Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_zSNnzwbNsgjoChUZAoTaoCdD6A.roa
File: _zSNnzwbNsgjoChUZAoTaoCdD6A.roa (raw, json)
Hash identifier: ITYfdmWTgrkMpkaxYztefWh+R/Mvu7AcxeZqMH5BpYY=
Subject key identifier: FF:34:8D:9F:3C:1B:36:C8:23:A0:28:54:64:0A:13:6A:80:9D:0F:A0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189B5AAE025D4BBB97B906E825D089FA9A0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_zSNnzwbNsgjoChUZAoTaoCdD6A.roa
Signing time: Wed 02 Aug 2023 09:53:41 +0000
ROA not before: Wed 02 Aug 2023 09:53:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 109.176.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 09:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:aa:e0:25:d4:bb:b9:7b:90:6e:82:5d:08:9f:a9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 2 09:53:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff348d9f3c1b36c823a02854640a136a809d0fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:45:9d:a5:ca:54:27:59:45:06:4e:d6:f9:
19:28:80:52:d9:f5:1c:2d:43:08:c5:ab:d6:3c:0f:
4e:15:40:82:78:7e:a4:4b:3b:31:d0:c9:a9:bd:dc:
c7:fa:00:61:7a:05:6c:19:f1:0b:aa:09:b2:ad:06:
ba:99:56:5e:bc:9c:8c:f4:3c:d9:df:57:a7:ee:c6:
52:01:fd:61:ca:85:5c:5d:25:99:32:94:1a:af:38:
9f:4a:42:ba:c8:ef:bb:68:e6:1c:88:2a:40:5e:c1:
0c:f1:ce:7c:29:8a:bf:2d:97:e3:cc:a1:61:df:7b:
e0:92:59:59:bf:70:cc:24:a8:82:e5:3e:1e:78:1a:
94:17:72:80:77:67:ef:05:c9:d8:2d:42:ea:6c:b7:
8d:a2:fb:02:ed:7f:4e:c7:d1:f8:7b:93:80:c8:13:
7e:0a:7f:06:e0:62:29:37:70:c2:dd:b6:8a:79:6c:
69:f3:c2:3f:c4:75:63:36:b3:61:03:a4:52:b1:94:
16:e0:73:53:6d:d4:4e:59:05:a0:dd:48:c3:12:4d:
04:30:8f:12:7b:08:45:d7:ad:67:ea:4f:75:cb:fd:
07:34:3b:aa:6d:f2:63:25:94:bf:a5:87:48:01:05:
1a:e4:f5:e1:a2:84:fb:d2:79:ed:63:42:28:70:30:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:34:8D:9F:3C:1B:36:C8:23:A0:28:54:64:0A:13:6A:80:9D:0F:A0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_zSNnzwbNsgjoChUZAoTaoCdD6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2d:b2:3c:e2:4e:67:76:88:77:27:e7:44:77:e8:fd:ff:5e:
3e:d8:ec:7c:26:d9:63:93:81:1e:3f:c2:f8:2e:1e:52:cb:a0:
ef:b7:48:91:7f:ce:ec:a8:8d:bd:8f:66:16:ab:45:d1:1e:59:
eb:ce:fd:96:52:71:54:2b:ee:5d:f0:b6:aa:30:f0:04:13:2f:
fb:50:a6:60:a5:8a:52:30:b1:a6:5a:b0:04:92:ef:c5:2d:a5:
ac:f8:60:0b:8a:a4:6e:d6:53:61:99:79:db:05:ed:b6:97:72:
d4:26:f0:ff:89:af:2e:6a:1e:ca:23:98:e6:b8:10:4a:fd:35:
d9:51:f4:ad:5e:6f:55:1b:de:61:7f:80:b2:eb:b3:8e:de:fe:
5d:2c:8d:7c:5c:bd:d4:43:9a:1a:fc:d3:0f:d5:6d:4e:e2:5e:
d1:0a:0b:b8:95:eb:8f:a5:6d:2f:1b:f7:31:66:83:6f:9f:f1:
0c:2d:7f:61:ce:40:1f:d4:ae:24:05:1b:db:90:db:be:9b:11:
15:aa:cc:a4:e0:fc:ab:17:66:93:d1:96:33:fe:58:cc:02:6f:
f0:27:7d:86:be:5a:72:3d:22:27:d0:20:dc:1d:36:ab:25:f4:
09:f2:93:10:bf:d4:ac:47:60:1b:f3:4b:1d:ef:89:a7:70:78:
e6:73:93:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYm1quAl1Lu5e5Bugl0In6mgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwODAyMDk1MzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjM0OGQ5ZjNjMWIzNmM4MjNhMDI4NTQ2NDBhMTM2YTgwOWQwZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox1FnaXKVCdZRQZO1vkZKIBS2fUc
LUMIxavWPA9OFUCCeH6kSzsx0MmpvdzH+gBhegVsGfELqgmyrQa6mVZevJyM9DzZ
31en7sZSAf1hyoVcXSWZMpQarzifSkK6yO+7aOYciCpAXsEM8c58KYq/LZfjzKFh
33vgkllZv3DMJKiC5T4eeBqUF3KAd2fvBcnYLULqbLeNovsC7X9Ox9H4e5OAyBN+
Cn8G4GIpN3DC3baKeWxp88I/xHVjNrNhA6RSsZQW4HNTbdROWQWg3UjDEk0EMI8S
ewhF161n6k91y/0HNDuqbfJjJZS/pYdIAQUa5PXhooT70nntY0IocDAqaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP80jZ88GzbII6AoVGQKE2qAnQ+gMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvX3pTTm56d2JOc2dqb0NoVVpBb1Rhb0NkRDZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbDeMA0G
CSqGSIb3DQEBCwUAA4IBAQBrLbI84k5ndoh3J+dEd+j9/14+2Ox8Jtljk4EeP8L4
Lh5Sy6Dvt0iRf87sqI29j2YWq0XRHlnrzv2WUnFUK+5d8LaqMPAEEy/7UKZgpYpS
MLGmWrAEku/FLaWs+GALiqRu1lNhmXnbBe22l3LUJvD/ia8uah7KI5jmuBBK/TXZ
UfStXm9VG95hf4Cy67OO3v5dLI18XL3UQ5oa/NMP1W1O4l7RCgu4leuPpW0vG/cx
ZoNvn/EMLX9hzkAf1K4kBRvbkNu+mxEVqsyk4PyrF2aT0ZYz/ljMAm/wJ32Gvlpy
PSIn0CDcHTarJfQJ8pMQv9SsR2Ab80sd74mncHjmc5Pp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org