Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/wq7iILnV8CSTrao7SWvMjmwQr7s.roa
File: wq7iILnV8CSTrao7SWvMjmwQr7s.roa (raw, json)
Hash identifier: LGZbh+fFXD003gMa8EgTDCj8w1XH3cndqEwedtxfPbM=
Subject key identifier: C2:AE:E2:20:B9:D5:F0:24:93:AD:AA:3B:49:6B:CC:8E:6C:10:AF:BB
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 018E0EA72F2CA08EFB3BABD5710F7914DA68
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/wq7iILnV8CSTrao7SWvMjmwQr7s.roa
Signing time: Tue 05 Mar 2024 12:47:01 +0000
ROA not before: Tue 05 Mar 2024 12:47:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206065
IP address blocks: 109.122.240.0/22 maxlen: 22
109.122.243.0/24 maxlen: 24
109.122.244.0/22 maxlen: 22
109.122.248.0/22 maxlen: 22
185.84.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 09 Mar 2024 13:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:a7:2f:2c:a0:8e:fb:3b:ab:d5:71:0f:79:14:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Mar 5 12:47:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2aee220b9d5f02493adaa3b496bcc8e6c10afbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c9:ab:2b:5a:aa:cb:d9:c6:0e:fd:76:f7:bd:
93:5e:2f:69:54:a6:78:e9:d1:62:89:4b:67:29:14:
30:73:44:f9:05:24:77:bd:79:61:11:ef:7a:c3:13:
87:42:b1:91:00:a0:be:86:81:f9:1e:01:3e:ba:ba:
0e:dc:58:c5:88:29:7d:b8:77:c2:63:ad:1d:e2:e2:
c7:1c:89:e7:35:ed:1e:14:1a:b5:4a:ab:37:9c:23:
e4:c9:2c:e9:4a:c1:d1:23:66:fc:9e:c0:1a:ec:32:
70:94:62:d6:88:81:0c:f6:44:98:d2:26:b6:c0:60:
da:70:c4:ac:d3:36:0d:6a:b1:7f:61:27:5a:b7:d3:
3e:17:90:e5:89:62:71:5d:b4:1d:79:b0:72:28:b2:
2d:50:83:e3:54:21:e5:37:cb:9c:74:4d:c1:ec:4a:
6b:c8:02:08:65:96:76:68:64:e5:77:c9:63:74:98:
56:da:8d:61:7b:8f:0b:89:f8:c2:d6:ad:5a:bf:6d:
62:03:c7:42:5d:43:1c:6e:8a:38:fa:0b:82:9d:90:
ce:7e:b4:4f:b8:22:96:6e:ae:68:d6:e3:62:33:21:
86:28:64:ff:8c:f7:95:a2:5c:ce:5f:ef:93:6f:e5:
4d:fd:37:6d:ce:4e:d4:e7:3c:97:a0:3f:98:bd:d6:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AE:E2:20:B9:D5:F0:24:93:AD:AA:3B:49:6B:CC:8E:6C:10:AF:BB
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/wq7iILnV8CSTrao7SWvMjmwQr7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.240.0-109.122.251.255
185.84.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:b8:5d:b0:a6:84:84:43:1c:b5:63:d8:bd:b4:61:45:13:4c:
7b:e7:e2:7a:4e:53:ab:b5:c8:a4:37:51:e3:5c:6a:d2:54:cf:
6d:12:f8:52:18:c8:7f:37:d6:f4:fd:e7:f1:61:89:35:8b:43:
6c:05:d0:cb:8c:3a:9b:41:74:aa:86:d2:33:b9:dc:b6:b0:f4:
38:a0:ab:52:6b:91:b9:af:2f:e4:7d:03:3a:32:a2:fb:59:2b:
5c:c6:78:6a:bb:22:04:76:10:7a:f0:bb:02:6d:3b:d1:91:89:
99:11:08:01:e8:ce:29:44:0e:72:96:d9:9a:05:9a:20:4e:05:
69:01:57:25:c8:67:1c:01:a6:b0:8e:6a:8f:09:ee:24:02:b1:
99:6c:1d:96:aa:19:61:ef:d5:6a:c9:24:f9:e4:63:b1:b0:29:
3a:b1:ef:49:80:79:ed:93:7f:5e:4b:71:bc:4d:2d:7a:20:77:
ca:af:fc:26:71:c7:9a:50:5e:80:d7:8e:7b:40:c7:f6:20:47:
eb:f1:6b:c5:55:7b:02:53:0d:41:ba:9f:d9:94:af:f7:df:bf:
5c:48:3b:e5:58:7a:a7:00:37:eb:a4:50:7c:3d:25:9a:34:9a:
92:b1:7d:1c:a5:ed:dd:df:79:d8:ab:7e:85:bf:0b:af:6e:ca:
68:b0:a4:57
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY4Opy8soI77O6vVcQ95FNpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0
MTUwOGMwHhcNMjQwMzA1MTI0NzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmFlZTIyMGI5ZDVmMDI0OTNhZGFhM2I0OTZiY2M4ZTZjMTBhZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicmrK1qqy9nGDv12972TXi9pVKZ4
6dFiiUtnKRQwc0T5BSR3vXlhEe96wxOHQrGRAKC+hoH5HgE+uroO3FjFiCl9uHfC
Y60d4uLHHInnNe0eFBq1Sqs3nCPkySzpSsHRI2b8nsAa7DJwlGLWiIEM9kSY0ia2
wGDacMSs0zYNarF/YSdat9M+F5DliWJxXbQdebByKLItUIPjVCHlN8ucdE3B7Epr
yAIIZZZ2aGTld8ljdJhW2o1he48LifjC1q1av21iA8dCXUMcboo4+guCnZDOfrRP
uCKWbq5o1uNiMyGGKGT/jPeVolzOX++Tb+VN/Tdtzk7U5zyXoD+YvdaYuwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMKu4iC51fAkk62qO0lrzI5sEK+7MB8GA1UdIwQY
MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt
MjlmMWJlYjJmMjgyLzEvd3E3aUlMblY4Q1NUcmFvN1NXdk1qbXdRcjdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy
LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARtevAD
BAJtevgDBAK5VNwwDQYJKoZIhvcNAQELBQADggEBAE+4XbCmhIRDHLVj2L20YUUT
THvn4npOU6u1yKQ3UeNcatJUz20S+FIYyH831vT95/FhiTWLQ2wF0MuMOptBdKqG
0jO53Law9Digq1JrkbmvL+R9AzoyovtZK1zGeGq7IgR2EHrwuwJtO9GRiZkRCAHo
zilEDnKW2ZoFmiBOBWkBVyXIZxwBprCOao8J7iQCsZlsHZaqGWHv1WrJJPnkY7Gw
KTqx70mAee2Tf15LcbxNLXogd8qv/CZxx5pQXoDXjntAx/YgR+vxa8VVewJTDUG6
n9mUr/ffv1xIO+VYeqcAN+ukUHw9JZo0mpKxfRyl7d3fedirfoW/C69uymiwpFc=
-----END CERTIFICATE-----
Generated at Sat Mar 9 16:50:18 2024 by rpki-client on console-fra.rpki-client.org