Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2l7qw6GcPsMuSG0Ds4mBZeSbs14.roa
File: 2l7qw6GcPsMuSG0Ds4mBZeSbs14.roa (raw, json)
Hash identifier: syq5Q94WMynam4f0Zyz/AnjxHysbUfaRGbjVnnoRr84=
Subject key identifier: DA:5E:EA:C3:A1:9C:3E:C3:2E:48:6D:03:B3:89:81:65:E4:9B:B3:5E
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA508113790765FF0632AC9B61A6FB
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2l7qw6GcPsMuSG0Ds4mBZeSbs14.roa
Signing time: Mon 02 Jan 2023 13:44:50 +0000
ROA not before: Mon 02 Jan 2023 13:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 109.248.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:50:81:13:79:07:65:ff:06:32:ac:9b:61:a6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da5eeac3a19c3ec32e486d03b3898165e49bb35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:9e:e4:96:60:30:7e:10:b1:95:66:24:a8:
7d:9e:1f:0e:91:e3:ff:93:d6:9e:85:5f:5d:8d:3d:
4b:03:04:c6:9d:43:35:6f:a2:7c:64:e7:f7:c8:79:
4c:da:82:7e:49:86:45:b5:e2:d2:86:2f:ca:f4:ae:
eb:6e:a3:a6:45:ad:41:ec:16:c4:e5:67:99:45:ec:
d6:98:c9:37:8d:15:3d:93:8e:d5:b6:4a:26:65:fd:
db:26:c8:95:ae:1a:34:ba:4f:a2:13:42:44:d6:6a:
fc:dc:d0:e5:8d:3e:95:d9:0e:2f:85:e2:65:99:ed:
18:8d:8e:be:80:ac:cf:9a:70:27:f9:ac:28:f0:1a:
90:01:4f:d8:bb:ce:74:00:b3:29:a7:cb:58:18:0c:
b3:d0:8d:47:3c:fb:9a:0e:38:74:24:f1:d7:1f:6b:
8e:34:69:23:ea:d4:fd:16:17:9b:87:38:77:92:77:
4c:12:ea:ca:06:be:1b:08:43:61:64:03:4b:98:01:
e9:24:f1:2e:f4:47:ef:f1:de:46:67:aa:61:19:3d:
00:06:e6:37:4c:41:21:f5:85:c9:e9:6f:4a:2b:65:
67:e2:99:7d:a9:65:b6:5d:73:6b:99:d0:16:24:91:
09:30:98:29:16:c8:ee:3b:f9:8f:e0:97:be:1d:c0:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5E:EA:C3:A1:9C:3E:C3:2E:48:6D:03:B3:89:81:65:E4:9B:B3:5E
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2l7qw6GcPsMuSG0Ds4mBZeSbs14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:31:31:c7:93:2d:ab:8b:52:1f:c6:f2:ab:6f:a1:63:05:19:
29:94:97:34:31:95:bc:8b:f2:36:d3:3e:46:95:4e:90:ff:dd:
84:db:27:fc:bb:f0:1c:be:d1:ce:d9:85:6f:63:f8:f4:0c:eb:
78:5f:7f:f7:a4:de:71:07:3f:67:9b:68:af:e8:6e:0b:a5:2f:
9c:98:c0:96:c5:7c:6c:69:2a:32:12:d0:ea:e4:cb:30:92:e3:
7f:dd:d1:36:7a:25:89:3c:38:5b:84:20:21:dc:3d:a3:f9:53:
14:25:f3:a4:bf:5c:7c:46:88:e3:e4:af:34:7b:6d:e0:9b:08:
fb:cd:1a:db:04:9b:c8:ec:c4:35:ec:0d:35:58:85:a1:af:1d:
80:e9:c6:f7:d7:83:9e:fc:6f:35:af:c1:ff:8a:6c:cd:f5:76:
71:32:e3:98:0a:8b:be:68:10:33:60:46:c2:7a:58:f2:f7:65:
3d:44:6f:7a:cb:a0:8b:1e:7b:3b:5c:29:1c:98:60:5d:f8:a4:
41:7a:aa:1f:49:3d:b2:d2:77:8b:4c:f6:06:5e:b3:6a:a1:83:
06:5b:52:87:0b:f0:d8:05:22:cb:91:1a:16:16:4b:13:c6:59:
69:41:a6:f6:15:bd:3f:e2:72:be:b6:4e:55:52:ef:41:77:41:
9f:ea:af:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyulCBE3kHZf8GMqybYab7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjMwMTAyMTM0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTVlZWFjM2ExOWMzZWMzMmU0ODZkMDNiMzg5ODE2NWU0OWJiMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBqe5JZgMH4QsZVmJKh9nh8OkeP/
k9aehV9djT1LAwTGnUM1b6J8ZOf3yHlM2oJ+SYZFteLShi/K9K7rbqOmRa1B7BbE
5WeZRezWmMk3jRU9k47VtkomZf3bJsiVrho0uk+iE0JE1mr83NDljT6V2Q4vheJl
me0YjY6+gKzPmnAn+awo8BqQAU/Yu850ALMpp8tYGAyz0I1HPPuaDjh0JPHXH2uO
NGkj6tT9Fhebhzh3kndMEurKBr4bCENhZANLmAHpJPEu9Efv8d5GZ6phGT0ABuY3
TEEh9YXJ6W9KK2Vn4pl9qWW2XXNrmdAWJJEJMJgpFsjuO/mP4Je+HcDHbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNpe6sOhnD7DLkhtA7OJgWXkm7NeMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvMmw3cXc2R2NQc011U0cwRHM0bUJaZVNiczE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbfgqMA0G
CSqGSIb3DQEBCwUAA4IBAQCiMTHHky2ri1IfxvKrb6FjBRkplJc0MZW8i/I20z5G
lU6Q/92E2yf8u/AcvtHO2YVvY/j0DOt4X3/3pN5xBz9nm2iv6G4LpS+cmMCWxXxs
aSoyEtDq5MswkuN/3dE2eiWJPDhbhCAh3D2j+VMUJfOkv1x8Rojj5K80e23gmwj7
zRrbBJvI7MQ17A01WIWhrx2A6cb314Oe/G81r8H/imzN9XZxMuOYCou+aBAzYEbC
eljy92U9RG96y6CLHns7XCkcmGBd+KRBeqofST2y0neLTPYGXrNqoYMGW1KHC/DY
BSLLkRoWFksTxllpQab2Fb0/4nK+tk5VUu9Bd0Gf6q+L
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org