Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/9qMc_hdVm2KYMCJ0703m4vmZ5MA.roa
File: 9qMc_hdVm2KYMCJ0703m4vmZ5MA.roa (raw, json)
Hash identifier: +9p2cj9XMZShWVNXp25kGbvhK4Kd6BBpHmVoGCZ9IwY=
Subject key identifier: F6:A3:1C:FE:17:55:9B:62:98:30:22:74:EF:4D:E6:E2:F9:99:E4:C0
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 01856F0B68DC3D3DF152201BD33D46DE873A
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/9qMc_hdVm2KYMCJ0703m4vmZ5MA.roa
Signing time: Sun 01 Jan 2023 20:34:56 +0000
ROA not before: Sun 01 Jan 2023 20:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198974
IP address blocks: 109.236.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:68:dc:3d:3d:f1:52:20:1b:d3:3d:46:de:87:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 20:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6a31cfe17559b6298302274ef4de6e2f999e4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:22:dc:ac:11:20:20:da:9c:56:33:7d:03:
e7:21:57:29:33:37:5b:d2:77:17:a3:84:7a:77:c3:
de:1f:84:84:85:ef:2c:43:59:2d:1b:b6:62:87:00:
39:3b:f2:dd:77:b7:c0:84:d9:18:a1:b4:17:48:e0:
d0:b6:df:05:1f:b4:a3:a2:00:0d:ab:dc:95:0c:9a:
16:bd:31:4e:c5:85:18:c6:11:7f:a5:45:a9:47:32:
b5:96:d8:2a:9d:e0:84:4e:ec:57:11:ac:6a:b7:07:
b1:76:df:ca:f6:ab:c6:1b:63:96:36:f8:54:81:c6:
f5:09:86:ff:72:ec:92:9b:18:a9:2b:29:e7:a1:b9:
b0:00:04:61:85:0a:ec:79:f1:1e:f0:ba:bf:eb:21:
e1:3c:c7:d7:42:cd:1b:50:11:67:af:81:23:dd:78:
69:fe:0f:0f:6b:19:8a:62:b3:23:64:7a:19:70:7e:
c1:eb:0f:6e:04:f7:33:3f:90:bc:95:77:6c:e1:69:
cc:5b:68:5b:b4:66:da:07:05:82:69:bc:82:8d:dd:
25:94:10:55:fd:d9:1c:d5:2f:60:7c:13:ac:f7:dd:
76:07:03:de:c4:0e:9e:00:36:7e:4e:b0:67:13:f7:
25:7d:1d:61:70:87:cb:fe:40:67:d2:bc:ce:19:23:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A3:1C:FE:17:55:9B:62:98:30:22:74:EF:4D:E6:E2:F9:99:E4:C0
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/9qMc_hdVm2KYMCJ0703m4vmZ5MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.245.0/24
Signature Algorithm: sha256WithRSAEncryption
32:be:92:ff:44:e4:4d:79:c3:58:5c:c2:38:12:b5:64:a7:88:
4f:39:91:c9:a5:e7:85:bc:0c:90:8b:ef:32:a0:d8:f5:be:58:
38:16:fd:22:33:8f:bf:64:11:35:1e:d0:4f:2d:78:e4:3a:73:
1f:57:d4:5b:43:a4:05:49:f1:4b:03:2a:bc:de:da:cc:79:26:
b7:12:e5:fc:1a:26:b0:1a:7f:6c:cd:c1:75:0f:fd:e7:fd:42:
85:5d:d2:10:db:67:96:0a:65:8f:46:94:be:06:6f:fa:61:52:
98:9a:df:34:58:70:44:83:27:dc:d3:25:40:f8:8e:c2:94:bb:
e3:d9:4d:c0:0b:4d:16:6b:56:09:74:b5:e0:ed:48:0e:d0:9e:
18:20:b7:35:c4:a4:4b:8a:0e:23:b4:e1:d7:0c:33:48:10:a0:
c3:32:07:70:67:18:71:a9:23:26:7d:b9:41:10:44:ef:17:0f:
f0:a7:bd:09:dc:c9:6c:39:cb:86:38:52:11:6a:e8:eb:9a:7d:
79:07:5b:41:a4:ec:04:9e:26:95:26:e9:03:9c:5c:1a:0a:ae:
8e:60:aa:32:1d:91:da:bb:77:07:5f:43:81:04:68:af:ab:06:
d0:87:0a:fd:40:38:72:81:9f:94:e3:4e:ef:12:6e:b1:e5:19:
24:03:bb:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvC2jcPT3xUiAb0z1G3oc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4
NzU3NDgwHhcNMjMwMTAxMjAzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmEzMWNmZTE3NTU5YjYyOTgzMDIyNzRlZjRkZTZlMmY5OTllNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskUi3KwRICDanFYzfQPnIVcpMzdb
0ncXo4R6d8PeH4SEhe8sQ1ktG7ZihwA5O/Ldd7fAhNkYobQXSODQtt8FH7SjogAN
q9yVDJoWvTFOxYUYxhF/pUWpRzK1ltgqneCETuxXEaxqtwexdt/K9qvGG2OWNvhU
gcb1CYb/cuySmxipKynnobmwAARhhQrsefEe8Lq/6yHhPMfXQs0bUBFnr4Ej3Xhp
/g8PaxmKYrMjZHoZcH7B6w9uBPczP5C8lXds4WnMW2hbtGbaBwWCabyCjd0llBBV
/dkc1S9gfBOs9912BwPexA6eADZ+TrBnE/clfR1hcIfL/kBn0rzOGSOQqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPajHP4XVZtimDAidO9N5uL5meTAMB8GA1UdIwQY
MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt
N2YyMzMzNjA0OTk3LzEvOXFNY19oZFZtMktZTUNKMDcwM200dm1aNU1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3
LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbez1MA0G
CSqGSIb3DQEBCwUAA4IBAQAyvpL/RORNecNYXMI4ErVkp4hPOZHJpeeFvAyQi+8y
oNj1vlg4Fv0iM4+/ZBE1HtBPLXjkOnMfV9RbQ6QFSfFLAyq83trMeSa3EuX8Giaw
Gn9szcF1D/3n/UKFXdIQ22eWCmWPRpS+Bm/6YVKYmt80WHBEgyfc0yVA+I7ClLvj
2U3AC00Wa1YJdLXg7UgO0J4YILc1xKRLig4jtOHXDDNIEKDDMgdwZxhxqSMmfblB
EETvFw/wp70J3MlsOcuGOFIRaujrmn15B1tBpOwEniaVJukDnFwaCq6OYKoyHZHa
u3cHX0OBBGivqwbQhwr9QDhygZ+U407vEm6x5RkkA7un
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:28 2024 by rpki-client on console-ams.rpki-client.org