Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/4wlyYwTtfRX4YyRrLR91lhXP0KE.roa
File: 4wlyYwTtfRX4YyRrLR91lhXP0KE.roa (raw, json)
Hash identifier: gUNp9APPYQbce78Ybk1wEUZBS+99U42jFB96mJ4uu5k=
Subject key identifier: E3:09:72:63:04:ED:7D:15:F8:63:24:6B:2D:1F:75:96:15:CF:D0:A1
Certificate issuer: /CN=7fe0b793dc3c1dd5ad640de8a49aa7ecadb30bab
Certificate serial: 01856E01FA386B214CB7274409EABB84ACAA
Authority key identifier: 7F:E0:B7:93:DC:3C:1D:D5:AD:64:0D:E8:A4:9A:A7:EC:AD:B3:0B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-C3k9w8HdWtZA3opJqn7K2zC6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/4wlyYwTtfRX4YyRrLR91lhXP0KE.roa
Signing time: Sun 01 Jan 2023 15:45:01 +0000
ROA not before: Sun 01 Jan 2023 15:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200567
IP address blocks: 192.109.223.0/24 maxlen: 24
192.109.231.0/24 maxlen: 24
192.109.239.0/24 maxlen: 24
192.109.235.0/24 maxlen: 24
2a0f:6dc0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:fa:38:6b:21:4c:b7:27:44:09:ea:bb:84:ac:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0b793dc3c1dd5ad640de8a49aa7ecadb30bab
Validity
Not Before: Jan 1 15:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e309726304ed7d15f863246b2d1f759615cfd0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:98:fb:7b:3c:4b:6e:6b:ea:7e:a0:9f:39:
52:fa:1b:f0:0a:b8:f3:31:b7:71:1f:90:9e:a2:ac:
12:b9:11:90:00:99:5c:ac:4b:c5:68:80:b5:ed:c9:
cc:8b:05:a2:9b:88:74:ad:17:da:c0:aa:55:40:b7:
39:35:ae:57:8e:23:2c:6e:4d:f4:72:56:7d:f0:fb:
d6:c2:8d:df:6b:b2:1d:dd:8f:86:3c:bc:13:18:99:
71:fc:68:08:bf:d5:21:01:51:be:22:a4:fc:89:4e:
5a:9d:b5:27:4d:7b:7d:65:4b:fd:3f:51:23:65:14:
57:41:d5:2e:56:bb:40:36:df:9f:31:bb:be:57:54:
a9:28:2c:53:68:7a:1f:ca:98:fd:f0:92:76:f3:39:
13:30:11:28:46:d6:a7:80:2c:d0:c3:8a:d8:fd:78:
b4:4a:ae:88:c6:04:32:14:3a:37:93:d8:18:f1:07:
7a:d5:9b:d6:8f:af:cc:64:b0:22:43:5d:95:6e:94:
2a:f4:7c:96:c3:3e:31:bb:2d:df:8b:3a:f7:43:db:
41:95:31:34:46:df:6f:a6:f1:ec:0b:3c:04:f6:0c:
42:9e:7a:b1:03:7f:5b:76:ff:97:e0:4d:b9:5e:7d:
9e:60:a9:d8:c7:b4:32:04:5e:86:d4:55:59:44:2f:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:09:72:63:04:ED:7D:15:F8:63:24:6B:2D:1F:75:96:15:CF:D0:A1
X509v3 Authority Key Identifier:
keyid:7F:E0:B7:93:DC:3C:1D:D5:AD:64:0D:E8:A4:9A:A7:EC:AD:B3:0B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-C3k9w8HdWtZA3opJqn7K2zC6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/4wlyYwTtfRX4YyRrLR91lhXP0KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/f-C3k9w8HdWtZA3opJqn7K2zC6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.223.0/24
192.109.231.0/24
192.109.235.0/24
192.109.239.0/24
IPv6:
2a0f:6dc0::/29
Signature Algorithm: sha256WithRSAEncryption
36:d2:2f:0b:d7:95:8a:f5:1b:6f:2c:d1:76:0c:f6:7a:1c:83:
e0:25:0a:50:fb:27:b4:ed:cf:87:56:5b:ee:c9:58:e9:68:35:
61:8e:59:1e:40:3f:13:3d:b7:64:84:2d:a0:10:b1:e7:73:cf:
1a:87:67:f2:b9:a1:82:b3:71:2e:a1:a6:6c:18:4c:fa:2e:c9:
35:f3:84:39:8f:f6:78:b1:60:54:97:63:c2:67:7e:00:32:fa:
c3:39:41:4f:ec:a2:09:00:80:1b:e0:e8:4d:25:bf:69:6e:53:
a6:bc:51:68:27:ff:e2:0b:e7:fa:a5:ac:db:6e:ef:90:3d:de:
c2:38:13:dd:f8:b8:40:4f:f3:39:7a:83:7e:b8:37:61:ba:4b:
aa:15:db:24:d6:99:8e:9c:a4:39:e5:8b:d3:be:83:56:0c:3e:
02:e1:36:a0:c6:cf:e3:0f:02:d3:a8:08:7c:e7:77:3f:78:db:
e0:f1:17:e7:24:8f:73:62:25:01:9a:3f:d7:20:d0:b6:ee:9a:
9b:9b:56:f0:13:7b:f4:19:27:63:fe:f4:0e:92:5e:41:6c:f9:
62:47:e9:1e:62:10:f4:95:1f:76:18:04:60:4e:d5:17:9b:24:
4c:d6:d2:6b:73:fa:1e:f9:15:2d:6d:f3:5f:0b:bd:9f:0d:81:
99:a9:7d:a3
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVuAfo4ayFMtydECeq7hKyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZTBiNzkzZGMzYzFkZDVhZDY0MGRlOGE0OWFhN2VjYWRi
MzBiYWIwHhcNMjMwMTAxMTU0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzA5NzI2MzA0ZWQ3ZDE1Zjg2MzI0NmIyZDFmNzU5NjE1Y2ZkMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI2Y+3s8S25r6n6gnzlS+hvwCrjz
MbdxH5CeoqwSuRGQAJlcrEvFaIC17cnMiwWim4h0rRfawKpVQLc5Na5XjiMsbk30
clZ98PvWwo3fa7Id3Y+GPLwTGJlx/GgIv9UhAVG+IqT8iU5anbUnTXt9ZUv9P1Ej
ZRRXQdUuVrtANt+fMbu+V1SpKCxTaHofypj98JJ28zkTMBEoRtangCzQw4rY/Xi0
Sq6IxgQyFDo3k9gY8Qd61ZvWj6/MZLAiQ12VbpQq9HyWwz4xuy3fizr3Q9tBlTE0
Rt9vpvHsCzwE9gxCnnqxA39bdv+X4E25Xn2eYKnYx7QyBF6G1FVZRC/73wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOMJcmME7X0V+GMkay0fdZYVz9ChMB8GA1UdIwQY
MBaAFH/gt5PcPB3VrWQN6KSap+ytswurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi1DM2s5dzhIZFd0WkEzb3BKcW43SzJ6QzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMDZjOGUtZGU2NS00NWE4LWEzZTgt
ZjczNGQ5NGYwMTljLzEvNHdseVl3VHRmUlg0WXlSckxSOTFsaFhQMEtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xMDZjOGUtZGU2NS00NWE4LWEzZTgtZjczNGQ5NGYwMTlj
LzEvZi1DM2s5dzhIZFd0WkEzb3BKcW43SzJ6QzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwG3fAwQA
wG3nAwQAwG3rAwQAwG3vMA0EAgACMAcDBQMqD23AMA0GCSqGSIb3DQEBCwUAA4IB
AQA20i8L15WK9RtvLNF2DPZ6HIPgJQpQ+ye07c+HVlvuyVjpaDVhjlkeQD8TPbdk
hC2gELHnc88ah2fyuaGCs3EuoaZsGEz6Lsk184Q5j/Z4sWBUl2PCZ34AMvrDOUFP
7KIJAIAb4OhNJb9pblOmvFFoJ//iC+f6pazbbu+QPd7COBPd+LhAT/M5eoN+uDdh
ukuqFdsk1pmOnKQ55YvTvoNWDD4C4Tagxs/jDwLTqAh853c/eNvg8RfnJI9zYiUB
mj/XINC27pqbm1bwE3v0GSdj/vQOkl5BbPliR+keYhD0lR92GARgTtUXmyRM1tJr
c/oe+RUtbfNfC72fDYGZqX2j
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:56 2024 by rpki-client on console-fra.rpki-client.org