Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/phHCyQY2Z_IgpYI5QAAcvZfGITg.roa
File: phHCyQY2Z_IgpYI5QAAcvZfGITg.roa (raw, json)
Hash identifier: yL9C3+UAazVN93OpGpF4xflWUfQriAw8xhJ7H1e4U+w=
Subject key identifier: A6:11:C2:C9:06:36:67:F2:20:A5:82:39:40:00:1C:BD:97:C6:21:38
Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial: 0192011F6B403C9309D0A33C388BC88FFD07
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/phHCyQY2Z_IgpYI5QAAcvZfGITg.roa
Signing time: Tue 17 Sep 2024 17:54:48 +0000
ROA not before: Tue 17 Sep 2024 17:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211607
IP address blocks: 195.230.103.0/24 maxlen: 24
216.25.124.0/24 maxlen: 24
2001:678:e70::/48 maxlen: 48
2a10:b640:3000::/36 maxlen: 48
2a10:b641::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 28 Oct 2024 16:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:01:1f:6b:40:3c:93:09:d0:a3:3c:38:8b:c8:8f:fd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Validity
Not Before: Sep 17 17:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a611c2c9063667f220a5823940001cbd97c62138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:da:a5:05:be:de:92:fe:2d:aa:55:93:7c:
23:36:ec:71:8c:44:49:48:20:f0:4b:57:86:90:e5:
3a:ee:b2:d7:e5:15:f4:6d:e1:34:44:ae:d4:25:2c:
8f:b0:8a:12:83:c8:52:c3:97:77:0b:11:89:ff:27:
14:1f:72:c9:85:b2:00:18:9b:ee:a9:8d:78:e0:a0:
9f:34:13:10:3c:3c:9d:53:4c:df:56:47:d6:9f:2c:
cb:74:0b:f9:58:65:51:86:41:72:66:8d:01:19:fd:
e0:57:cd:ae:97:0e:5f:e8:2f:2e:d2:87:cf:f8:43:
6b:b6:25:f9:c6:7b:38:88:77:1c:bc:31:00:1b:b4:
ce:31:5d:b2:b8:dd:60:46:b7:5d:e9:7d:97:b8:cb:
a0:be:c0:64:77:4c:5d:14:00:52:90:89:f7:cd:70:
47:d1:33:35:43:62:c2:10:b1:66:79:38:f3:93:a3:
29:cc:c3:8e:c5:16:3b:f2:d8:e4:06:de:55:e5:60:
77:49:b1:b9:d8:b9:b7:e0:d7:8a:0e:18:69:1f:67:
96:aa:d7:f7:1f:d2:da:9e:f7:f8:ae:40:2e:0f:39:
63:d5:de:27:f9:52:a2:12:ec:84:e5:25:f7:cb:16:
5a:98:ea:3d:49:d6:c6:f3:16:30:80:9a:29:68:c8:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:11:C2:C9:06:36:67:F2:20:A5:82:39:40:00:1C:BD:97:C6:21:38
X509v3 Authority Key Identifier:
keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/phHCyQY2Z_IgpYI5QAAcvZfGITg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.103.0/24
216.25.124.0/24
IPv6:
2001:678:e70::/48
2a10:b640:3000::/36
2a10:b641::/36
Signature Algorithm: sha256WithRSAEncryption
50:dd:59:1c:a2:11:dd:d3:e5:ba:5f:55:a4:48:2a:26:43:b5:
d3:56:e7:f2:ef:fa:3b:04:60:81:9d:67:e8:30:a0:43:c3:2b:
61:92:20:45:8d:8b:26:40:9f:0c:dc:63:bb:4f:de:a3:d2:4e:
ab:df:75:28:6b:4c:a7:94:6c:0b:6d:20:fb:ca:95:b4:3c:52:
08:6f:c5:6d:33:0c:63:b6:88:48:fc:00:aa:63:61:7c:11:7c:
26:0b:61:9c:ed:27:5a:d5:2e:78:ad:36:6e:47:d6:c9:ec:1a:
ea:83:80:27:a3:f2:65:d7:4c:d0:d3:b6:34:2e:e2:0f:00:d9:
24:7c:78:c7:65:d6:dc:c3:ee:93:a7:30:7b:cd:d7:64:e0:14:
ce:0d:ef:3e:32:3d:f1:19:01:f3:7e:95:42:5b:89:65:56:84:
30:9e:79:1b:47:10:33:3a:c3:e9:28:c3:34:f2:86:a5:62:f1:
27:ad:ca:75:3e:21:d0:71:ee:fb:ff:4b:1e:29:c7:e0:bb:3a:
54:66:84:56:54:35:6a:b1:15:74:46:8c:65:2a:88:cd:41:25:
10:7a:f5:5c:6c:3f:cd:4c:0a:e3:e3:68:eb:7b:67:4b:da:52:
45:1d:86:37:e2:ed:c8:25:97:80:71:82:97:12:6a:9e:0b:83:
a3:2f:ec:84
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZIBH2tAPJMJ0KM8OIvIj/0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOWZjOGEwNjdmYTZkMjQ3NmJkY2UyNGFmZmZhZDE3MTMx
ZDllODYwHhcNMjQwOTE3MTc1NDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjExYzJjOTA2MzY2N2YyMjBhNTgyMzk0MDAwMWNiZDk3YzYyMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx93apQW+3pL+LapVk3wjNuxxjERJ
SCDwS1eGkOU67rLX5RX0beE0RK7UJSyPsIoSg8hSw5d3CxGJ/ycUH3LJhbIAGJvu
qY144KCfNBMQPDydU0zfVkfWnyzLdAv5WGVRhkFyZo0BGf3gV82ulw5f6C8u0ofP
+ENrtiX5xns4iHccvDEAG7TOMV2yuN1gRrdd6X2XuMugvsBkd0xdFABSkIn3zXBH
0TM1Q2LCELFmeTjzk6MpzMOOxRY78tjkBt5V5WB3SbG52Lm34NeKDhhpH2eWqtf3
H9Lanvf4rkAuDzlj1d4n+VKiEuyE5SX3yxZamOo9SdbG8xYwgJopaMgH7QIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFKYRwskGNmfyIKWCOUAAHL2XxiE4MB8GA1UdIwQY
MBaAFMCfyKBn+m0kdr3OJK//rRcTHZ6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYt
OGU5MjRmZmJlNTg0LzEvcGhIQ3lRWTJaX0lncFlJNVFBQWN2WmZHSVRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYtOGU5MjRmZmJlNTg0
LzEvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTASBAIAATAMAwQAw+ZnAwQA
2Bl8MB8EAgACMBkDBwAgAQZ4DnADBgQqELZAMAMGBCoQtkEAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQ3VkcohHd0+W6X1WkSComQ7XTVufy7/o7BGCBnWfoMKBDwythkiBF
jYsmQJ8M3GO7T96j0k6r33Uoa0ynlGwLbSD7ypW0PFIIb8VtMwxjtohI/ACqY2F8
EXwmC2Gc7Sda1S54rTZuR9bJ7Brqg4Ano/Jl10zQ07Y0LuIPANkkfHjHZdbcw+6T
pzB7zddk4BTODe8+Mj3xGQHzfpVCW4llVoQwnnkbRxAzOsPpKMM08oalYvEnrcp1
PiHQce77/0seKcfguzpUZoRWVDVqsRV0RoxlKojNQSUQevVcbD/NTArj42jre2dL
2lJFHYY34u3IJZeAcYKXEmqeC4OjL+yE
-----END CERTIFICATE-----
Generated at Mon Oct 28 20:14:22 2024 by rpki-client on console-ams.rpki-client.org