Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wJBPIs8YeG15a0L84P3Tj9PuZU4.roa
File: wJBPIs8YeG15a0L84P3Tj9PuZU4.roa (raw, json)
Hash identifier: 82mAkWQ4zGZWvX2kBAt0IfSxm1inEYUaGKCuumfd2z8=
Subject key identifier: C0:90:4F:22:CF:18:78:6D:79:6B:42:FC:E0:FD:D3:8F:D3:EE:65:4E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188DCE10D8EB58E61EFCB25CE449F4E2DFC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wJBPIs8YeG15a0L84P3Tj9PuZU4.roa
Signing time: Wed 21 Jun 2023 07:35:16 +0000
ROA not before: Wed 21 Jun 2023 07:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.69.10.0/24 maxlen: 24
212.69.10.0/23 maxlen: 23
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:e1:0d:8e:b5:8e:61:ef:cb:25:ce:44:9f:4e:2d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 21 07:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0904f22cf18786d796b42fce0fdd38fd3ee654e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:8f:ac:c5:30:2f:34:3a:08:36:26:e7:9b:
4c:cb:89:58:f8:c0:58:97:5b:71:92:9d:d2:8d:53:
08:89:2c:b4:bc:c0:c6:79:5a:42:92:2b:1f:b1:eb:
d7:e7:7a:51:64:64:29:33:30:b9:de:63:cb:da:c5:
bd:dc:9a:3b:63:9e:33:06:9c:fc:67:eb:4e:1f:ba:
74:54:1e:a5:34:6f:4e:a3:a0:c5:99:8d:44:69:3c:
65:0e:8c:64:9e:08:3c:c0:8f:56:82:57:46:a2:8d:
de:85:ed:0e:55:2e:69:9b:18:a3:22:d9:e4:e4:ec:
7b:c0:d9:cb:7a:26:9d:db:01:e0:d7:ac:95:4e:b2:
c2:ff:8b:40:16:44:0d:50:87:40:d3:53:f8:38:d0:
b9:ff:95:a6:a4:35:ca:de:46:85:2e:0a:9b:51:06:
2f:17:99:59:a0:b4:a8:da:87:bb:ab:bd:9c:64:e0:
43:86:51:39:3e:0f:f9:5d:9b:79:62:ae:74:b7:00:
23:77:c1:66:92:ec:72:3f:26:ec:6f:a6:6a:6c:de:
d1:3d:55:4b:48:34:b8:a2:54:40:b3:5a:10:cc:d2:
41:59:e8:a5:c4:0f:c1:fb:c2:dc:36:63:d8:ed:5f:
c1:a2:05:3e:ed:4b:09:08:0f:af:38:89:a5:9c:99:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:90:4F:22:CF:18:78:6D:79:6B:42:FC:E0:FD:D3:8F:D3:EE:65:4E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wJBPIs8YeG15a0L84P3Tj9PuZU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
178.253.237.0/24
212.69.10.0/23
Signature Algorithm: sha256WithRSAEncryption
52:5c:47:47:9b:09:0d:dd:43:99:a3:aa:9b:9a:44:3d:ec:35:
51:e4:fb:bc:6f:e7:a7:9a:ad:0b:01:ed:23:9c:04:63:87:86:
f0:6b:c9:58:ae:f9:a4:9b:50:1b:2b:53:ce:2f:d4:f3:bd:57:
61:fb:c9:47:40:43:ff:aa:22:c9:6c:eb:b1:2a:51:23:47:1b:
1a:b3:95:20:18:25:b4:a7:63:4f:7c:99:6e:e0:d2:b8:3d:1f:
b9:6e:40:4d:2e:d8:8b:21:62:43:d9:7a:27:d6:e7:6f:a4:6a:
cf:cb:cb:97:a9:60:50:bb:d6:ef:c3:ee:95:3b:71:31:ee:29:
7b:c5:1e:6a:a7:31:9e:41:98:5c:9f:1a:a1:47:23:b2:b8:8b:
87:00:46:d0:e0:39:da:59:20:24:45:fa:11:68:a1:cc:05:b7:
5a:a2:db:7f:1a:cb:d0:99:c3:cf:8b:67:86:93:bf:3e:75:46:
68:ad:df:b4:09:13:e8:68:77:1e:41:ea:01:0c:53:09:a4:55:
0c:03:0e:c6:78:87:98:7e:c2:2a:17:62:f2:c6:0f:d7:6a:27:
39:94:fe:86:7f:f9:ad:44:e7:a8:5d:de:70:83:39:78:a9:18:
cb:00:17:44:f2:fb:59:2f:c7:9e:9b:e7:85:be:42:fe:a2:21:
96:54:2f:b7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYjc4Q2OtY5h78slzkSfTi38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwNjIxMDczNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDkwNGYyMmNmMTg3ODZkNzk2YjQyZmNlMGZkZDM4ZmQzZWU2NTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHSPrMUwLzQ6CDYm55tMy4lY+MBY
l1txkp3SjVMIiSy0vMDGeVpCkisfsevX53pRZGQpMzC53mPL2sW93Jo7Y54zBpz8
Z+tOH7p0VB6lNG9Oo6DFmY1EaTxlDoxkngg8wI9WgldGoo3ehe0OVS5pmxijItnk
5Ox7wNnLeiad2wHg16yVTrLC/4tAFkQNUIdA01P4ONC5/5WmpDXK3kaFLgqbUQYv
F5lZoLSo2oe7q72cZOBDhlE5Pg/5XZt5Yq50twAjd8FmkuxyPybsb6ZqbN7RPVVL
SDS4olRAs1oQzNJBWeilxA/B+8LcNmPY7V/BogU+7UsJCA+vOImlnJm7cwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMCQTyLPGHhteWtC/OD904/T7mVOMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvd0pCUElzOFllRzE1YTBMODRQM1RqOVB1WlU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFbXkAAwQA
sv3tAwQB1EUKMA0GCSqGSIb3DQEBCwUAA4IBAQBSXEdHmwkN3UOZo6qbmkQ97DVR
5Pu8b+enmq0LAe0jnARjh4bwa8lYrvmkm1AbK1POL9TzvVdh+8lHQEP/qiLJbOux
KlEjRxsas5UgGCW0p2NPfJlu4NK4PR+5bkBNLtiLIWJD2Xon1udvpGrPy8uXqWBQ
u9bvw+6VO3Ex7il7xR5qpzGeQZhcnxqhRyOyuIuHAEbQ4DnaWSAkRfoRaKHMBbda
ott/GsvQmcPPi2eGk78+dUZord+0CRPoaHceQeoBDFMJpFUMAw7GeIeYfsIqF2Ly
xg/Xaic5lP6Gf/mtROeoXd5wgzl4qRjLABdE8vtZL8eem+eFvkL+oiGWVC+3
-----END CERTIFICATE-----
Generated at Thu Sep 21 09:14:47 2023 by rpki-client on console-ams.rpki-client.org