Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/JL0ya7bjpL5jv4MxkbUjJOaUWqY.roa
File: JL0ya7bjpL5jv4MxkbUjJOaUWqY.roa (raw, json)
Hash identifier: LZdaUx87I7e5b0F7FLtekgEh+Y3v8Bs2SraiP7Ginec=
Subject key identifier: 24:BD:32:6B:B6:E3:A4:BE:63:BF:83:31:91:B5:23:24:E6:94:5A:A6
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 018CD592112E4AD6CACB15C282D3FC8EBF2E
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/JL0ya7bjpL5jv4MxkbUjJOaUWqY.roa
Signing time: Thu 04 Jan 2024 17:42:48 +0000
ROA not before: Thu 04 Jan 2024 17:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202470
IP address blocks: 109.107.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 12:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:92:11:2e:4a:d6:ca:cb:15:c2:82:d3:fc:8e:bf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Jan 4 17:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24bd326bb6e3a4be63bf833191b52324e6945aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:86:16:fe:a6:60:f2:72:7e:2b:0c:4e:5b:
9b:f9:33:29:1c:8a:51:34:d4:f6:8b:af:2f:85:dd:
81:ab:d9:b6:c8:3b:ac:8d:b3:55:41:0f:de:c5:cc:
c4:01:d1:7a:7a:83:8b:77:59:49:c3:b4:cb:61:36:
40:98:0c:63:0a:b3:a3:7f:f3:ae:20:d0:4e:42:48:
25:55:7e:bb:04:04:cf:57:3a:93:d2:02:01:c5:92:
19:da:0c:89:b2:1a:51:d3:b1:f2:65:7a:2c:09:09:
03:67:c2:05:c2:be:7a:67:0c:55:0a:52:41:f7:90:
4d:d0:ca:83:c5:de:c0:5f:15:39:79:5c:a9:c1:59:
d5:e1:c3:2c:17:12:f0:49:36:71:86:0f:d9:ef:76:
94:aa:ca:b9:71:cf:6c:af:5e:45:65:b0:d7:60:a8:
51:da:02:ca:9b:fb:e7:32:41:ed:09:f5:ec:98:73:
e4:db:de:d4:5c:12:58:8a:1d:77:50:6e:4f:3a:3b:
1d:a1:cd:66:c6:c8:83:bc:af:d4:ec:f3:fe:cd:6a:
9b:84:34:59:e4:d0:3e:89:d6:e4:0f:7b:a1:ea:7f:
96:5f:3c:e0:0e:6e:81:1e:49:46:e2:24:06:a7:e1:
66:f2:64:bd:b3:35:23:24:ee:fe:ff:c8:db:d0:66:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BD:32:6B:B6:E3:A4:BE:63:BF:83:31:91:B5:23:24:E6:94:5A:A6
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/JL0ya7bjpL5jv4MxkbUjJOaUWqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.146.0/24
Signature Algorithm: sha256WithRSAEncryption
76:52:c6:5c:1c:97:83:21:bb:bd:51:c0:c7:6b:96:cc:a6:09:
30:ba:0b:9e:a5:69:12:a8:40:18:c7:ad:32:e1:1a:2f:94:b1:
9d:22:fb:07:c8:a5:a7:33:1f:65:15:c9:c2:38:0e:2c:f8:65:
f4:30:77:5b:05:8e:bc:13:76:f2:ed:a7:20:02:77:a7:b9:ba:
02:66:f4:d2:5b:dc:b8:71:d8:b3:76:50:00:6e:6b:07:d6:43:
8a:ea:d1:a5:8e:76:dc:98:71:df:98:31:99:3c:e2:13:f0:54:
2e:18:4e:f8:44:bc:a5:3a:8d:32:5f:a2:20:6f:02:d0:56:50:
9e:75:be:73:8a:75:3e:d0:71:0d:e7:f4:30:f6:6a:85:02:8b:
2c:85:14:68:55:8f:b5:da:0a:f8:1d:f0:a0:18:0f:4f:ca:69:
15:da:03:a8:43:3a:e0:57:86:42:ee:dc:a1:22:e6:16:fe:31:
d9:60:06:54:56:3d:58:93:26:00:4a:74:09:26:6e:89:39:d1:
7d:61:45:43:e6:eb:76:71:42:6a:0b:ce:cb:83:3b:fe:5d:f9:
77:35:93:17:88:3b:3f:06:78:d4:80:e4:6e:ba:d2:da:4d:f1:
e2:7b:e5:fc:ca:c1:7c:b9:e3:dd:c7:7d:b5:87:de:77:21:dd:
cf:61:61:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzVkhEuStbKyxXCgtP8jr8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh
Y2IwY2UwHhcNMjQwMTA0MTc0MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGJkMzI2YmI2ZTNhNGJlNjNiZjgzMzE5MWI1MjMyNGU2OTQ1YWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBSGFv6mYPJyfisMTlub+TMpHIpR
NNT2i68vhd2Bq9m2yDusjbNVQQ/exczEAdF6eoOLd1lJw7TLYTZAmAxjCrOjf/Ou
INBOQkglVX67BATPVzqT0gIBxZIZ2gyJshpR07HyZXosCQkDZ8IFwr56ZwxVClJB
95BN0MqDxd7AXxU5eVypwVnV4cMsFxLwSTZxhg/Z73aUqsq5cc9sr15FZbDXYKhR
2gLKm/vnMkHtCfXsmHPk297UXBJYih13UG5POjsdoc1mxsiDvK/U7PP+zWqbhDRZ
5NA+idbkD3uh6n+WXzzgDm6BHklG4iQGp+Fm8mS9szUjJO7+/8jb0GYtawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCS9Mmu246S+Y7+DMZG1IyTmlFqmMB8GA1UdIwQY
MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct
MDUwMzc0OWFkZWEwLzEvSkwweWE3YmpwTDVqdjRNeGtiVWpKT2FVV3FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw
LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuSMA0G
CSqGSIb3DQEBCwUAA4IBAQB2UsZcHJeDIbu9UcDHa5bMpgkwuguepWkSqEAYx60y
4RovlLGdIvsHyKWnMx9lFcnCOA4s+GX0MHdbBY68E3by7acgAnenuboCZvTSW9y4
cdizdlAAbmsH1kOK6tGljnbcmHHfmDGZPOIT8FQuGE74RLylOo0yX6IgbwLQVlCe
db5zinU+0HEN5/Qw9mqFAosshRRoVY+12gr4HfCgGA9PymkV2gOoQzrgV4ZC7tyh
IuYW/jHZYAZUVj1YkyYASnQJJm6JOdF9YUVD5ut2cUJqC87Lgzv+Xfl3NZMXiDs/
BnjUgORuutLaTfHie+X8ysF8uePdx321h953Id3PYWHR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:27 2024 by rpki-client on console-ams.rpki-client.org