Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qALVEUSk6bWKpaU-SZ8Jh2EMPfY.roa
File: qALVEUSk6bWKpaU-SZ8Jh2EMPfY.roa (raw, json)
Hash identifier: zP2e0yDNcSqKUsFGlhFVNU2MkLgaj1RfoP9PZu6LK/4=
Subject key identifier: A8:02:D5:11:44:A4:E9:B5:8A:A5:A5:3E:49:9F:09:87:61:0C:3D:F6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EAEB8417EE7154BEEB3635BC835309F62
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qALVEUSk6bWKpaU-SZ8Jh2EMPfY.roa
Signing time: Fri 05 Apr 2024 14:44:54 +0000
ROA not before: Fri 05 Apr 2024 14:44:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216183
IP address blocks: 109.176.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:b8:41:7e:e7:15:4b:ee:b3:63:5b:c8:35:30:9f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 5 14:44:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a802d51144a4e9b58aa5a53e499f0987610c3df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f4:c6:9b:58:0f:d1:74:4e:f8:ad:e8:2a:b0:
4c:e2:a9:f6:fc:a1:c2:dd:10:be:5f:83:4a:9e:8f:
41:44:7c:3b:da:b1:c6:d4:a9:01:4f:e6:25:87:49:
e9:a7:4f:28:48:3d:df:59:37:f2:bc:5d:26:e9:12:
96:5a:61:91:6d:da:4f:9a:f0:d6:78:6d:34:70:51:
3e:86:7a:1c:63:4e:68:6e:68:4c:7e:a9:10:ab:b0:
85:ab:f3:61:5d:d2:20:49:46:0c:d2:b4:72:45:f0:
35:cd:f6:82:97:a1:df:87:58:0a:d7:f1:c2:81:9f:
b2:ce:ef:d3:b8:50:ca:06:3b:06:a7:05:57:df:a9:
ea:da:25:ec:55:fe:ae:8f:52:95:dd:02:df:e6:af:
84:db:76:20:6b:ba:61:b1:8f:bf:a6:b8:88:67:06:
15:5a:f2:ba:3c:7c:46:b8:0a:63:b9:43:db:35:ea:
87:16:4d:19:36:5d:fb:6b:8c:22:ac:36:9f:49:35:
76:cf:51:68:2a:c7:76:c9:14:14:3a:33:41:23:f9:
df:87:dd:30:6f:46:67:e6:0d:9e:6e:11:eb:cb:c5:
64:f0:e0:81:58:69:36:94:b7:d4:e5:ea:f8:a9:d4:
80:67:38:cd:a8:7f:b8:af:a7:55:b3:b7:22:7e:a9:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:02:D5:11:44:A4:E9:B5:8A:A5:A5:3E:49:9F:09:87:61:0C:3D:F6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qALVEUSk6bWKpaU-SZ8Jh2EMPfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.245.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:af:10:0f:ba:05:42:19:22:64:e3:53:cb:33:3a:8f:69:0b:
a9:fa:14:5b:8f:c8:f1:9d:be:ef:f6:23:81:83:6f:53:22:99:
e2:61:68:ee:a1:89:0f:c3:b0:e1:43:76:06:7d:e3:d6:87:1f:
a5:96:4d:a0:5d:49:7a:e2:c4:b2:b3:83:fb:05:c4:79:1b:f1:
d3:f0:9b:72:de:81:7f:f8:0c:cf:e4:bc:f2:3f:60:ca:a8:12:
e1:46:73:3b:4c:75:f0:2b:66:b4:c7:10:f9:f0:74:04:ed:9b:
ad:4a:8d:3f:2a:90:84:a2:76:3a:a6:ab:6f:fe:15:2e:84:6e:
a0:37:5c:d7:10:aa:e5:38:d0:d9:ec:b5:45:9c:61:b6:94:fa:
4a:a9:f4:de:03:67:3b:8b:18:0b:25:c7:19:0d:5e:1e:06:1a:
a5:f7:76:b8:3e:22:64:f5:28:0c:08:53:cd:e2:8f:99:b8:6b:
a6:5b:49:80:cc:e2:6f:c1:89:7e:b5:5a:ef:7b:44:f5:67:fa:
1b:e4:3e:4b:59:f9:dd:b1:fe:57:65:ba:46:2a:58:04:b3:e9:
4d:e8:64:87:c4:43:f7:6d:5c:c3:81:aa:43:fa:0b:23:f3:59:
c3:65:77:7b:fa:bd:11:1f:f1:a6:25:bb:d1:e5:69:f6:56:3a:
2d:79:1a:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6uuEF+5xVL7rNjW8g1MJ9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNDA1MTQ0NDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODAyZDUxMTQ0YTRlOWI1OGFhNWE1M2U0OTlmMDk4NzYxMGMzZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/TGm1gP0XRO+K3oKrBM4qn2/KHC
3RC+X4NKno9BRHw72rHG1KkBT+Ylh0npp08oSD3fWTfyvF0m6RKWWmGRbdpPmvDW
eG00cFE+hnocY05obmhMfqkQq7CFq/NhXdIgSUYM0rRyRfA1zfaCl6Hfh1gK1/HC
gZ+yzu/TuFDKBjsGpwVX36nq2iXsVf6uj1KV3QLf5q+E23Yga7phsY+/priIZwYV
WvK6PHxGuApjuUPbNeqHFk0ZNl37a4wirDafSTV2z1FoKsd2yRQUOjNBI/nfh90w
b0Zn5g2ebhHry8Vk8OCBWGk2lLfU5er4qdSAZzjNqH+4r6dVs7cifqlG3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKgC1RFEpOm1iqWlPkmfCYdhDD32MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvcUFMVkVVU2s2YldLcGFVLVNaOEpoMkVNUGZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbD1MA0G
CSqGSIb3DQEBCwUAA4IBAQCqrxAPugVCGSJk41PLMzqPaQup+hRbj8jxnb7v9iOB
g29TIpniYWjuoYkPw7DhQ3YGfePWhx+llk2gXUl64sSys4P7BcR5G/HT8Jty3oF/
+AzP5LzyP2DKqBLhRnM7THXwK2a0xxD58HQE7ZutSo0/KpCEonY6pqtv/hUuhG6g
N1zXEKrlONDZ7LVFnGG2lPpKqfTeA2c7ixgLJccZDV4eBhql93a4PiJk9SgMCFPN
4o+ZuGumW0mAzOJvwYl+tVrve0T1Z/ob5D5LWfndsf5XZbpGKlgEs+lN6GSHxEP3
bVzDgapD+gsj81nDZXd7+r0RH/GmJbvR5Wn2VjoteRqC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org