Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rc_WpejQFl81rRlCUIPQMGbXzh0.roa
File: rc_WpejQFl81rRlCUIPQMGbXzh0.roa (raw, json)
Hash identifier: nUeoOIWpOjp2pxMtbj+ELX25XaYSEJ78vozNRb9Xw/o=
Subject key identifier: AD:CF:D6:A5:E8:D0:16:5F:35:AD:19:42:50:83:D0:30:66:D7:CE:1D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018F57977D07FF2695ED1BC1B33956FE4184
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rc_WpejQFl81rRlCUIPQMGbXzh0.roa
Signing time: Wed 08 May 2024 09:44:56 +0000
ROA not before: Wed 08 May 2024 09:44:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 07:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:97:7d:07:ff:26:95:ed:1b:c1:b3:39:56:fe:41:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 8 09:44:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adcfd6a5e8d0165f35ad19425083d03066d7ce1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2a:ef:62:91:b5:9b:e2:7f:71:24:e8:5b:2b:
cc:95:91:9e:4a:87:92:00:94:94:a9:83:be:89:16:
42:eb:ec:b7:08:31:dd:32:20:45:b2:9a:3e:66:81:
2c:0a:09:84:1e:73:be:1f:dd:94:e8:09:0c:fb:aa:
23:b5:36:81:e6:49:0e:f4:38:8c:ac:4c:56:16:b9:
38:c7:5f:d5:f8:ca:a6:c5:6f:06:e4:8c:fa:2a:7e:
be:1a:ba:b6:ad:9c:74:33:55:51:56:79:7b:00:d0:
bb:7a:8d:a8:1a:17:10:09:5f:d1:63:d9:fb:3c:11:
5c:c8:f8:7e:d7:8a:15:fc:ce:00:99:b1:73:14:68:
c5:e9:6e:5c:97:cf:b5:85:1c:fa:bd:04:90:d9:d6:
bb:65:82:f4:b4:f6:cc:3f:3c:20:76:ce:7b:8b:81:
20:2d:2a:2d:41:7b:35:4e:ec:df:f2:85:42:24:e8:
d6:8d:b9:58:ac:18:ba:7a:60:81:eb:ba:1a:56:9b:
b2:21:fd:53:4d:79:1b:ae:04:9b:85:09:be:22:86:
66:b7:89:73:12:74:31:53:6e:50:d9:d5:c7:aa:62:
3f:7b:ac:ad:23:c1:35:20:dd:a2:26:58:f0:e4:f4:
f8:a0:ed:c8:c4:e0:90:6d:90:c7:b1:7d:03:2b:3f:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CF:D6:A5:E8:D0:16:5F:35:AD:19:42:50:83:D0:30:66:D7:CE:1D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rc_WpejQFl81rRlCUIPQMGbXzh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.43.0/24
185.47.91.0/24
188.255.128.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d2:f6:16:07:04:56:31:bb:80:43:56:4e:a6:27:ea:19:d4:
76:e7:75:26:bc:2e:ee:31:67:f9:02:87:f1:27:6c:0f:55:07:
fe:91:50:7d:59:29:bc:37:cb:c8:f0:d3:23:e8:aa:75:a2:31:
d7:9b:f5:89:36:c9:62:64:c7:31:5e:29:4b:7c:c5:eb:a8:9a:
96:08:28:91:01:06:6c:e0:60:74:11:57:04:5e:69:6d:0c:f4:
0f:a1:7c:57:3f:a6:81:50:41:63:09:44:fc:7d:92:04:b1:ed:
29:ed:ad:0d:f9:2d:02:a3:81:83:6b:0f:80:bf:db:35:df:a1:
db:42:33:85:44:72:a0:01:ac:42:80:93:0f:08:20:7f:14:e7:
f4:c1:a7:78:7c:84:d7:46:5d:51:ee:44:14:4f:e7:a6:53:ce:
08:8f:ea:65:10:92:38:fa:f9:d6:34:b9:d1:b5:eb:ff:ac:91:
9f:9c:f1:a9:b3:e8:b6:73:a4:38:cc:b6:44:5c:ef:fe:42:ed:
21:be:e9:45:3e:ae:92:cf:f1:25:7e:d2:d8:46:b3:c5:d1:5c:
cb:52:0d:7c:a7:35:ac:ec:c4:54:2b:4f:55:76:ef:ad:22:4f:
1d:69:91:4f:40:21:4f:73:95:36:31:b9:64:d4:67:41:2a:53:
40:eb:88:c3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY9Xl30H/yaV7RvBszlW/kGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjQwNTA4MDk0NDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGNmZDZhNWU4ZDAxNjVmMzVhZDE5NDI1MDgzZDAzMDY2ZDdjZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2irvYpG1m+J/cSToWyvMlZGeSoeS
AJSUqYO+iRZC6+y3CDHdMiBFspo+ZoEsCgmEHnO+H92U6AkM+6ojtTaB5kkO9DiM
rExWFrk4x1/V+MqmxW8G5Iz6Kn6+Grq2rZx0M1VRVnl7ANC7eo2oGhcQCV/RY9n7
PBFcyPh+14oV/M4AmbFzFGjF6W5cl8+1hRz6vQSQ2da7ZYL0tPbMPzwgds57i4Eg
LSotQXs1Tuzf8oVCJOjWjblYrBi6emCB67oaVpuyIf1TTXkbrgSbhQm+IoZmt4lz
EnQxU25Q2dXHqmI/e6ytI8E1IN2iJljw5PT4oO3IxOCQbZDHsX0DKz9MIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK3P1qXo0BZfNa0ZQlCD0DBm184dMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvcmNfV3BlalFGbDgxclJsQ1VJUFFNR2JYemgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXkrAwQA
uS9bAwQAvP+AMA0GCSqGSIb3DQEBCwUAA4IBAQBD0vYWBwRWMbuAQ1ZOpifqGdR2
53UmvC7uMWf5AofxJ2wPVQf+kVB9WSm8N8vI8NMj6Kp1ojHXm/WJNsliZMcxXilL
fMXrqJqWCCiRAQZs4GB0EVcEXmltDPQPoXxXP6aBUEFjCUT8fZIEse0p7a0N+S0C
o4GDaw+Av9s136HbQjOFRHKgAaxCgJMPCCB/FOf0wad4fITXRl1R7kQUT+emU84I
j+plEJI4+vnWNLnRtev/rJGfnPGps+i2c6Q4zLZEXO/+Qu0hvulFPq6Sz/ElftLY
RrPF0VzLUg18pzWs7MRUK09Vdu+tIk8daZFPQCFPc5U2Mblk1GdBKlNA64jD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org