ee:ad:0d:41:8e:6d:5d:83:
32:60:25:59:34:a4:f3:b9:9e:b3:a5:ac:b5:cc:6b:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FB:10:89:86:07:95:18:C7:10:AA:B6:F3:D9:28:34:E4:D1:8E:FA
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nPsQiYYHlRjHEKq289koNOTRjvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
178.253.237.0/24
212.69.10.0/23
Signature Algorithm: sha256WithRSAEncryption
56:49:21:82:bc:39:f3:36:5f:52:83:d3:ae:6c:b8:cc:d2:a6:
f9:8a:dd:e7:70:33:01:50:c8:b2:93:02:ef:11:75:42:d6:79:
eb:c3:50:5b:93:db:a0:43:ec:be:79:13:bb:79:5f:dd:8d:5e:
ef:cb:34:32:e2:57:cf:a6:f3:a0:40:a3:95:70:57:fc:af:44:
cf:15:0a:d7:94:67:a0:b3:9d:bf:f3:1d:f7:5b:f6:ad:8f:3b:
c6:6f:69:0e:30:6b:fb:cf:b2:c5:72:76:f7:e0:83:68:26:01:
3c:29:46:64:c7:e6:29:e1:18:4e:a3:d4:3e:57:97:8a:6a:bc:
60:9e:26:85:86:90:8d:9f:bd:80:2b:6d:70:d5:50:60:95:6f:
3d:a4:55:79:0d:15:f1:24:7b:6d:ba:db:b7:94:ed:5d:41:ff:
63:f2:24:36:b8:01:e5:8d:fa:bf:23:4d:34:87:9b:78:40:97:
5b:48:46:fa:75:86:4b:d5:6c:8a:60:58:0f:4d:cf:83:8e:8f:
c4:63:7c:f2:88:e6:c5:0e:50:49:09:d6:ed:02:f8:55:92:40:
b5:a9:d0:46:59:ee:76:c2:fd:43:8c:ab:53:f1:fa:80:9d:f6:
5a:bb:42:d3:b3:11:e9:c8:22:2d:d5:11:9d:52:b9:29:db:6f:
4e:3d:7a:de
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzFbgr10P147uboKqC6DIUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjQwMTAxMTQyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2ZiMTA4OTg2MDc5NTE4YzcxMGFhYjZmM2Q5MjgzNGU0ZDE4ZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk0oVfQoh8lIAMeDIMSw9LJ1T4pC
CHxC7ZVy9ae93X2FraytdKgK3qtCEqynTOtDGhrKDeKTaoYdDwny0oG27mklKO08
Foif++L23imwPnmi9IPwrrYn/Fpr79LSsIr1gKazjcAiTecvbHG7SfTe6DRzMJpV
G1SF5cv4n74da0KWasicq9cnDwypZlX4dTBMj7ox6Z7edVl7soq1OHc1eIKcn+G5
YhOz3qgm9C30hAqG874mroITT6vFkByldPiTIt1RE/EXwxgnHaDo6mEK4Q843Cdm
cgd5JUmfvSO8XucXyvy/8Lq57q0NQY5tXYMyYCVZNKTzuZ6zpay1zGsJgQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJz7EImGB5UYxxCqtvPZKDTk0Y76MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvblBzUWlZWUhsUmpIRUtxMjg5a29OT1RSanZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFbXkAAwQA
sv3tAwQB1EUKMA0GCSqGSIb3DQEBCwUAA4IBAQBWSSGCvDnzNl9Sg9OubLjM0qb5
it3ncDMBUMiykwLvEXVC1nnrw1Bbk9ugQ+y+eRO7eV/djV7vyzQy4lfPpvOgQKOV
cFf8r0TPFQrXlGegs52/8x33W/atjzvGb2kOMGv7z7LFcnb34INoJgE8KUZkx+Yp
4RhOo9Q+V5eKarxgniaFhpCNn72AK21w1VBglW89pFV5DRXxJHttutu3lO1dQf9j
8iQ2uAHljfq/I000h5t4QJdbSEb6dYZL1WyKYFgPTc+Djo/EY3zyiObFDlBJCdbt
AvhVkkC1qdBGWe52wv1DjKtT8fqAnfZau0LTsxHpyCIt1RGdUrkp229OPXre
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org