Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/CLrWYEM335xklcIqNz8KwL8CdgY.roa
File: CLrWYEM335xklcIqNz8KwL8CdgY.roa (raw, json)
Hash identifier: lw24FknGw+KZzFRHifOYkd9MGbaS0RAzQr1qlMjIXfI=
Subject key identifier: 08:BA:D6:60:43:37:DF:9C:64:95:C2:2A:37:3F:0A:C0:BF:02:76:06
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0192712B3D44CC457805DA1F14847CF275B3
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/CLrWYEM335xklcIqNz8KwL8CdgY.roa
Signing time: Wed 09 Oct 2024 12:05:12 +0000
ROA not before: Wed 09 Oct 2024 12:05:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 109.122.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 05:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:2b:3d:44:cc:45:78:05:da:1f:14:84:7c:f2:75:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 9 12:05:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08bad6604337df9c6495c22a373f0ac0bf027606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:6a:1c:28:d1:5a:0c:8d:a4:7b:6b:4b:78:
ee:01:21:f6:74:d7:26:56:0b:f1:5a:c3:bc:53:f5:
06:0a:79:24:21:8d:44:28:87:3f:8a:5a:58:c9:98:
40:a8:a1:ca:70:ab:fd:d7:da:1d:a2:fa:99:47:a5:
80:1b:16:fa:23:4f:1d:a7:c7:6f:1a:a1:1d:11:2c:
c3:22:85:30:61:b1:65:0b:62:93:de:4c:78:13:ba:
5d:26:36:ce:c8:09:05:84:52:4e:ab:0d:bd:b4:df:
1e:c6:3b:34:96:38:ed:b2:e6:18:b8:f8:10:9c:b8:
21:f5:9b:f0:f3:ab:b4:0d:0b:4d:34:aa:6a:1b:d8:
e3:e4:d3:e8:80:01:cb:c9:61:85:4e:a1:72:df:bf:
82:63:80:ee:8b:81:c5:0b:3a:67:14:02:f5:be:12:
f9:23:d1:86:89:43:01:04:48:c8:59:6b:7e:42:33:
ba:08:dd:8e:18:74:9d:7a:90:69:49:be:28:4b:9d:
0d:87:34:a1:4f:7c:86:19:cb:ed:a9:06:f0:b8:25:
16:25:85:46:ab:fa:f3:9a:f8:16:e0:13:f7:8f:b5:
b3:85:68:21:c0:4a:0f:4e:27:dd:8f:f5:ff:da:50:
7b:c1:ff:fd:89:7c:c8:b6:4a:d2:26:59:6e:03:6e:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BA:D6:60:43:37:DF:9C:64:95:C2:2A:37:3F:0A:C0:BF:02:76:06
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/CLrWYEM335xklcIqNz8KwL8CdgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.251.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ee:af:47:30:58:f1:77:ed:09:c0:e4:b6:fd:47:04:39:6e:
e0:8f:51:a2:72:fe:25:0c:e5:45:32:3d:5f:11:60:c5:7a:fb:
13:ba:b5:1a:11:ba:eb:f8:91:81:49:be:ac:20:c1:67:b6:df:
d8:b6:8a:f7:7a:ff:24:02:40:7b:6b:3d:fa:87:2b:03:c8:66:
a0:f4:cd:9f:75:de:53:84:c7:ee:c7:8c:a8:e2:80:08:b7:be:
35:17:6e:17:f0:86:da:6a:2b:fc:bd:3e:14:ed:57:9b:c6:6e:
b2:23:d7:29:ed:65:8e:43:84:66:32:3b:f9:a6:da:fe:b1:b0:
ef:12:89:53:62:8c:c3:6b:2a:55:10:c9:e3:15:7c:c6:2f:cc:
a5:57:51:92:2f:52:55:b8:00:51:c3:69:ed:47:a9:3c:52:4b:
f2:af:b5:6d:67:5d:78:50:7f:e2:4d:11:b5:f6:f2:37:0a:60:
c2:64:6b:6e:52:f0:aa:58:20:88:b4:9f:88:31:2e:b7:4b:56:
f7:12:d8:d9:0b:fd:7c:26:af:98:a1:6d:d7:03:93:d3:c5:7b:
9e:b3:bd:e6:a4:b8:97:0a:c9:bd:bd:b6:8e:0d:e2:ae:18:66:
fd:cb:42:ae:3b:cf:fb:78:74:70:35:42:1b:52:92:19:c3:b3:
57:7b:50:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJxKz1EzEV4BdofFIR88nWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjQxMDA5MTIwNTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGJhZDY2MDQzMzdkZjljNjQ5NWMyMmEzNzNmMGFjMGJmMDI3NjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjRqHCjRWgyNpHtrS3juASH2dNcm
VgvxWsO8U/UGCnkkIY1EKIc/ilpYyZhAqKHKcKv919odovqZR6WAGxb6I08dp8dv
GqEdESzDIoUwYbFlC2KT3kx4E7pdJjbOyAkFhFJOqw29tN8exjs0ljjtsuYYuPgQ
nLgh9Zvw86u0DQtNNKpqG9jj5NPogAHLyWGFTqFy37+CY4Dui4HFCzpnFAL1vhL5
I9GGiUMBBEjIWWt+QjO6CN2OGHSdepBpSb4oS50NhzShT3yGGcvtqQbwuCUWJYVG
q/rzmvgW4BP3j7WzhWghwEoPTifdj/X/2lB7wf/9iXzItkrSJlluA26SvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAi61mBDN9+cZJXCKjc/CsC/AnYGMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvQ0xyV1lFTTMzNXhrbGNJcU56OEt3TDhDZGdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXr7MA0G
CSqGSIb3DQEBCwUAA4IBAQAF7q9HMFjxd+0JwOS2/UcEOW7gj1Gicv4lDOVFMj1f
EWDFevsTurUaEbrr+JGBSb6sIMFntt/Ytor3ev8kAkB7az36hysDyGag9M2fdd5T
hMfux4yo4oAIt741F24X8Ibaaiv8vT4U7Vebxm6yI9cp7WWOQ4RmMjv5ptr+sbDv
EolTYozDaypVEMnjFXzGL8ylV1GSL1JVuABRw2ntR6k8Ukvyr7VtZ114UH/iTRG1
9vI3CmDCZGtuUvCqWCCItJ+IMS63S1b3EtjZC/18Jq+YoW3XA5PTxXues73mpLiX
Csm9vbaODeKuGGb9y0KuO8/7eHRwNUIbUpIZw7NXe1DN
-----END CERTIFICATE-----
Generated at Mon Oct 14 07:27:47 2024 by rpki-client on console-ams.rpki-client.org