Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/dvr7COeXF_-ROOYvhynK8L-s9rk.roa
File: dvr7COeXF_-ROOYvhynK8L-s9rk.roa (raw, json)
Hash identifier: 7vh0603BpMWg1qTXmkq3z6Hz/s6PYCoYi1mTnk4Z9wQ=
Subject key identifier: 76:FA:FB:08:E7:97:17:FF:91:38:E6:2F:87:29:CA:F0:BF:AC:F6:B9
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 019045442E39EFBBD6040FCC0AF302F59F49
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/dvr7COeXF_-ROOYvhynK8L-s9rk.roa
Signing time: Sun 23 Jun 2024 13:23:34 +0000
ROA not before: Sun 23 Jun 2024 13:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35372
IP address blocks: 109.95.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 20:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:44:2e:39:ef:bb:d6:04:0f:cc:0a:f3:02:f5:9f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jun 23 13:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76fafb08e79717ff9138e62f8729caf0bfacf6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:62:10:9f:12:c4:fb:dd:9f:d3:94:39:4c:
ca:9d:68:31:1d:45:36:c9:c5:02:f9:3d:5a:22:f1:
4a:dd:60:3b:d5:a1:da:ae:fd:dd:59:ef:eb:76:9e:
39:15:49:5b:93:49:7f:bf:5b:46:7d:17:51:7d:03:
7b:61:97:53:c4:a3:2d:f8:fb:99:e1:3b:f8:bf:94:
34:d4:38:98:7b:0b:15:9d:15:5b:af:95:5f:86:51:
f7:13:d3:73:e5:6c:6a:11:be:39:c0:b3:aa:e6:53:
80:4e:39:5c:19:ec:98:b7:c0:f9:c0:91:ea:67:b7:
65:51:d8:dc:43:ce:72:87:a1:ef:ce:c7:dc:55:6d:
8d:0f:91:ac:3c:19:59:e9:bd:2a:e5:47:32:6a:81:
5b:57:c7:e4:ec:39:8a:9a:74:1d:06:dd:0e:a4:91:
29:5f:61:99:a0:78:37:3d:39:2d:2f:fc:80:b5:09:
f3:db:27:fa:f5:f3:d9:03:69:ae:e7:9b:5e:42:af:
b3:36:08:21:3c:70:f4:e8:c0:ba:d0:35:37:e7:df:
82:52:e7:8f:b4:1e:ac:f4:da:40:a2:d8:eb:1a:4d:
5e:a0:77:ad:0e:a6:9e:49:f7:8b:97:67:f2:e1:b5:
e8:c5:81:83:eb:73:a0:c5:a9:17:e8:c9:d5:d6:55:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FA:FB:08:E7:97:17:FF:91:38:E6:2F:87:29:CA:F0:BF:AC:F6:B9
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/dvr7COeXF_-ROOYvhynK8L-s9rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.65.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3d:3f:5a:8c:89:91:1d:3b:79:eb:1d:be:19:4f:2e:e9:24:
b9:5d:79:cd:9f:74:fc:b0:35:8e:ec:e8:0a:35:14:7d:fc:36:
63:e3:f6:c3:1a:30:e1:f3:3b:a1:72:5a:a5:89:cf:5a:7b:09:
15:f3:09:b2:27:0e:2f:f2:be:72:29:9f:92:de:3f:1b:ff:25:
ad:40:9f:31:7e:73:f5:e1:5f:03:5d:73:af:20:d6:58:44:96:
3c:12:3f:5e:21:fe:6e:6b:e1:12:71:e8:f3:48:6b:a2:d1:3d:
02:5d:e1:23:60:17:a0:70:e3:73:f5:c7:ef:d8:fa:8d:67:70:
6e:28:3f:ab:de:4d:8e:3c:18:ee:c0:1b:1a:bb:55:6c:9c:7d:
e7:82:d2:c8:a3:e2:92:78:fb:c6:cd:37:fe:3d:2a:d1:db:81:
4b:73:46:bd:5b:4f:7f:8b:a9:a6:8b:e7:93:2d:e2:2d:98:80:
09:a2:d3:92:12:87:6f:21:9c:97:21:10:01:6d:e7:cd:53:1b:
51:d8:b4:cf:68:0c:ec:f1:9d:14:2d:38:48:63:63:72:13:26:
a5:ad:5b:17:8c:21:a0:71:f8:2c:a4:83:a4:32:1b:44:ca:23:
10:33:ee:99:42:00:d6:20:03:c1:9b:ac:a7:5b:78:a4:c8:ce:
93:f9:c9:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBFRC4577vWBA/MCvMC9Z9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZWJkNGY3YWMzZDI0OTIwZGUxYzFmZjExODVkOTUwN2U5
YWQwNzgwHhcNMjQwNjIzMTMyMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmZhZmIwOGU3OTcxN2ZmOTEzOGU2MmY4NzI5Y2FmMGJmYWNmNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdtiEJ8SxPvdn9OUOUzKnWgxHUU2
ycUC+T1aIvFK3WA71aHarv3dWe/rdp45FUlbk0l/v1tGfRdRfQN7YZdTxKMt+PuZ
4Tv4v5Q01DiYewsVnRVbr5VfhlH3E9Nz5WxqEb45wLOq5lOATjlcGeyYt8D5wJHq
Z7dlUdjcQ85yh6HvzsfcVW2ND5GsPBlZ6b0q5UcyaoFbV8fk7DmKmnQdBt0OpJEp
X2GZoHg3PTktL/yAtQnz2yf69fPZA2mu55teQq+zNgghPHD06MC60DU359+CUueP
tB6s9NpAotjrGk1eoHetDqaeSfeLl2fy4bXoxYGD63OgxakX6MnV1lWrWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHb6+wjnlxf/kTjmL4cpyvC/rPa5MB8GA1UdIwQY
MBaAFGDr1PesPSSSDeHB/xGF2VB+mtB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgt
ODdkM2IwMjNkOTE5LzEvZHZyN0NPZVhGXy1ST09Zdmh5bks4TC1zOXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgtODdkM2IwMjNkOTE5
LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbV9BMA0G
CSqGSIb3DQEBCwUAA4IBAQBFPT9ajImRHTt56x2+GU8u6SS5XXnNn3T8sDWO7OgK
NRR9/DZj4/bDGjDh8zuhclqlic9aewkV8wmyJw4v8r5yKZ+S3j8b/yWtQJ8xfnP1
4V8DXXOvINZYRJY8Ej9eIf5ua+EScejzSGui0T0CXeEjYBegcONz9cfv2PqNZ3Bu
KD+r3k2OPBjuwBsau1VsnH3ngtLIo+KSePvGzTf+PSrR24FLc0a9W09/i6mmi+eT
LeItmIAJotOSEodvIZyXIRABbefNUxtR2LTPaAzs8Z0ULThIY2NyEyalrVsXjCGg
cfgspIOkMhtEyiMQM+6ZQgDWIAPBm6ynW3ikyM6T+cmR
-----END CERTIFICATE-----
Generated at Thu Jun 27 00:22:48 2024 by rpki-client on console-ams.rpki-client.org