Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/qU4YewZ_64RARYarmdEgbBXlI-k.roa
File: qU4YewZ_64RARYarmdEgbBXlI-k.roa (raw, json)
Hash identifier: mgjCc+6k6OEjt+BELrRMLbqjEVTf5Y8ObChrcoM2NEk=
Subject key identifier: A9:4E:18:7B:06:7F:EB:84:40:45:86:AB:99:D1:20:6C:15:E5:23:E9
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01856D940FE25371A8F3F742F9FEB7EBF3AC
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/qU4YewZ_64RARYarmdEgbBXlI-k.roa
Signing time: Sun 01 Jan 2023 13:44:58 +0000
ROA not before: Sun 01 Jan 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 109.205.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:0f:e2:53:71:a8:f3:f7:42:f9:fe:b7:eb:f3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a94e187b067feb84404586ab99d1206c15e523e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:0d:b3:59:13:a0:f9:df:24:d8:5e:c5:a5:
7a:da:35:40:44:6f:15:23:56:c5:c8:93:5a:2f:e8:
4e:ad:57:a2:0e:02:5c:4b:c9:10:eb:7d:a6:89:ec:
f6:ea:a2:1e:53:a2:96:6b:da:02:83:7f:cf:c8:74:
47:0e:a1:06:e7:23:06:cc:15:05:17:35:c2:d0:a6:
0e:18:6f:65:02:24:6b:37:ca:12:94:10:2f:3b:b5:
1b:4e:d3:9f:84:6d:1a:8e:03:0a:4d:d2:3a:04:b4:
a7:35:da:5a:15:0e:45:cb:c0:cb:a8:10:95:e5:62:
0f:13:17:95:fb:00:86:14:a4:34:c7:59:98:e2:2a:
9a:db:81:cb:39:25:e7:af:04:cf:ff:29:90:76:c7:
83:bf:b7:51:bc:72:fa:86:51:fb:48:e9:a0:be:24:
dc:38:19:05:ce:fa:72:d1:a0:53:df:18:7b:a6:3d:
3b:30:03:62:f0:4f:32:03:a0:74:fd:45:21:10:bf:
4e:ec:1d:f6:b5:04:7a:49:97:13:bf:90:51:7e:22:
3d:f3:e5:bd:8b:a4:33:96:bc:ca:ff:62:82:f0:27:
50:cb:08:71:93:91:96:44:60:ee:cf:e6:f8:9e:3c:
23:3a:75:bb:09:d3:f1:d6:0b:7c:4d:3b:80:0d:ef:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4E:18:7B:06:7F:EB:84:40:45:86:AB:99:D1:20:6C:15:E5:23:E9
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/qU4YewZ_64RARYarmdEgbBXlI-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.213.0/24
Signature Algorithm: sha256WithRSAEncryption
40:3d:bd:ee:08:87:6a:33:d1:61:e5:97:3a:f6:e9:b8:bb:f1:
86:29:25:32:c6:72:48:5e:65:f1:14:fc:e0:b5:b1:18:af:29:
b5:5f:78:93:bf:d4:ce:ce:b6:3c:b5:cf:e0:f2:ae:e8:ad:9c:
03:7c:02:cb:6f:4a:f7:a8:8f:8f:d5:cf:1e:14:02:16:fb:26:
e0:bf:2c:2a:27:e0:ee:77:e5:dc:64:0e:2e:3c:2f:65:bd:11:
b5:43:1d:69:a3:55:90:4c:ec:03:4a:bd:74:30:6d:5e:0f:07:
9e:65:ed:fa:dd:e4:b2:46:b7:42:0a:ac:d7:21:93:33:39:90:
bd:0c:5f:20:2f:64:a8:76:da:13:d9:08:2c:68:c7:55:57:39:
09:be:f2:59:dc:3f:27:52:02:31:78:56:c6:87:1e:85:87:64:
c9:17:dc:13:37:e4:bb:74:5c:b4:ee:c7:d4:1b:0c:49:e6:f7:
e3:f0:95:7d:b5:7b:92:e1:dd:a4:fa:ce:43:3f:5d:a5:cb:e6:
cc:f4:27:84:63:32:47:a2:69:bd:29:54:e8:31:90:29:f4:d6:
00:4b:f5:96:3b:cf:ed:cd:ec:71:65:63:d3:2a:9c:cb:25:8d:
e8:fc:d0:33:11:61:88:29:0a:03:e6:b0:40:0a:67:69:1d:5c:
ff:50:91:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtlA/iU3Go8/dC+f636/OsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMTAxMTM0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTRlMTg3YjA2N2ZlYjg0NDA0NTg2YWI5OWQxMjA2YzE1ZTUyM2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeINs1kToPnfJNhexaV62jVARG8V
I1bFyJNaL+hOrVeiDgJcS8kQ632miez26qIeU6KWa9oCg3/PyHRHDqEG5yMGzBUF
FzXC0KYOGG9lAiRrN8oSlBAvO7UbTtOfhG0ajgMKTdI6BLSnNdpaFQ5Fy8DLqBCV
5WIPExeV+wCGFKQ0x1mY4iqa24HLOSXnrwTP/ymQdseDv7dRvHL6hlH7SOmgviTc
OBkFzvpy0aBT3xh7pj07MANi8E8yA6B0/UUhEL9O7B32tQR6SZcTv5BRfiI98+W9
i6QzlrzK/2KC8CdQywhxk5GWRGDuz+b4njwjOnW7CdPx1gt8TTuADe9mYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKlOGHsGf+uEQEWGq5nRIGwV5SPpMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvcVU0WWV3Wl82NFJBUllhcm1kRWdiQlhsSS1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc3VMA0G
CSqGSIb3DQEBCwUAA4IBAQBAPb3uCIdqM9Fh5Zc69um4u/GGKSUyxnJIXmXxFPzg
tbEYrym1X3iTv9TOzrY8tc/g8q7orZwDfALLb0r3qI+P1c8eFAIW+ybgvywqJ+Du
d+XcZA4uPC9lvRG1Qx1po1WQTOwDSr10MG1eDweeZe363eSyRrdCCqzXIZMzOZC9
DF8gL2SodtoT2QgsaMdVVzkJvvJZ3D8nUgIxeFbGhx6Fh2TJF9wTN+S7dFy07sfU
GwxJ5vfj8JV9tXuS4d2k+s5DP12ly+bM9CeEYzJHomm9KVToMZAp9NYAS/WWO8/t
zexxZWPTKpzLJY3o/NAzEWGIKQoD5rBACmdpHVz/UJGT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:51 2023 by rpki-client on console-ams.rpki-client.org