Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/It2RvqLzYhu5priv6n4GLjQOCyE.roa
File: It2RvqLzYhu5priv6n4GLjQOCyE.roa (raw, json)
Hash identifier: ljz0760bI4ZO86O7dDaGNGTJKLy8EJOq1MiHRzIz66g=
Subject key identifier: 22:DD:91:BE:A2:F3:62:1B:B9:A6:B8:AF:EA:7E:06:2E:34:0E:0B:21
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 018DF09713880BCB7B337226EB684469E6A6
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/It2RvqLzYhu5priv6n4GLjQOCyE.roa
Signing time: Wed 28 Feb 2024 16:40:49 +0000
ROA not before: Wed 28 Feb 2024 16:40:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149457
IP address blocks: 109.122.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 14:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:97:13:88:0b:cb:7b:33:72:26:eb:68:44:69:e6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Feb 28 16:40:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22dd91bea2f3621bb9a6b8afea7e062e340e0b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:59:bb:7c:7d:39:b4:e8:ca:e7:a1:7f:55:
75:6c:21:93:9e:b0:40:d5:c9:7b:64:52:7b:4c:9b:
ba:97:a3:2e:84:16:e2:00:56:02:e3:3a:28:2b:8b:
12:2e:27:1d:db:59:9e:44:ce:88:3c:82:9c:cd:ad:
5c:0a:88:5f:15:27:83:ea:64:fc:85:e4:fd:87:84:
03:49:3d:da:00:be:c7:5d:0a:ba:29:3a:3c:d3:51:
04:75:9a:11:4b:2d:1e:a9:3e:aa:0b:2f:f8:8b:8f:
06:af:ce:15:94:74:fb:cb:58:86:17:f2:53:7e:9f:
36:e0:86:00:9f:c9:bf:33:4d:fd:63:4c:1a:fa:98:
3f:8e:13:f4:69:37:0b:9c:54:16:13:c5:77:66:8a:
4e:f4:4a:07:57:d1:bd:25:0a:00:44:59:51:84:8c:
04:8c:36:e7:6d:60:9f:58:86:2c:aa:37:11:d1:3f:
2c:4f:4d:6b:c4:cd:fd:f2:be:e0:c3:94:31:d0:e6:
ba:89:a5:ac:b7:c3:12:84:1e:f8:2b:55:36:87:d1:
df:83:2e:79:ab:1a:17:f1:a0:2a:09:82:09:bd:0f:
35:58:35:12:03:e7:aa:5d:a0:10:49:87:9a:88:af:
83:d0:83:ac:59:48:e8:0e:d8:d1:71:cf:c0:94:cd:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DD:91:BE:A2:F3:62:1B:B9:A6:B8:AF:EA:7E:06:2E:34:0E:0B:21
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/It2RvqLzYhu5priv6n4GLjQOCyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.222.0/24
Signature Algorithm: sha256WithRSAEncryption
75:76:80:a2:10:4d:8d:f5:42:77:71:2a:e2:eb:f0:84:b6:12:
d5:74:9e:a5:26:f5:69:07:a6:23:c0:30:6d:ea:fd:a9:ed:3a:
1a:47:29:16:eb:83:48:ad:9b:a8:42:c0:9e:a3:53:d8:f1:e8:
96:a6:f8:bf:21:72:f6:17:33:4e:25:d4:b2:d8:be:d0:d1:e6:
e6:5e:2b:6c:8a:74:46:99:16:42:46:44:63:54:2c:6f:9b:58:
17:1c:1a:d7:2b:11:08:05:f8:af:b2:73:3b:46:47:e2:92:82:
cc:68:e8:00:fc:e3:03:4b:fd:02:82:35:23:7d:a3:1f:3e:65:
ad:e5:b9:e8:de:05:34:04:79:ea:39:6f:c8:61:4e:1b:2e:f8:
82:33:62:21:bb:30:c3:68:9e:d7:8b:91:11:1c:42:6a:2d:44:
f4:8a:bd:9e:c5:c0:02:0e:bc:11:1b:b1:7b:9f:b9:41:58:db:
f7:c6:8e:cf:cd:c3:54:3f:6c:6c:a7:dc:10:8d:98:61:2f:d6:
95:31:3e:ee:ba:a2:0d:e9:b3:6e:0e:6f:17:b7:eb:c5:c2:e0:
5a:01:4e:27:b3:49:7b:cc:41:ff:05:6f:50:9b:c0:42:f0:c2:
c8:49:b0:7e:e4:70:cf:ef:6f:d7:0e:eb:2e:74:3a:3a:a1:da:
31:d3:78:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3wlxOIC8t7M3Im62hEaeamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMjJjNWFiN2RiM2RkMzk2NjE5MmZhYWZlMDdmMzExNWIw
YzhlZTUwHhcNMjQwMjI4MTY0MDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmRkOTFiZWEyZjM2MjFiYjlhNmI4YWZlYTdlMDYyZTM0MGUwYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqRZu3x9ObToyuehf1V1bCGTnrBA
1cl7ZFJ7TJu6l6MuhBbiAFYC4zooK4sSLicd21meRM6IPIKcza1cCohfFSeD6mT8
heT9h4QDST3aAL7HXQq6KTo801EEdZoRSy0eqT6qCy/4i48Gr84VlHT7y1iGF/JT
fp824IYAn8m/M039Y0wa+pg/jhP0aTcLnFQWE8V3ZopO9EoHV9G9JQoARFlRhIwE
jDbnbWCfWIYsqjcR0T8sT01rxM398r7gw5Qx0Oa6iaWst8MShB74K1U2h9Hfgy55
qxoX8aAqCYIJvQ81WDUSA+eqXaAQSYeaiK+D0IOsWUjoDtjRcc/AlM2T5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCLdkb6i82Ibuaa4r+p+Bi40DgshMB8GA1UdIwQY
MBaAFHIixat9s905Zhkvqv4H8xFbDI7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYzYwYWMtYmEzZi00NDBiLTg2OGIt
ZWExMmVmOTQyMmVjLzEvSXQyUnZxTHpZaHU1cHJpdjZuNEdMalFPQ3lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xYzYwYWMtYmEzZi00NDBiLTg2OGItZWExMmVmOTQyMmVj
LzEvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXreMA0G
CSqGSIb3DQEBCwUAA4IBAQB1doCiEE2N9UJ3cSri6/CEthLVdJ6lJvVpB6YjwDBt
6v2p7ToaRykW64NIrZuoQsCeo1PY8eiWpvi/IXL2FzNOJdSy2L7Q0ebmXitsinRG
mRZCRkRjVCxvm1gXHBrXKxEIBfivsnM7RkfikoLMaOgA/OMDS/0CgjUjfaMfPmWt
5bno3gU0BHnqOW/IYU4bLviCM2IhuzDDaJ7Xi5ERHEJqLUT0ir2excACDrwRG7F7
n7lBWNv3xo7PzcNUP2xsp9wQjZhhL9aVMT7uuqIN6bNuDm8Xt+vFwuBaAU4ns0l7
zEH/BW9Qm8BC8MLISbB+5HDP72/XDusudDo6odox03i8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:57 2024 by rpki-client on console-fra.rpki-client.org