Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/NcV0vuPWnT3IvDUQXGcqC0ZmNqU.roa
File: NcV0vuPWnT3IvDUQXGcqC0ZmNqU.roa (raw, json)
Hash identifier: ufaTa65ec6UpJDb1RtzfsQyRmGG3mp4Xv2X0rh8g8D4=
Subject key identifier: 35:C5:74:BE:E3:D6:9D:3D:C8:BC:35:10:5C:67:2A:0B:46:66:36:A5
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01856B5327CCA41B843D2B96C31380E82A67
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/NcV0vuPWnT3IvDUQXGcqC0ZmNqU.roa
Signing time: Sun 01 Jan 2023 03:14:49 +0000
ROA not before: Sun 01 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42878
IP address blocks: 109.160.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:27:cc:a4:1b:84:3d:2b:96:c3:13:80:e8:2a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 1 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35c574bee3d69d3dc8bc35105c672a0b466636a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:e8:19:0b:0b:b3:41:4a:4b:8c:86:44:63:
4a:86:eb:89:72:7e:42:02:35:b7:d9:5a:d5:e5:4e:
56:6b:a4:7f:66:e5:16:6d:d7:57:25:3c:68:32:64:
86:9d:b3:40:65:48:3d:b3:aa:11:91:9d:51:7b:8b:
b5:68:ae:b0:2c:1c:a2:eb:9d:8d:aa:82:c1:36:d6:
95:60:57:e8:e5:b4:bb:3e:39:af:62:fb:53:f0:f4:
f5:28:55:70:6c:a9:e7:4a:1f:7a:62:fd:87:a1:ed:
f1:73:ee:aa:fd:c5:cd:e6:39:87:d8:77:47:5a:29:
3b:50:87:1e:10:e5:eb:27:78:c9:98:4d:2a:e2:fe:
d3:33:0d:d2:0e:8d:4a:aa:17:97:03:cf:11:80:e1:
48:e3:1e:a8:25:1b:54:b6:ec:bc:7d:5f:fa:80:b4:
63:fa:49:a4:f2:87:0e:06:be:75:4f:dd:0a:12:9e:
21:36:18:ad:70:74:8c:9d:05:3a:87:0e:d3:0f:96:
03:62:52:ae:9d:09:42:76:20:da:90:ec:a9:b7:52:
e5:5e:e0:64:14:ef:3c:08:70:ca:9e:ca:d6:b6:d5:
40:4e:54:5a:32:c0:b4:6c:a2:65:8f:67:d7:21:54:
e6:1b:ed:08:a4:35:d6:35:20:55:63:36:1e:42:10:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C5:74:BE:E3:D6:9D:3D:C8:BC:35:10:5C:67:2A:0B:46:66:36:A5
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/NcV0vuPWnT3IvDUQXGcqC0ZmNqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.118.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b2:96:e2:ed:1c:e5:99:c3:c3:03:6c:59:50:91:d4:25:3a:
1e:aa:2f:78:d4:03:74:e4:9b:19:0e:55:0f:f7:c3:ac:76:72:
9e:a2:94:f2:79:06:12:77:07:31:ed:d6:fb:96:0d:53:f8:05:
1d:bb:53:77:5b:a7:bb:66:7b:0f:09:3f:44:ee:10:3c:24:ed:
0c:f1:c1:00:f2:51:ed:75:db:c0:7f:8f:4b:ef:9d:77:38:9d:
93:45:39:c4:95:df:04:df:0f:52:a4:64:9d:54:4e:cf:33:3e:
87:d6:cd:fd:f0:7b:1f:47:b8:a4:de:69:5b:b0:49:2c:df:25:
6f:e1:35:a8:c3:9a:a2:7a:00:a4:e1:12:7c:ec:df:8f:96:89:
c6:2f:c3:cf:2a:c6:a8:43:7c:57:79:48:c7:a2:5a:e7:3f:c0:
80:30:20:6c:db:d8:ed:c9:7b:b2:ef:16:61:cc:fd:17:07:cc:
b6:36:92:b7:84:88:8b:a4:29:f4:62:eb:c3:20:7d:36:45:05:
67:eb:82:25:b2:25:5f:3d:f7:4a:2c:c7:91:7f:a7:4d:45:af:
d8:b0:67:96:9b:f7:5f:44:12:4b:0e:5b:7d:4f:73:ff:6a:fa:
2b:fc:0f:25:8a:be:64:59:3b:04:55:2b:60:10:30:0e:ec:4d:
9b:0d:98:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrUyfMpBuEPSuWwxOA6CpnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjMwMTAxMDMxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWM1NzRiZWUzZDY5ZDNkYzhiYzM1MTA1YzY3MmEwYjQ2NjYzNmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YvoGQsLs0FKS4yGRGNKhuuJcn5C
AjW32VrV5U5Wa6R/ZuUWbddXJTxoMmSGnbNAZUg9s6oRkZ1Re4u1aK6wLByi652N
qoLBNtaVYFfo5bS7PjmvYvtT8PT1KFVwbKnnSh96Yv2Hoe3xc+6q/cXN5jmH2HdH
Wik7UIceEOXrJ3jJmE0q4v7TMw3SDo1KqheXA88RgOFI4x6oJRtUtuy8fV/6gLRj
+kmk8ocOBr51T90KEp4hNhitcHSMnQU6hw7TD5YDYlKunQlCdiDakOypt1LlXuBk
FO88CHDKnsrWttVATlRaMsC0bKJlj2fXIVTmG+0IpDXWNSBVYzYeQhA8kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDXFdL7j1p09yLw1EFxnKgtGZjalMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvTmNWMHZ1UFduVDNJdkRVUVhHY3FDMFptTnFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbaB2MA0G
CSqGSIb3DQEBCwUAA4IBAQBZspbi7RzlmcPDA2xZUJHUJToeqi941AN05JsZDlUP
98OsdnKeopTyeQYSdwcx7db7lg1T+AUdu1N3W6e7ZnsPCT9E7hA8JO0M8cEA8lHt
ddvAf49L7513OJ2TRTnEld8E3w9SpGSdVE7PMz6H1s398HsfR7ik3mlbsEks3yVv
4TWow5qiegCk4RJ87N+PlonGL8PPKsaoQ3xXeUjHolrnP8CAMCBs29jtyXuy7xZh
zP0XB8y2NpK3hIiLpCn0YuvDIH02RQVn64IlsiVfPfdKLMeRf6dNRa/YsGeWm/df
RBJLDlt9T3P/avor/A8lir5kWTsEVStgEDAO7E2bDZjY
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:42 2024 by rpki-client on console-fra.rpki-client.org