Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vmz_MvOZmnW9JA-XM9O3KUx2XmY.roa
File: vmz_MvOZmnW9JA-XM9O3KUx2XmY.roa (raw, json)
Hash identifier: VSd8fEqIvOaGr97+SzY/ocWJnCjqt8Q3YrcIZn3qtCQ=
Subject key identifier: BE:6C:FF:32:F3:99:9A:75:BD:24:0F:97:33:D3:B7:29:4C:76:5E:66
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018C3AAEAC4B08ED26C333A68D726B051334
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vmz_MvOZmnW9JA-XM9O3KUx2XmY.roa
Signing time: Tue 05 Dec 2023 15:52:55 +0000
ROA not before: Tue 05 Dec 2023 15:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:ae:ac:4b:08:ed:26:c3:33:a6:8d:72:6b:05:13:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Dec 5 15:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be6cff32f3999a75bd240f9733d3b7294c765e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:42:3d:af:cb:22:63:b6:e8:a5:84:40:c0:
26:04:14:3d:2d:92:4e:d1:81:af:46:5a:e2:44:6c:
3c:62:1d:f7:67:4c:f1:01:ef:91:e2:cb:e0:98:b2:
31:41:38:c6:70:14:c2:26:3d:da:b9:93:b3:ab:2b:
99:11:cc:8a:d3:17:7c:e3:0d:9f:df:3c:60:1f:d3:
ae:ff:d6:fc:8e:18:50:eb:75:be:bd:6e:0a:e7:4f:
6f:b4:bd:d9:71:c3:13:a1:e5:05:f5:f8:db:7e:4f:
5e:0b:32:40:14:d4:a9:0c:52:0e:25:07:b3:9a:37:
f6:d3:63:6c:bb:bc:8c:99:0b:5e:b1:cc:4c:90:dc:
c1:c6:7d:f0:38:74:73:73:54:2c:79:c5:42:a6:18:
98:20:bf:4c:b8:57:46:0d:29:e3:b5:62:d4:d6:a1:
46:49:50:57:61:5d:b5:8a:cc:84:de:5e:99:1e:4a:
4c:bf:cb:d5:7a:01:16:42:79:0e:cf:22:4d:c4:61:
86:5c:3c:05:47:77:ba:37:68:e8:0d:e1:bb:15:64:
c3:ac:9a:02:d5:35:cf:17:2c:14:2f:84:2f:66:7f:
b8:f3:56:76:a8:2c:67:81:1b:1b:21:16:8e:db:73:
aa:9e:a1:52:17:b2:60:1d:93:3e:89:ea:1d:79:1e:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6C:FF:32:F3:99:9A:75:BD:24:0F:97:33:D3:B7:29:4C:76:5E:66
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vmz_MvOZmnW9JA-XM9O3KUx2XmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.43.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
77:88:72:23:2a:09:76:c4:a4:e1:ca:01:54:ca:ea:bd:84:01:
10:d6:eb:ca:f6:0a:41:9f:7c:0c:80:75:b7:d1:ca:34:d5:2f:
e1:cc:0d:c8:9a:15:3b:88:72:83:84:63:78:51:94:93:f1:e2:
72:df:4e:d5:dd:c1:63:ca:06:27:4a:98:bb:40:8e:6a:fa:71:
2a:5c:e6:8a:b0:77:b1:49:33:f3:fc:8c:6b:48:5b:35:01:e7:
ed:8d:17:79:7f:bd:46:01:8b:1d:b4:1d:4c:8c:1a:83:8a:85:
b2:70:88:90:d7:64:b8:41:34:dd:52:34:6d:0b:c8:2c:4d:89:
80:ad:7c:dc:e2:8b:be:c6:d4:c0:e3:58:4f:f6:ec:f0:dd:30:
6d:b3:38:1a:45:a3:65:e4:2c:78:c9:58:24:aa:fe:63:b1:ae:
c8:3a:21:b4:40:b6:5f:ac:1f:7e:5c:98:72:68:d2:96:b7:4d:
cb:ef:d2:e3:e8:7b:77:6f:2b:38:56:6d:3b:6e:9a:55:a4:ee:
65:fc:04:9b:ff:ee:45:6b:2c:38:e8:ba:7a:0d:cf:f7:53:b4:
42:be:6c:f6:7b:49:8e:d9:4a:c2:4a:bf:48:dc:7e:05:79:a8:
f9:ae:74:1f:2b:a8:34:bd:61:19:d8:fa:64:e0:62:e1:59:f5:
ba:50:a7:80
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYw6rqxLCO0mwzOmjXJrBRM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMxMjA1MTU1MjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTZjZmYzMmYzOTk5YTc1YmQyNDBmOTczM2QzYjcyOTRjNzY1ZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjBCPa/LImO26KWEQMAmBBQ9LZJO
0YGvRlriRGw8Yh33Z0zxAe+R4svgmLIxQTjGcBTCJj3auZOzqyuZEcyK0xd84w2f
3zxgH9Ou/9b8jhhQ63W+vW4K509vtL3ZccMToeUF9fjbfk9eCzJAFNSpDFIOJQez
mjf202Nsu7yMmQtescxMkNzBxn3wOHRzc1QsecVCphiYIL9MuFdGDSnjtWLU1qFG
SVBXYV21isyE3l6ZHkpMv8vVegEWQnkOzyJNxGGGXDwFR3e6N2joDeG7FWTDrJoC
1TXPFywUL4QvZn+481Z2qCxngRsbIRaO23OqnqFSF7JgHZM+ieodeR7eRQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL5s/zLzmZp1vSQPlzPTtylMdl5mMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvdm16X012T1ptblc5SkEtWE05TzNLVXgyWG1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXkrAwQA
uS9bMA0GCSqGSIb3DQEBCwUAA4IBAQB3iHIjKgl2xKThygFUyuq9hAEQ1uvK9gpB
n3wMgHW30co01S/hzA3ImhU7iHKDhGN4UZST8eJy307V3cFjygYnSpi7QI5q+nEq
XOaKsHexSTPz/IxrSFs1AeftjRd5f71GAYsdtB1MjBqDioWycIiQ12S4QTTdUjRt
C8gsTYmArXzc4ou+xtTA41hP9uzw3TBtszgaRaNl5Cx4yVgkqv5jsa7IOiG0QLZf
rB9+XJhyaNKWt03L79Lj6Ht3bys4Vm07bppVpO5l/ASb/+5Fayw46Lp6Dc/3U7RC
vmz2e0mO2UrCSr9I3H4Feaj5rnQfK6g0vWEZ2Ppk4GLhWfW6UKeA
-----END CERTIFICATE-----
Generated at Sun Dec 10 09:00:01 2023 by rpki-client on console-fra.rpki-client.org