Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/MJvVmOFrUXIcIUjVxeo1PQqx9Cc.roa
File: MJvVmOFrUXIcIUjVxeo1PQqx9Cc.roa (raw, json)
Hash identifier: bKZ36fOZp5SVgE2cAKEfqExqH2AHv/EeSYDul5JtGrE=
Subject key identifier: 30:9B:D5:98:E1:6B:51:72:1C:21:48:D5:C5:EA:35:3D:0A:B1:F4:27
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 018F53AB26E9906825E7AB64949DEF31B042
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/MJvVmOFrUXIcIUjVxeo1PQqx9Cc.roa
Signing time: Tue 07 May 2024 15:27:56 +0000
ROA not before: Tue 07 May 2024 15:27:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49872
IP address blocks: 109.122.192.0/24 maxlen: 24
109.122.193.0/24 maxlen: 24
109.122.194.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
109.122.196.0/24 maxlen: 24
109.122.197.0/24 maxlen: 24
109.122.198.0/24 maxlen: 24
109.122.199.0/24 maxlen: 24
109.122.200.0/24 maxlen: 24
109.122.201.0/24 maxlen: 24
109.122.202.0/24 maxlen: 24
109.122.203.0/24 maxlen: 24
109.122.204.0/24 maxlen: 24
109.122.205.0/24 maxlen: 24
109.122.206.0/24 maxlen: 24
109.122.207.0/24 maxlen: 24
109.122.208.0/24 maxlen: 24
109.122.209.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
109.122.211.0/24 maxlen: 24
109.122.212.0/24 maxlen: 24
109.122.213.0/24 maxlen: 24
109.122.214.0/24 maxlen: 24
109.122.215.0/24 maxlen: 24
109.122.216.0/24 maxlen: 24
109.122.217.0/24 maxlen: 24
109.122.218.0/24 maxlen: 24
109.122.219.0/24 maxlen: 24
109.122.220.0/24 maxlen: 24
109.122.221.0/24 maxlen: 24
109.122.222.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 01:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:ab:26:e9:90:68:25:e7:ab:64:94:9d:ef:31:b0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: May 7 15:27:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=309bd598e16b51721c2148d5c5ea353d0ab1f427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:c6:90:ef:a7:e7:23:26:f2:6b:6d:b1:64:
8b:1d:c1:5b:7e:97:3c:7c:42:55:f8:78:d4:2c:0c:
87:42:e4:6c:fd:71:89:95:20:25:99:2a:db:d3:c4:
35:79:5c:ca:53:09:e6:8b:45:38:da:f4:12:22:75:
47:3d:cc:99:34:9b:e0:7a:04:be:7a:a7:7a:38:00:
e6:84:e1:bc:4e:90:83:ef:1c:d4:ed:65:ed:34:47:
01:21:24:f2:28:94:fd:7b:00:db:97:24:ab:ef:86:
d6:bc:21:40:a8:45:af:65:19:1b:82:77:d9:c0:96:
e1:01:b5:d3:6a:b6:c8:94:95:36:f9:6e:e2:a8:a0:
9b:3d:74:6c:fe:e0:71:61:14:d5:30:cf:4f:a7:d5:
ee:41:17:61:5e:b5:34:93:72:ac:c1:1e:0d:71:3b:
e9:31:cc:75:a5:be:27:1d:f3:55:be:54:3e:6d:22:
a0:35:54:9d:d1:11:f7:4f:e9:43:3c:d9:cc:b1:25:
90:46:76:40:42:40:d3:b8:da:e4:b6:a4:e5:57:1e:
96:9e:8e:d6:fe:06:bd:7e:13:f4:40:57:95:42:68:
4e:6c:f7:a4:95:fd:ff:3e:92:ab:70:91:66:7d:34:
8d:49:83:ec:a9:ef:57:8e:a8:e1:75:95:3e:d9:cc:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9B:D5:98:E1:6B:51:72:1C:21:48:D5:C5:EA:35:3D:0A:B1:F4:27
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/MJvVmOFrUXIcIUjVxeo1PQqx9Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0/19
Signature Algorithm: sha256WithRSAEncryption
46:2f:c2:f9:05:0d:7d:03:07:45:c5:9d:21:fa:09:b7:1b:44:
fa:4a:62:2e:2a:c8:d6:c4:2f:f8:4a:42:21:0e:15:4f:c0:63:
49:82:75:0e:1a:7f:70:b6:2c:3b:c9:b8:66:c9:30:87:7a:d6:
d0:ff:08:cf:9e:d6:72:64:b2:f7:dd:3e:1c:d4:ba:f0:b1:74:
7f:70:43:43:57:49:c3:49:d7:a8:92:c5:90:46:15:c9:15:33:
d7:30:fc:93:25:c7:10:e0:ec:31:8f:37:70:67:41:b3:06:37:
59:46:64:5a:bc:ab:88:38:3b:5d:3f:e0:0b:f5:78:48:06:65:
86:ce:b9:fd:4a:d3:a6:0c:1b:55:6e:fc:53:ba:52:b9:d5:ec:
f8:f8:93:49:e9:a9:5b:9b:d3:25:04:7d:4e:48:66:f4:cd:0f:
7c:5f:c1:a2:12:28:28:aa:fe:40:b2:20:f1:fd:e8:49:f2:12:
de:9e:e6:10:be:9a:5c:8a:5e:d9:c1:68:e2:3b:1b:9a:6e:4e:
16:c4:97:05:80:9c:03:c5:3b:73:df:c8:38:f9:8d:1a:3f:f5:
2b:9e:40:e1:7f:68:ed:8b:9f:f1:85:19:37:af:11:13:8e:a7:
8f:99:af:f9:92:7a:43:db:99:55:24:c1:6d:3a:ca:d3:81:60:
bb:24:83:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9TqybpkGgl56tklJ3vMbBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMjJjNWFiN2RiM2RkMzk2NjE5MmZhYWZlMDdmMzExNWIw
YzhlZTUwHhcNMjQwNTA3MTUyNzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDliZDU5OGUxNmI1MTcyMWMyMTQ4ZDVjNWVhMzUzZDBhYjFmNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtbGkO+n5yMm8mttsWSLHcFbfpc8
fEJV+HjULAyHQuRs/XGJlSAlmSrb08Q1eVzKUwnmi0U42vQSInVHPcyZNJvgegS+
eqd6OADmhOG8TpCD7xzU7WXtNEcBISTyKJT9ewDblySr74bWvCFAqEWvZRkbgnfZ
wJbhAbXTarbIlJU2+W7iqKCbPXRs/uBxYRTVMM9Pp9XuQRdhXrU0k3KswR4NcTvp
Mcx1pb4nHfNVvlQ+bSKgNVSd0RH3T+lDPNnMsSWQRnZAQkDTuNrktqTlVx6Wno7W
/ga9fhP0QFeVQmhObPeklf3/PpKrcJFmfTSNSYPsqe9XjqjhdZU+2czyDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDCb1Zjha1FyHCFI1cXqNT0KsfQnMB8GA1UdIwQY
MBaAFHIixat9s905Zhkvqv4H8xFbDI7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYzYwYWMtYmEzZi00NDBiLTg2OGIt
ZWExMmVmOTQyMmVjLzEvTUp2Vm1PRnJVWEljSVVqVnhlbzFQUXF4OUNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xYzYwYWMtYmEzZi00NDBiLTg2OGItZWExMmVmOTQyMmVj
LzEvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbXrAMA0G
CSqGSIb3DQEBCwUAA4IBAQBGL8L5BQ19AwdFxZ0h+gm3G0T6SmIuKsjWxC/4SkIh
DhVPwGNJgnUOGn9wtiw7ybhmyTCHetbQ/wjPntZyZLL33T4c1LrwsXR/cENDV0nD
SdeoksWQRhXJFTPXMPyTJccQ4OwxjzdwZ0GzBjdZRmRavKuIODtdP+AL9XhIBmWG
zrn9StOmDBtVbvxTulK51ez4+JNJ6albm9MlBH1OSGb0zQ98X8GiEigoqv5AsiDx
/ehJ8hLenuYQvppcil7ZwWjiOxuabk4WxJcFgJwDxTtz38g4+Y0aP/UrnkDhf2jt
i5/xhRk3rxETjqePma/5knpD25lVJMFtOsrTgWC7JIP3
Generated at Wed May 8 03:59:24 2024 by rpki-client on console-fra.rpki-client.org