Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wBzk7Kj_q3_NQTyHszKoFFFoRJU.roa
File: wBzk7Kj_q3_NQTyHszKoFFFoRJU.roa (raw, json)
Hash identifier: SBTf1gQLEWiRCSvYIo74znMoxbDjjm2UmvmMGy5dMD0=
Subject key identifier: C0:1C:E4:EC:A8:FF:AB:7F:CD:41:3C:87:B3:32:A8:14:51:68:44:95
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018776347617978397C68DDF7845A45AC830
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wBzk7Kj_q3_NQTyHszKoFFFoRJU.roa
Signing time: Wed 12 Apr 2023 16:02:42 +0000
ROA not before: Wed 12 Apr 2023 16:02:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.40.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:34:76:17:97:83:97:c6:8d:df:78:45:a4:5a:c8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 12 16:02:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c01ce4eca8ffab7fcd413c87b332a81451684495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:6e:b4:b5:df:ec:88:b3:77:de:f9:c9:bc:
02:09:69:c7:24:2a:79:30:18:e3:55:7e:0b:30:5f:
1a:73:6d:e4:84:c2:a8:8a:e5:ba:e6:f2:ca:d6:74:
fc:26:41:3a:83:e7:34:77:aa:5f:a8:3e:95:04:ee:
da:e9:f3:92:66:70:4a:5b:39:ff:b9:7b:9a:d9:e2:
8a:f0:8a:e8:72:7b:db:62:cf:da:d0:82:92:1a:96:
58:25:9c:60:ab:78:63:27:64:c1:8e:72:29:20:ab:
83:e6:6c:5f:c2:8e:46:f5:ab:3c:3c:91:e1:2e:8e:
98:0b:51:a5:42:bb:1f:14:c6:fd:a2:33:f5:94:56:
fe:e7:06:e8:bf:8f:f7:85:fe:60:4b:4b:7e:56:e7:
48:ef:fa:e9:c8:91:bc:78:f9:d7:a6:45:1e:4a:bf:
84:c3:bd:d1:6c:fe:c6:4a:9d:fd:34:db:b5:60:d7:
31:96:83:16:98:b9:a2:83:40:78:25:bb:b5:a4:98:
ff:28:50:bf:7a:2f:98:4d:38:a3:b6:b8:52:13:15:
ad:20:c3:f5:52:ed:22:72:6e:54:94:f5:4d:05:cd:
a2:b0:06:b9:20:ef:28:7e:71:9e:0c:c0:36:a4:a5:
59:7a:bc:08:d4:99:9d:84:1a:61:34:39:ce:d7:bf:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1C:E4:EC:A8:FF:AB:7F:CD:41:3C:87:B3:32:A8:14:51:68:44:95
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wBzk7Kj_q3_NQTyHszKoFFFoRJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.67.0/24
109.121.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c0:2f:f3:c2:be:bb:f2:10:6e:6f:11:f0:b3:56:ca:ec:11:
7a:13:49:b2:0c:00:69:4b:dd:2f:c9:ca:9e:42:3d:ad:48:ef:
57:2b:d5:8e:1b:48:22:36:ff:0d:87:f3:1e:3a:19:a3:cf:b8:
6e:f2:07:04:19:00:05:14:1f:88:f6:fb:01:65:f8:82:0a:7e:
df:c4:bc:0f:9b:6d:da:84:c9:d8:eb:9e:fd:a2:db:ca:dc:f1:
12:94:29:5d:0a:b7:de:29:43:25:41:7c:84:ff:64:ac:c4:ac:
69:fe:3e:d6:79:cf:49:4a:34:d5:4e:60:b4:25:a6:eb:41:30:
7e:61:83:8f:8c:17:f0:d7:dc:03:2e:96:b1:ef:70:02:f2:90:
8a:d8:64:64:56:2a:80:e9:38:bf:3f:a1:47:38:f0:a3:8a:7c:
83:6b:79:73:7a:c5:00:84:a5:cc:ec:4b:0c:71:40:f3:dd:8f:
5c:1a:36:bd:db:4a:06:7b:00:ca:9c:6d:40:25:a9:eb:36:16:
53:30:ec:79:82:34:7f:68:5c:4a:bc:f0:4d:11:9c:cf:f5:e1:
0b:10:d6:8e:22:04:a6:0a:44:09:39:4e:ad:1b:a2:89:12:4e:
ba:ba:87:6d:08:41:27:0c:ca:03:5c:5d:97:42:36:26:03:d0:
c3:d8:c1:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYd2NHYXl4OXxo3feEWkWsgwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwNDEyMTYwMjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDFjZTRlY2E4ZmZhYjdmY2Q0MTNjODdiMzMyYTgxNDUxNjg0NDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7dutLXf7Iizd975ybwCCWnHJCp5
MBjjVX4LMF8ac23khMKoiuW65vLK1nT8JkE6g+c0d6pfqD6VBO7a6fOSZnBKWzn/
uXua2eKK8IrocnvbYs/a0IKSGpZYJZxgq3hjJ2TBjnIpIKuD5mxfwo5G9as8PJHh
Lo6YC1GlQrsfFMb9ojP1lFb+5wbov4/3hf5gS0t+VudI7/rpyJG8ePnXpkUeSr+E
w73RbP7GSp39NNu1YNcxloMWmLmig0B4Jbu1pJj/KFC/ei+YTTijtrhSExWtIMP1
Uu0icm5UlPVNBc2isAa5IO8ofnGeDMA2pKVZerwI1JmdhBphNDnO178YpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMAc5Oyo/6t/zUE8h7MyqBRRaESVMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvd0J6azdLal9xM19OUVR5SHN6S29GRkZvUkpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT69DAwQA
bXkoMA0GCSqGSIb3DQEBCwUAA4IBAQA6wC/zwr678hBubxHws1bK7BF6E0myDABp
S90vycqeQj2tSO9XK9WOG0giNv8Nh/MeOhmjz7hu8gcEGQAFFB+I9vsBZfiCCn7f
xLwPm23ahMnY6579otvK3PESlCldCrfeKUMlQXyE/2SsxKxp/j7Wec9JSjTVTmC0
JabrQTB+YYOPjBfw19wDLpax73AC8pCK2GRkViqA6Ti/P6FHOPCjinyDa3lzesUA
hKXM7EsMcUDz3Y9cGja920oGewDKnG1AJanrNhZTMOx5gjR/aFxKvPBNEZzP9eEL
ENaOIgSmCkQJOU6tG6KJEk66uodtCEEnDMoDXF2XQjYmA9DD2MH7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:27 2024 by rpki-client on console-fra.rpki-client.org