Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6aoYeGFUpqtNhiCOEDqlqvrlX6Q.roa
File: 6aoYeGFUpqtNhiCOEDqlqvrlX6Q.roa (raw, json)
Hash identifier: 6iXicOGYh/+zQ8AVoxsG7aYde4LnSs2GOnspFYgHqV0=
Subject key identifier: E9:AA:18:78:61:54:A6:AB:4D:86:20:8E:10:3A:A5:AA:FA:E5:5F:A4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019074518AA83088E74D09E6122CA8E4E8D4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6aoYeGFUpqtNhiCOEDqlqvrlX6Q.roa
Signing time: Tue 02 Jul 2024 16:40:19 +0000
ROA not before: Tue 02 Jul 2024 16:40:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211318
IP address blocks: 109.176.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 20:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:74:51:8a:a8:30:88:e7:4d:09:e6:12:2c:a8:e4:e8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 2 16:40:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9aa18786154a6ab4d86208e103aa5aafae55fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bc:2a:d3:1d:92:83:a1:f4:4d:79:b9:45:2b:
c0:1f:ea:2b:72:e6:c7:8c:6d:eb:57:42:73:3a:b6:
6b:a0:9f:d9:5e:c2:ec:48:50:23:67:53:4e:d1:79:
d0:5c:22:89:bc:c9:00:f9:0b:b8:de:e8:c3:de:d9:
2f:7e:25:ce:55:db:8f:3b:8d:6d:af:03:b3:1b:96:
ae:ab:77:62:fb:2f:57:02:04:2a:1a:f0:5b:e6:84:
c2:72:a9:16:90:c2:72:77:36:82:60:7d:c3:91:5f:
d2:1e:ce:a3:90:10:16:19:38:b6:6e:43:74:5d:50:
44:65:16:f3:83:63:cc:70:e0:66:36:08:40:5e:4d:
eb:1d:5f:81:e4:bd:4e:43:65:5a:47:43:f8:88:12:
d7:2f:ef:71:c0:f5:69:aa:f2:f2:bc:d6:98:72:e0:
88:a0:7f:85:86:5d:9c:4c:b9:1b:24:8c:c2:df:95:
23:77:fb:55:ca:13:e4:41:1d:a5:b4:22:de:6a:79:
2b:8b:77:15:ea:57:c8:49:01:99:08:e3:26:56:9d:
22:85:88:85:ac:6d:1f:6e:f1:5f:a9:1a:3f:ec:4f:
34:33:bf:37:38:b8:4a:9b:07:05:e9:f9:ab:da:5c:
1e:a6:81:bb:f8:47:d4:17:12:87:be:4b:b1:f0:a5:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AA:18:78:61:54:A6:AB:4D:86:20:8E:10:3A:A5:AA:FA:E5:5F:A4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6aoYeGFUpqtNhiCOEDqlqvrlX6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7c:aa:e4:1d:0f:71:a2:03:83:4b:d4:35:4e:e0:0b:1b:8e:
1b:09:38:de:65:ce:24:f5:ee:3b:33:ec:ad:e3:27:04:6a:2e:
a0:ac:a3:d3:6a:df:d0:a1:4e:dc:80:4a:2d:df:32:8b:a9:77:
c8:03:a6:da:b5:b3:fb:e4:da:fb:ea:34:01:27:43:cd:62:79:
cb:64:a2:64:72:4d:98:c1:02:eb:33:13:a5:2d:73:f1:15:86:
dc:13:a2:df:b9:45:0c:1a:6d:72:24:89:ff:3f:10:6f:f9:3a:
fa:ad:bd:9c:f7:39:c3:8f:86:f8:46:56:1a:52:7c:c4:1d:62:
12:9f:d6:47:34:28:d6:ec:d3:ee:a0:fa:31:c3:6f:82:d5:ce:
a6:6f:8e:9f:e1:09:7e:46:52:d9:0a:e8:61:d3:fc:9f:a1:45:
64:cd:8b:29:bb:c7:fc:95:b0:f5:c7:cc:1b:6b:be:1f:78:94:
ee:f1:e9:50:2f:fa:42:33:ed:30:0d:2e:1c:07:0a:77:95:8d:
8e:d9:64:f7:3a:9b:fc:a7:f6:e4:a9:ff:70:07:72:8f:65:8c:
28:b7:25:1c:c5:f2:6d:37:3d:d0:f4:d9:4e:9f:ec:62:af:c5:
43:7f:c0:71:d7:b0:83:ee:4f:84:fa:90:94:14:94:bb:32:19:
1c:31:25:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZB0UYqoMIjnTQnmEiyo5OjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNzAyMTY0MDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWFhMTg3ODYxNTRhNmFiNGQ4NjIwOGUxMDNhYTVhYWZhZTU1ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rwq0x2Sg6H0TXm5RSvAH+orcubH
jG3rV0JzOrZroJ/ZXsLsSFAjZ1NO0XnQXCKJvMkA+Qu43ujD3tkvfiXOVduPO41t
rwOzG5auq3di+y9XAgQqGvBb5oTCcqkWkMJydzaCYH3DkV/SHs6jkBAWGTi2bkN0
XVBEZRbzg2PMcOBmNghAXk3rHV+B5L1OQ2VaR0P4iBLXL+9xwPVpqvLyvNaYcuCI
oH+Fhl2cTLkbJIzC35Ujd/tVyhPkQR2ltCLeankri3cV6lfISQGZCOMmVp0ihYiF
rG0fbvFfqRo/7E80M783OLhKmwcF6fmr2lwepoG7+EfUFxKHvkux8KW1EwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOmqGHhhVKarTYYgjhA6par65V+kMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvNmFvWWVHRlVwcXROaGlDT0VEcWxxdnJsWDZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbD9MA0G
CSqGSIb3DQEBCwUAA4IBAQB3fKrkHQ9xogODS9Q1TuALG44bCTjeZc4k9e47M+yt
4ycEai6grKPTat/QoU7cgEot3zKLqXfIA6batbP75Nr76jQBJ0PNYnnLZKJkck2Y
wQLrMxOlLXPxFYbcE6LfuUUMGm1yJIn/PxBv+Tr6rb2c9znDj4b4RlYaUnzEHWIS
n9ZHNCjW7NPuoPoxw2+C1c6mb46f4Ql+RlLZCuhh0/yfoUVkzYspu8f8lbD1x8wb
a74feJTu8elQL/pCM+0wDS4cBwp3lY2O2WT3Opv8p/bkqf9wB3KPZYwotyUcxfJt
Nz3Q9NlOn+xir8VDf8Bx17CD7k+E+pCUFJS7MhkcMSUg
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:20:09 2025 by rpki-client