Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/cMPF3rCcWE5xdTuIhQv6u5mfyo8.roa
File: cMPF3rCcWE5xdTuIhQv6u5mfyo8.roa (raw, json)
Hash identifier: BTdJJg8Musa/8xY0qSgKgOZA1ZICfIg4WnmKJ1DNtZU=
Subject key identifier: 70:C3:C5:DE:B0:9C:58:4E:71:75:3B:88:85:0B:FA:BB:99:9F:CA:8F
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 018570B9861D577AB7082E1B57C8DC54E52B
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/cMPF3rCcWE5xdTuIhQv6u5mfyo8.roa
Signing time: Mon 02 Jan 2023 04:24:44 +0000
ROA not before: Mon 02 Jan 2023 04:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25540
IP address blocks: 109.239.114.0/23 maxlen: 24
109.239.124.0/24 maxlen: 24
159.100.36.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:86:1d:57:7a:b7:08:2e:1b:57:c8:dc:54:e5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Jan 2 04:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70c3c5deb09c584e71753b88850bfabb999fca8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:af:f5:f6:94:d9:52:ea:81:df:d8:db:54:
33:ec:c6:44:68:ee:ae:1b:57:8a:3f:69:a8:de:ca:
af:9c:35:49:30:bc:db:91:2b:a0:79:d1:69:5c:53:
cd:47:e7:ff:4f:66:a6:ac:f1:3e:bf:72:68:09:13:
6e:d8:a3:9a:44:21:4a:19:b8:50:7d:e5:6f:e8:d3:
e8:e3:7d:25:51:f7:ea:92:86:2b:10:9c:c1:81:4b:
f0:6b:c4:6b:1f:34:9f:b9:e6:f1:ab:22:84:2d:89:
c2:9c:5f:f9:7f:5b:a6:51:93:2f:7a:93:10:05:e5:
3d:96:23:76:6b:c8:1a:f0:7d:dd:71:e5:bb:65:9b:
c4:21:3a:3d:83:79:2a:56:33:8e:54:3b:07:b4:6e:
61:57:8f:18:11:32:a4:6e:30:79:83:ed:cd:c1:31:
7b:0d:e1:f9:b6:3f:6e:a0:69:22:00:66:07:e0:30:
4b:02:f3:03:be:8d:c2:b7:3a:4b:d5:43:ae:73:fd:
6c:85:68:7c:4d:62:e8:7e:27:51:4d:51:02:0a:a9:
0d:0c:b7:4a:91:81:0c:ae:bf:0a:e8:15:01:44:7b:
d9:13:a1:7b:5c:b3:df:53:4f:ef:00:b8:05:a1:24:
e2:06:f6:34:8a:e1:a7:10:56:71:56:a0:d0:2a:5b:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:C5:DE:B0:9C:58:4E:71:75:3B:88:85:0B:FA:BB:99:9F:CA:8F
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/cMPF3rCcWE5xdTuIhQv6u5mfyo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.239.114.0/23
109.239.124.0/24
159.100.36.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:b4:88:9b:ff:ae:ac:fd:65:ce:c0:d5:b4:c0:3b:0c:1d:e6:
25:6f:4e:50:2d:b7:de:4e:52:f1:58:2b:03:10:89:af:63:4b:
41:a6:85:f1:38:68:42:c1:da:7c:f5:08:19:4f:3f:e7:41:41:
69:35:2a:3d:a5:bf:77:d1:fe:8a:a5:34:27:c5:37:26:3b:c3:
0f:ef:b8:ec:80:26:c3:7e:8c:29:33:ae:4a:c3:b4:eb:90:c1:
11:a8:36:b2:0d:5c:2a:32:80:86:89:d6:b3:2b:cd:3d:94:c3:
e0:f3:bb:cf:b1:cd:27:2d:68:20:7c:a6:a2:72:be:20:14:43:
49:64:7b:86:ea:ec:02:af:9c:61:0d:4b:19:75:37:9f:8e:cd:
99:0c:cc:41:17:d9:97:68:67:bf:e0:d1:14:46:ad:eb:2d:99:
7b:85:58:ec:83:f5:13:32:58:a4:28:7b:55:fd:65:93:f9:25:
3b:ff:8d:6f:d4:a6:3e:0d:f3:c8:eb:b8:c0:06:7a:75:a8:c9:
76:a2:2a:4d:67:75:a4:52:9e:63:e1:bf:77:9c:6c:f4:9b:90:
fe:27:ad:4b:d6:65:38:93:d9:5f:2c:db:a5:98:9b:1e:00:55:
99:54:9c:c6:dd:f3:9b:5e:55:81:38:b1:1c:be:a0:1d:dd:6f:
27:af:1b:d5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVwuYYdV3q3CC4bV8jcVOUrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ODRiNTNlYzA2OWUzMDI2MjM1OTZmYjNhYTc5ZjVkNzgy
YzA5ZjkwHhcNMjMwMTAyMDQyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGMzYzVkZWIwOWM1ODRlNzE3NTNiODg4NTBiZmFiYjk5OWZjYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMGv9faU2VLqgd/Y21Qz7MZEaO6u
G1eKP2mo3sqvnDVJMLzbkSugedFpXFPNR+f/T2amrPE+v3JoCRNu2KOaRCFKGbhQ
feVv6NPo430lUffqkoYrEJzBgUvwa8RrHzSfuebxqyKELYnCnF/5f1umUZMvepMQ
BeU9liN2a8ga8H3dceW7ZZvEITo9g3kqVjOOVDsHtG5hV48YETKkbjB5g+3NwTF7
DeH5tj9uoGkiAGYH4DBLAvMDvo3CtzpL1UOuc/1shWh8TWLofidRTVECCqkNDLdK
kYEMrr8K6BUBRHvZE6F7XLPfU0/vALgFoSTiBvY0iuGnEFZxVqDQKlvp9wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHDDxd6wnFhOcXU7iIUL+ruZn8qPMB8GA1UdIwQY
MBaAFFSEtT7AaeMCYjWW+zqnn114LAn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODkt
Y2U4ZGQ2ODk4YjI3LzEvY01QRjNyQ2NXRTV4ZFR1SWhRdjZ1NW1meW84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODktY2U4ZGQ2ODk4YjI3
LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBbe9yAwQA
be98AwQBn2QkMA0GCSqGSIb3DQEBCwUAA4IBAQAdtIib/66s/WXOwNW0wDsMHeYl
b05QLbfeTlLxWCsDEImvY0tBpoXxOGhCwdp89QgZTz/nQUFpNSo9pb930f6KpTQn
xTcmO8MP77jsgCbDfowpM65Kw7TrkMERqDayDVwqMoCGidazK809lMPg87vPsc0n
LWggfKaicr4gFENJZHuG6uwCr5xhDUsZdTefjs2ZDMxBF9mXaGe/4NEURq3rLZl7
hVjsg/UTMlikKHtV/WWT+SU7/41v1KY+DfPI67jABnp1qMl2oipNZ3WkUp5j4b93
nGz0m5D+J61L1mU4k9lfLNulmJseAFWZVJzG3fObXlWBOLEcvqAd3W8nrxvV
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:21 2024 by rpki-client on console-fra.rpki-client.org