Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wP-Cm-Zo6ujhBfYC3DJlil-qKc8.roa
File: wP-Cm-Zo6ujhBfYC3DJlil-qKc8.roa (raw, json)
Hash identifier: K6YxBeCt+xpEu4Ph31k++C/9cJN8UBrro7vzCjYPsAE=
Subject key identifier: C0:FF:82:9B:E6:68:EA:E8:E1:05:F6:02:DC:32:65:8A:5F:AA:29:CF
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188917A03BAF45765C806645E966B30CB2A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wP-Cm-Zo6ujhBfYC3DJlil-qKc8.roa
Signing time: Tue 06 Jun 2023 16:11:12 +0000
ROA not before: Tue 06 Jun 2023 16:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 109.121.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:7a:03:ba:f4:57:65:c8:06:64:5e:96:6b:30:cb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 6 16:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0ff829be668eae8e105f602dc32658a5faa29cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:c0:04:ce:c4:27:9e:2a:cb:94:fd:4e:9d:
b8:10:b0:06:68:2c:0b:c4:d3:c3:28:eb:da:0b:b1:
9f:be:97:1f:8c:81:d9:17:60:46:92:ea:50:9c:63:
dc:cc:dd:e1:83:2a:be:cf:0d:55:2d:cd:97:e5:80:
0a:39:c4:0d:60:96:9b:7a:fc:51:af:0e:f3:8e:b2:
3f:6f:d6:99:4d:e1:79:6d:73:29:3c:98:f7:c9:1a:
b3:aa:46:fd:a3:0e:76:36:a7:58:b7:26:db:13:3d:
41:b2:74:db:b9:3a:50:c0:ba:2a:73:04:8d:e6:e9:
cf:fa:2b:aa:8b:37:3d:47:48:73:a5:fc:f4:79:41:
87:d4:7a:f7:19:7d:7b:5d:06:46:c3:0a:18:14:17:
9a:32:8e:78:30:34:54:01:26:52:be:88:77:9b:a9:
92:6e:77:2e:4a:1a:49:cf:f9:da:a2:a3:ea:3a:10:
89:37:4f:ce:0a:d4:f8:a4:df:28:fe:d1:73:61:b0:
eb:75:c6:17:fe:38:08:b4:27:59:95:b8:e2:b3:ea:
2d:2d:8b:c0:f6:60:1c:de:35:ee:86:6e:23:f3:1d:
ba:8e:b7:11:6e:88:e9:8f:ce:48:90:8b:d3:82:cf:
52:e2:f9:32:54:c4:89:a4:d5:c2:27:85:06:29:58:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FF:82:9B:E6:68:EA:E8:E1:05:F6:02:DC:32:65:8A:5F:AA:29:CF
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wP-Cm-Zo6ujhBfYC3DJlil-qKc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.34.0/24
Signature Algorithm: sha256WithRSAEncryption
23:70:e2:ea:51:bb:85:4a:4c:5d:78:5e:ed:3d:f3:79:42:63:
8c:7f:58:a8:2f:90:d3:33:35:ab:83:5b:6a:cc:88:0c:d6:45:
f7:56:20:f6:fe:f8:c3:b6:f9:dd:22:24:59:3a:48:a5:a8:d0:
0b:5f:51:1e:68:dd:8d:3f:d2:35:88:5a:53:bf:11:36:47:a1:
4f:31:b8:6a:81:47:e0:95:e3:37:72:70:7f:99:e4:cc:a9:19:
3b:c8:05:84:11:bf:c7:c8:03:f4:81:55:7d:3f:fe:1f:7a:8e:
7a:78:ef:fc:2b:5e:95:ce:ed:ca:3f:e5:c3:3a:38:25:90:09:
3a:b9:41:00:dd:56:af:a8:16:10:0e:d7:ef:a9:45:eb:79:97:
1b:85:04:9a:2b:90:d0:72:04:3f:f0:89:26:fc:c5:60:5f:a3:
21:7e:53:fc:55:17:ec:16:35:02:66:3d:64:5d:2d:40:66:cc:
7c:12:5e:3f:8f:22:71:a2:12:82:b5:36:43:4c:05:61:44:4c:
e4:1c:6b:7d:52:26:fe:40:a0:c4:24:a2:11:b1:43:f0:00:8d:
b4:f5:33:f5:15:43:1e:a8:41:5a:b8:c5:b9:be:4a:33:97:97:
84:93:9a:52:3b:73:82:cd:4a:14:c7:48:0d:f6:ee:84:43:da:
aa:23:60:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiRegO69FdlyAZkXpZrMMsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwNjA2MTYxMTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGZmODI5YmU2NjhlYWU4ZTEwNWY2MDJkYzMyNjU4YTVmYWEyOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVTABM7EJ54qy5T9Tp24ELAGaCwL
xNPDKOvaC7GfvpcfjIHZF2BGkupQnGPczN3hgyq+zw1VLc2X5YAKOcQNYJabevxR
rw7zjrI/b9aZTeF5bXMpPJj3yRqzqkb9ow52NqdYtybbEz1BsnTbuTpQwLoqcwSN
5unP+iuqizc9R0hzpfz0eUGH1Hr3GX17XQZGwwoYFBeaMo54MDRUASZSvoh3m6mS
bncuShpJz/naoqPqOhCJN0/OCtT4pN8o/tFzYbDrdcYX/jgItCdZlbjis+otLYvA
9mAc3jXuhm4j8x26jrcRbojpj85IkIvTgs9S4vkyVMSJpNXCJ4UGKViFPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMD/gpvmaOro4QX2AtwyZYpfqinPMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvd1AtQ20tWm82dWpoQmZZQzNESmxpbC1xS2M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXkiMA0G
CSqGSIb3DQEBCwUAA4IBAQAjcOLqUbuFSkxdeF7tPfN5QmOMf1ioL5DTMzWrg1tq
zIgM1kX3ViD2/vjDtvndIiRZOkilqNALX1EeaN2NP9I1iFpTvxE2R6FPMbhqgUfg
leM3cnB/meTMqRk7yAWEEb/HyAP0gVV9P/4feo56eO/8K16Vzu3KP+XDOjglkAk6
uUEA3VavqBYQDtfvqUXreZcbhQSaK5DQcgQ/8Ikm/MVgX6MhflP8VRfsFjUCZj1k
XS1AZsx8El4/jyJxohKCtTZDTAVhREzkHGt9Uib+QKDEJKIRsUPwAI209TP1FUMe
qEFauMW5vkozl5eEk5pSO3OCzUoUx0gN9u6EQ9qqI2DR
Generated at Wed Aug 16 18:03:08 2023 by rpki-client on console-fra.rpki-client.org