Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rCQnoajMHdMtxn6YJKcDdI12ZpA.roa
File: rCQnoajMHdMtxn6YJKcDdI12ZpA.roa (raw, json)
Hash identifier: KnP1tJ0LBQkgTCGfB6gRHv5JjKTxRHirVkjIJUp1Lao=
Subject key identifier: AC:24:27:A1:A8:CC:1D:D3:2D:C6:7E:98:24:A7:03:74:8D:76:66:90
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018FA183392765EC4F94F48D7E9C8C400EFC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rCQnoajMHdMtxn6YJKcDdI12ZpA.roa
Signing time: Wed 22 May 2024 18:14:42 +0000
ROA not before: Wed 22 May 2024 18:14:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215622
IP address blocks: 109.121.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 07:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a1:83:39:27:65:ec:4f:94:f4:8d:7e:9c:8c:40:0e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 22 18:14:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac2427a1a8cc1dd32dc67e9824a703748d766690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:8c:eb:5d:2e:b1:eb:a7:c5:33:60:0d:a6:
35:67:66:29:64:e4:b6:f2:87:fc:b6:9d:8f:de:31:
c5:9c:ff:a3:fb:68:b9:9a:84:ee:ca:13:ba:e8:90:
c8:42:d8:5a:3c:92:fc:bf:82:56:24:13:44:e0:b9:
b1:2a:be:bd:5a:6f:cc:1f:b9:5b:bb:36:a7:97:20:
8d:b9:b8:11:61:95:ef:06:00:0b:d0:91:be:f7:15:
fa:ba:6c:08:8c:7f:df:6f:7f:1d:c1:63:cc:2e:35:
c7:21:82:64:63:58:91:4c:fc:3d:ba:a2:fc:78:a1:
24:f1:6c:ec:85:3d:b5:74:55:2d:43:30:75:8f:82:
54:a7:3e:bd:a2:68:be:0a:5f:bb:d2:66:20:f7:2f:
76:0b:72:ff:54:b1:23:5f:a6:cf:4a:0d:ed:84:b6:
08:2c:87:81:36:e1:f6:ed:e0:7d:28:be:2e:00:03:
75:70:48:73:fa:92:fe:cb:0b:66:43:e3:f5:2b:04:
26:f0:cc:96:79:21:64:5c:98:d7:45:0e:53:20:d2:
57:88:c9:93:be:30:83:f6:3e:46:80:8d:64:94:c6:
02:1e:47:fc:f0:76:5f:d3:11:cd:c9:2b:96:2f:e1:
0e:c7:ce:34:3a:36:4e:09:9d:bc:62:50:d4:df:2d:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:24:27:A1:A8:CC:1D:D3:2D:C6:7E:98:24:A7:03:74:8D:76:66:90
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rCQnoajMHdMtxn6YJKcDdI12ZpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.41.0/24
Signature Algorithm: sha256WithRSAEncryption
88:95:8c:39:af:3a:a0:f5:cb:34:e9:e7:81:2f:ee:fa:34:d9:
0c:78:95:24:1d:5d:2b:91:c0:11:5f:da:29:4e:30:d7:2c:a9:
26:0d:81:7f:2d:51:28:ee:a9:e2:f3:31:7d:44:5d:5f:69:1d:
5c:f5:bd:ff:b1:f9:49:5c:9e:b4:d1:46:d5:46:6c:02:45:16:
35:4a:1c:da:bd:2c:c6:b5:b0:bc:4b:47:9e:db:51:dc:85:ac:
4b:74:17:58:dc:e1:06:60:a9:ef:b2:d2:49:16:7a:2b:a7:e7:
39:c0:23:0f:70:fa:4c:49:1d:85:18:00:b8:0c:c7:6c:e0:60:
40:85:b2:16:6c:8c:47:3a:72:03:09:84:da:a6:14:5d:23:f0:
e8:36:81:dc:31:30:53:a4:4b:a0:fc:d9:23:c4:80:6d:9b:f7:
41:58:ca:13:8b:ce:42:5b:75:7b:88:b8:65:bd:39:cf:42:30:
9c:91:07:3c:3c:e9:34:31:58:ff:6b:2d:31:c9:a3:ea:be:81:
b3:d8:4e:f5:dd:0a:20:e2:47:56:bf:f8:e6:b9:12:50:c5:32:
74:0a:ca:ed:e1:4a:2e:5e:c2:7d:c8:16:40:fd:31:45:e5:a2:
3a:7b:b1:2a:61:67:53:6e:22:6b:5a:2c:64:8e:bd:ef:e1:9f:
e3:50:53:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+hgzknZexPlPSNfpyMQA78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjQwNTIyMTgxNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzI0MjdhMWE4Y2MxZGQzMmRjNjdlOTgyNGE3MDM3NDhkNzY2NjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHuM610useunxTNgDaY1Z2YpZOS2
8of8tp2P3jHFnP+j+2i5moTuyhO66JDIQthaPJL8v4JWJBNE4LmxKr69Wm/MH7lb
uzanlyCNubgRYZXvBgAL0JG+9xX6umwIjH/fb38dwWPMLjXHIYJkY1iRTPw9uqL8
eKEk8WzshT21dFUtQzB1j4JUpz69omi+Cl+70mYg9y92C3L/VLEjX6bPSg3thLYI
LIeBNuH27eB9KL4uAAN1cEhz+pL+ywtmQ+P1KwQm8MyWeSFkXJjXRQ5TINJXiMmT
vjCD9j5GgI1klMYCHkf88HZf0xHNySuWL+EOx840OjZOCZ28YlDU3y2ymwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKwkJ6GozB3TLcZ+mCSnA3SNdmaQMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvckNRbm9hak1IZE10eG42WUpLY0RkSTEyWnBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXkpMA0G
CSqGSIb3DQEBCwUAA4IBAQCIlYw5rzqg9cs06eeBL+76NNkMeJUkHV0rkcARX9op
TjDXLKkmDYF/LVEo7qni8zF9RF1faR1c9b3/sflJXJ600UbVRmwCRRY1ShzavSzG
tbC8S0ee21HchaxLdBdY3OEGYKnvstJJFnorp+c5wCMPcPpMSR2FGAC4DMds4GBA
hbIWbIxHOnIDCYTaphRdI/DoNoHcMTBTpEug/NkjxIBtm/dBWMoTi85CW3V7iLhl
vTnPQjCckQc8POk0MVj/ay0xyaPqvoGz2E713Qog4kdWv/jmuRJQxTJ0Csrt4Uou
XsJ9yBZA/TFF5aI6e7EqYWdTbiJrWixkjr3v4Z/jUFMU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org