Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/sXLcAazRMnojvRKKHJrnKSDdW34.roa
File: sXLcAazRMnojvRKKHJrnKSDdW34.roa (raw, json)
Hash identifier: BVKa4OqQoGjwZXUtRb8uZgjpZ/hvGcBiMC2YSmEPER4=
Subject key identifier: B1:72:DC:01:AC:D1:32:7A:23:BD:12:8A:1C:9A:E7:29:20:DD:5B:7E
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 018F3045BF024A8851F044D38B02664E090D
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/sXLcAazRMnojvRKKHJrnKSDdW34.roa
Signing time: Tue 30 Apr 2024 18:30:28 +0000
ROA not before: Tue 30 Apr 2024 18:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49872
IP address blocks: 109.122.192.0/24 maxlen: 24
109.122.193.0/24 maxlen: 24
109.122.194.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
109.122.196.0/24 maxlen: 24
109.122.197.0/24 maxlen: 24
109.122.199.0/24 maxlen: 24
109.122.201.0/24 maxlen: 24
109.122.203.0/24 maxlen: 24
109.122.205.0/24 maxlen: 24
109.122.207.0/24 maxlen: 24
109.122.208.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
109.122.211.0/24 maxlen: 24
109.122.212.0/24 maxlen: 24
109.122.213.0/24 maxlen: 24
109.122.214.0/24 maxlen: 24
109.122.215.0/24 maxlen: 24
109.122.216.0/24 maxlen: 24
109.122.217.0/24 maxlen: 24
109.122.218.0/24 maxlen: 24
109.122.219.0/24 maxlen: 24
109.122.220.0/24 maxlen: 24
109.122.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 18:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:30:45:bf:02:4a:88:51:f0:44:d3:8b:02:66:4e:09:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Apr 30 18:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b172dc01acd1327a23bd128a1c9ae72920dd5b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:0b:26:7f:2e:99:67:fe:c4:9f:d8:c8:0a:
ac:cc:dd:57:cb:d8:ac:1b:99:bd:62:52:39:d2:79:
e8:5e:ec:42:ca:00:12:fb:51:ca:f4:09:09:e2:16:
4b:07:eb:e4:1b:57:24:c6:88:06:b2:41:09:e6:c0:
ea:83:b8:44:e9:68:fb:44:d0:51:07:95:66:ca:01:
ec:62:da:54:17:67:40:2c:3b:95:9a:d4:ca:0c:03:
ca:7a:d8:16:e7:b5:ea:08:77:d3:75:45:b7:47:d1:
59:1a:d8:e2:4a:51:31:d4:a8:3b:1b:1c:24:70:aa:
2b:18:21:0d:85:31:df:14:c6:56:e5:f1:52:cd:b8:
a5:42:91:eb:fe:95:cc:59:f7:ff:53:cd:6f:b0:20:
65:00:93:d5:58:d9:21:b0:8d:c5:d4:72:1a:57:bc:
28:a1:8c:88:ec:67:f9:75:92:c4:73:b2:5c:fe:25:
16:5b:4e:e1:10:5f:9a:64:d9:35:d2:ab:14:47:23:
8e:c3:36:bc:f6:fa:73:f0:af:f4:9b:c4:a2:70:e7:
5e:02:87:e7:8f:8f:bb:4e:11:38:a7:2a:83:72:a4:
e5:ad:b6:0e:67:77:97:18:e9:16:e0:ea:1e:3e:82:
89:fe:a8:6e:9f:0c:7b:81:56:94:69:c3:07:55:a2:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:72:DC:01:AC:D1:32:7A:23:BD:12:8A:1C:9A:E7:29:20:DD:5B:7E
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/sXLcAazRMnojvRKKHJrnKSDdW34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0-109.122.197.255
109.122.199.0/24
109.122.201.0/24
109.122.203.0/24
109.122.205.0/24
109.122.207.0-109.122.208.255
109.122.210.0-109.122.221.255
Signature Algorithm: sha256WithRSAEncryption
1c:b2:7c:ae:00:06:fa:8f:0e:e2:52:f8:51:b2:1e:05:55:7d:
99:da:e0:6c:10:43:e4:67:22:18:37:a6:e2:62:24:bb:3d:b2:
51:23:bc:78:d3:03:d5:ca:b9:2b:4d:34:32:60:c8:a8:8e:11:
74:91:e1:17:00:df:2f:27:fb:6c:6a:0b:a2:41:a8:d1:94:85:
e1:c0:0e:90:73:73:9c:bc:8d:a2:3e:fc:32:f0:32:ad:c2:3b:
01:9d:3b:8d:91:66:91:80:81:08:44:54:df:89:97:54:ae:15:
51:61:45:48:1c:1f:96:62:da:eb:1d:76:7b:ca:34:33:5b:e0:
90:ee:c9:0f:b7:ff:69:8c:e6:be:54:4d:0d:81:90:f4:3c:aa:
a1:1a:15:aa:89:93:a2:a5:7e:63:1e:90:cf:58:9e:03:de:dd:
dd:72:4c:82:a2:88:ad:66:c9:01:da:3a:a0:d6:f5:a0:97:6f:
df:03:99:6e:cf:da:e1:e3:4b:3f:11:5c:b6:c8:ed:d9:d2:19:
e2:48:3b:6a:d1:b2:e3:dc:11:4f:f9:8c:74:db:05:25:67:3c:
ba:56:34:9a:30:d8:e0:e4:5f:e7:ee:f2:b2:63:c0:a4:fe:a1:
39:3e:a9:d5:06:d2:ed:62:55:8a:2f:fb:cf:81:ba:1b:81:a8:
45:37:5a:05
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAY8wRb8CSohR8ETTiwJmTgkNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMjJjNWFiN2RiM2RkMzk2NjE5MmZhYWZlMDdmMzExNWIw
YzhlZTUwHhcNMjQwNDMwMTgzMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTcyZGMwMWFjZDEzMjdhMjNiZDEyOGExYzlhZTcyOTIwZGQ1YjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQQLJn8umWf+xJ/YyAqszN1Xy9is
G5m9YlI50nnoXuxCygAS+1HK9AkJ4hZLB+vkG1ckxogGskEJ5sDqg7hE6Wj7RNBR
B5VmygHsYtpUF2dALDuVmtTKDAPKetgW57XqCHfTdUW3R9FZGtjiSlEx1Kg7Gxwk
cKorGCENhTHfFMZW5fFSzbilQpHr/pXMWff/U81vsCBlAJPVWNkhsI3F1HIaV7wo
oYyI7Gf5dZLEc7Jc/iUWW07hEF+aZNk10qsURyOOwza89vpz8K/0m8SicOdeAofn
j4+7ThE4pyqDcqTlrbYOZ3eXGOkW4OoePoKJ/qhunwx7gVaUacMHVaJJYwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFLFy3AGs0TJ6I70Sihya5ykg3Vt+MB8GA1UdIwQY
MBaAFHIixat9s905Zhkvqv4H8xFbDI7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYzYwYWMtYmEzZi00NDBiLTg2OGIt
ZWExMmVmOTQyMmVjLzEvc1hMY0FhelJNbm9qdlJLS0hKcm5LU0RkVzM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xYzYwYWMtYmEzZi00NDBiLTg2OGItZWExMmVmOTQyMmVj
LzEvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCMAwDBAZtesAD
BAFtesQDBABtescDBABteskDBABtessDBABtes0wDAMEAG16zwMEAG160DAMAwQB
bXrSAwQBbXrcMA0GCSqGSIb3DQEBCwUAA4IBAQAcsnyuAAb6jw7iUvhRsh4FVX2Z
2uBsEEPkZyIYN6biYiS7PbJRI7x40wPVyrkrTTQyYMiojhF0keEXAN8vJ/tsagui
QajRlIXhwA6Qc3OcvI2iPvwy8DKtwjsBnTuNkWaRgIEIRFTfiZdUrhVRYUVIHB+W
YtrrHXZ7yjQzW+CQ7skPt/9pjOa+VE0NgZD0PKqhGhWqiZOipX5jHpDPWJ4D3t3d
ckyCooitZskB2jqg1vWgl2/fA5luz9rh40s/EVy2yO3Z0hniSDtq0bLj3BFP+Yx0
2wUlZzy6VjSaMNjg5F/n7vKyY8Ck/qE5PqnVBtLtYlWKL/vPgbobgahFN1oF
-----END CERTIFICATE-----
Generated at Tue Apr 30 22:24:05 2024 by rpki-client on console-ams.rpki-client.org