Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/KZDyHU7-ol4yBs79I_-hFUz4Etc.roa
File: KZDyHU7-ol4yBs79I_-hFUz4Etc.roa (raw, json)
Hash identifier: hNSw4nd3fAKnRDlZXgOlftycSJ7DqVDXpbWMt/hxDm4=
Subject key identifier: 29:90:F2:1D:4E:FE:A2:5E:32:06:CE:FD:23:FF:A1:15:4C:F8:12:D7
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 018DF097132D1B2A2451F1D78699826CD487
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/KZDyHU7-ol4yBs79I_-hFUz4Etc.roa
Signing time: Wed 28 Feb 2024 16:40:49 +0000
ROA not before: Wed 28 Feb 2024 16:40:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132335
IP address blocks: 109.122.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 14:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:97:13:2d:1b:2a:24:51:f1:d7:86:99:82:6c:d4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Feb 28 16:40:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2990f21d4efea25e3206cefd23ffa1154cf812d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:92:96:6f:ad:0e:1e:61:06:e4:36:80:ec:
df:a2:9b:c1:e9:a3:95:4e:0e:03:13:af:79:60:71:
e1:15:e8:a9:0f:c3:fc:ad:66:ad:af:fc:82:b6:3d:
9d:6b:5f:45:8c:75:1f:6e:b7:bd:cf:52:5f:56:30:
8a:0c:92:3d:60:47:43:ce:0a:7a:67:ad:74:a5:83:
f1:65:c1:f1:50:d2:41:90:ad:34:79:2f:42:1b:c5:
2c:4b:38:31:98:c3:6a:54:c4:5e:54:dd:94:24:e2:
3f:fd:5c:d0:fc:bc:fe:ae:bf:fe:a4:92:c2:02:f5:
6b:9f:05:a8:69:81:fe:be:f6:f5:ac:34:6c:5c:62:
df:d4:da:b1:ef:75:18:14:81:76:ef:60:c6:01:36:
98:2a:eb:bc:9f:86:16:85:72:9f:f8:53:17:4c:64:
2e:16:aa:d4:26:fc:1a:ce:0c:60:b5:0a:29:2d:50:
87:17:9a:35:65:2f:f0:b8:c9:af:53:c3:a5:4e:0d:
86:dd:aa:ab:be:34:5c:8a:b7:25:23:ba:53:04:bc:
1e:0c:66:4d:5d:3e:ea:6b:2c:27:dd:28:f0:9d:2f:
37:59:58:33:be:13:71:76:79:74:15:9a:34:a8:5c:
1d:f3:eb:3f:23:72:2e:ef:cb:c5:d2:9f:1f:53:10:
9e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:90:F2:1D:4E:FE:A2:5E:32:06:CE:FD:23:FF:A1:15:4C:F8:12:D7
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/KZDyHU7-ol4yBs79I_-hFUz4Etc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:5d:20:ca:33:f4:1d:f0:fe:20:39:90:8f:0c:52:1a:0a:7d:
3b:9c:23:be:2a:dc:b4:1c:3b:e9:34:f1:a2:17:53:c4:7c:7d:
d3:e0:4b:7e:89:f9:57:78:fe:61:47:1b:a1:ea:0c:c6:96:d3:
e5:7e:50:6e:ae:20:eb:f9:16:d0:91:77:a2:1d:6c:65:34:70:
c3:cd:0f:e8:34:9f:75:7c:9c:d4:83:9a:29:83:31:35:8c:ce:
34:fd:63:10:21:bc:06:4d:3c:84:48:4d:28:40:fc:42:16:a2:
4e:f5:64:d4:21:7d:2f:5a:de:aa:80:51:a9:c1:fb:9c:3f:bb:
29:38:aa:b4:67:4f:41:f0:54:4c:73:e8:be:ca:88:54:2f:71:
2f:84:bc:12:ee:68:d5:a8:bd:21:42:66:e5:d1:48:60:6f:ad:
c6:77:2d:b2:0d:80:21:16:00:1d:6b:82:08:60:16:99:04:d6:
3d:96:5e:59:05:84:7f:5f:0c:b7:49:ab:92:2b:c5:07:2b:4e:
61:fe:e2:b0:b8:18:a0:59:d2:65:86:b2:37:a8:13:74:0b:36:
aa:58:fc:c5:72:d8:ef:16:a7:88:63:a7:d4:11:90:e1:96:6d:
17:dd:2d:7e:73:0a:f8:2c:31:05:cd:f8:54:26:0a:f7:34:c8:
bd:c3:ff:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3wlxMtGyokUfHXhpmCbNSHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMjJjNWFiN2RiM2RkMzk2NjE5MmZhYWZlMDdmMzExNWIw
YzhlZTUwHhcNMjQwMjI4MTY0MDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTkwZjIxZDRlZmVhMjVlMzIwNmNlZmQyM2ZmYTExNTRjZjgxMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3KSlm+tDh5hBuQ2gOzfopvB6aOV
Tg4DE695YHHhFeipD8P8rWatr/yCtj2da19FjHUfbre9z1JfVjCKDJI9YEdDzgp6
Z610pYPxZcHxUNJBkK00eS9CG8UsSzgxmMNqVMReVN2UJOI//VzQ/Lz+rr/+pJLC
AvVrnwWoaYH+vvb1rDRsXGLf1Nqx73UYFIF272DGATaYKuu8n4YWhXKf+FMXTGQu
FqrUJvwazgxgtQopLVCHF5o1ZS/wuMmvU8OlTg2G3aqrvjRcirclI7pTBLweDGZN
XT7qaywn3SjwnS83WVgzvhNxdnl0FZo0qFwd8+s/I3Iu78vF0p8fUxCe9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCmQ8h1O/qJeMgbO/SP/oRVM+BLXMB8GA1UdIwQY
MBaAFHIixat9s905Zhkvqv4H8xFbDI7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYzYwYWMtYmEzZi00NDBiLTg2OGIt
ZWExMmVmOTQyMmVjLzEvS1pEeUhVNy1vbDR5QnM3OUlfLWhGVXo0RXRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xYzYwYWMtYmEzZi00NDBiLTg2OGItZWExMmVmOTQyMmVj
LzEvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrIMA0G
CSqGSIb3DQEBCwUAA4IBAQC0XSDKM/Qd8P4gOZCPDFIaCn07nCO+Kty0HDvpNPGi
F1PEfH3T4Et+iflXeP5hRxuh6gzGltPlflBuriDr+RbQkXeiHWxlNHDDzQ/oNJ91
fJzUg5opgzE1jM40/WMQIbwGTTyESE0oQPxCFqJO9WTUIX0vWt6qgFGpwfucP7sp
OKq0Z09B8FRMc+i+yohUL3EvhLwS7mjVqL0hQmbl0Uhgb63Gdy2yDYAhFgAda4II
YBaZBNY9ll5ZBYR/Xwy3SauSK8UHK05h/uKwuBigWdJlhrI3qBN0CzaqWPzFctjv
FqeIY6fUEZDhlm0X3S1+cwr4LDEFzfhUJgr3NMi9w/8y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:57 2024 by rpki-client on console-fra.rpki-client.org