Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nviyIdBmP3RROMw2ctbKfEMUHgA.roa
File: nviyIdBmP3RROMw2ctbKfEMUHgA.roa (raw, json)
Hash identifier: QIodrwXzSQ+9VoJ1VaBOXwNHpqOdZBihfl4gKQxdZAs=
Subject key identifier: 9E:F8:B2:21:D0:66:3F:74:51:38:CC:36:72:D6:CA:7C:43:14:1E:00
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018A5EEF4D6A014C1530EA95124729AB64B3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nviyIdBmP3RROMw2ctbKfEMUHgA.roa
Signing time: Mon 04 Sep 2023 06:44:15 +0000
ROA not before: Mon 04 Sep 2023 06:44:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.34.0/24 maxlen: 24
109.121.32.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Dec 2023 08:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:ef:4d:6a:01:4c:15:30:ea:95:12:47:29:ab:64:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 4 06:44:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ef8b221d0663f745138cc3672d6ca7c43141e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:63:09:06:bc:5f:29:a8:84:7b:03:29:48:8d:
6b:25:ac:c6:92:aa:f6:cb:e7:37:f5:c8:4c:b8:b7:
3a:1b:39:d6:70:3a:f0:8c:77:72:85:22:7d:8b:ee:
2a:dd:e1:18:d3:48:51:f4:d7:bc:bf:22:ea:44:b4:
85:5a:d6:61:3e:aa:56:0f:ab:09:99:4d:4e:93:c9:
65:73:ff:45:45:7f:2e:88:51:d6:bf:0f:cb:7f:0a:
1d:fa:16:de:a2:7c:3c:3d:ca:72:4e:33:cb:b3:64:
29:9d:3b:fa:08:7e:d7:ed:2d:8f:e6:3c:a2:db:a9:
af:64:f6:23:36:43:b1:c1:3b:e7:10:83:ae:84:69:
b3:ba:dd:eb:c8:39:7d:23:8a:f6:16:0b:42:e9:9f:
b3:23:c9:0f:bd:03:57:50:d5:76:14:59:f6:c5:b6:
7e:c2:1a:52:46:2d:bf:a4:ac:f8:30:9e:7e:b3:0f:
4a:5f:8e:5d:3e:6e:41:50:34:c8:6f:ff:5c:de:f6:
31:a5:eb:2a:9b:58:c2:33:a3:53:d7:b5:0f:4b:d3:
da:0d:fe:a1:bc:99:b0:15:f8:79:23:d7:76:6f:7e:
59:cf:cf:0b:d8:1a:5d:6d:83:15:d3:f2:82:ce:8f:
33:e9:77:f4:1b:5e:18:6a:22:55:a0:de:7e:ea:f1:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F8:B2:21:D0:66:3F:74:51:38:CC:36:72:D6:CA:7C:43:14:1E:00
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nviyIdBmP3RROMw2ctbKfEMUHgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.32.0/24
109.121.34.0/24
109.121.44.0/24
109.121.46.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
46:47:60:c2:38:b8:d0:09:fa:d0:cb:9a:b5:a3:10:96:b5:03:
7d:d8:86:ce:79:bc:f7:3d:ad:c9:32:90:1d:12:80:7e:b0:0d:
50:65:88:14:cf:46:26:14:4d:92:da:d1:bc:63:ad:9a:99:54:
03:5e:48:b3:39:05:be:d3:74:5d:43:16:87:ae:81:ab:62:b6:
cb:69:fc:44:b6:b6:0a:fa:52:14:16:ca:84:b7:3a:7c:17:98:
7f:e6:43:29:9c:7e:54:f8:ae:50:71:d1:6f:b9:3a:00:13:a1:
48:8c:24:fb:c2:e4:62:45:c9:9b:c2:7e:33:99:a8:e5:ed:78:
80:ac:f6:ea:8d:cd:99:4b:91:d6:c1:52:c3:1f:69:b9:ca:5b:
b9:ec:2d:68:45:1d:58:07:c1:76:42:f5:4c:c7:8d:ec:e2:9e:
c1:41:35:25:a5:e7:9a:69:44:55:db:a3:db:98:15:f2:99:66:
be:f7:22:68:f8:d8:01:71:fa:09:c4:d1:0e:17:7c:17:00:8b:
cc:83:0c:0c:3b:67:2c:99:e1:98:85:8b:4d:68:5f:55:08:78:
26:af:ff:06:b4:21:7e:49:b0:ca:d8:52:4d:cf:11:7f:63:b6:
ae:04:38:15:32:56:9e:17:04:65:e8:46:56:d5:f7:19:ca:0a:
fb:d1:9b:75
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYpe701qAUwVMOqVEkcpq2SzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwOTA0MDY0NDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWY4YjIyMWQwNjYzZjc0NTEzOGNjMzY3MmQ2Y2E3YzQzMTQxZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmMJBrxfKaiEewMpSI1rJazGkqr2
y+c39chMuLc6GznWcDrwjHdyhSJ9i+4q3eEY00hR9Ne8vyLqRLSFWtZhPqpWD6sJ
mU1Ok8llc/9FRX8uiFHWvw/Lfwod+hbeonw8PcpyTjPLs2QpnTv6CH7X7S2P5jyi
26mvZPYjNkOxwTvnEIOuhGmzut3ryDl9I4r2FgtC6Z+zI8kPvQNXUNV2FFn2xbZ+
whpSRi2/pKz4MJ5+sw9KX45dPm5BUDTIb/9c3vYxpesqm1jCM6NT17UPS9PaDf6h
vJmwFfh5I9d2b35Zz88L2BpdbYMV0/KCzo8z6Xf0G14YaiJVoN5+6vG8FQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJ74siHQZj90UTjMNnLWynxDFB4AMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvbnZpeUlkQm1QM1JST013MmN0YktmRU1VSGdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAbXkgAwQA
bXkiAwQAbXksAwQAbXkuAwQA1EUNMA0GCSqGSIb3DQEBCwUAA4IBAQBGR2DCOLjQ
CfrQy5q1oxCWtQN92IbOebz3Pa3JMpAdEoB+sA1QZYgUz0YmFE2S2tG8Y62amVQD
XkizOQW+03RdQxaHroGrYrbLafxEtrYK+lIUFsqEtzp8F5h/5kMpnH5U+K5QcdFv
uToAE6FIjCT7wuRiRcmbwn4zmajl7XiArPbqjc2ZS5HWwVLDH2m5ylu57C1oRR1Y
B8F2QvVMx43s4p7BQTUlpeeaaURV26PbmBXymWa+9yJo+NgBcfoJxNEOF3wXAIvM
gwwMO2csmeGYhYtNaF9VCHgmr/8GtCF+SbDK2FJNzxF/Y7auBDgVMlaeFwRl6EZW
1fcZygr70Zt1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org