Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/3xGSjtrWBHlFV7PW0ZcRN7W4mHw.roa
File: 3xGSjtrWBHlFV7PW0ZcRN7W4mHw.roa (raw, json)
Hash identifier: vMoUCmooHj7Uan2Lpy2Lcea41JBC/E3EXIdsqF5ucEs=
Subject key identifier: DF:11:92:8E:DA:D6:04:79:45:57:B3:D6:D1:97:11:37:B5:B8:98:7C
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 0185715E6BFBBF7D14B9D5BFB83F45AFC39E
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/3xGSjtrWBHlFV7PW0ZcRN7W4mHw.roa
Signing time: Mon 02 Jan 2023 07:24:51 +0000
ROA not before: Mon 02 Jan 2023 07:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47872
IP address blocks: 109.121.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:6b:fb:bf:7d:14:b9:d5:bf:b8:3f:45:af:c3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 07:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df11928edad604794557b3d6d1971137b5b8987c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:bb:21:96:b5:77:64:f7:9b:a9:29:8f:0d:
42:e5:fc:40:f0:21:d4:73:05:ad:e2:41:4d:e0:f4:
09:eb:06:21:67:46:78:02:14:7e:bc:0e:0d:57:ce:
6b:cc:14:e3:10:81:9d:a7:0c:a1:22:c6:1e:cd:c3:
63:f8:3b:94:58:13:66:8b:26:85:fd:ef:ac:76:78:
9a:b6:07:0a:29:95:0f:c0:10:10:95:e4:db:e9:75:
3b:2d:91:36:85:fb:6e:d5:91:b7:12:34:f2:e8:45:
20:57:9b:8c:8a:2e:ea:47:f9:88:3f:d3:5a:8a:46:
1f:7a:4d:7a:0e:e3:4f:3b:7f:2d:00:79:bb:01:42:
07:60:b9:89:22:92:e3:61:a2:73:a6:f5:a1:43:1e:
f2:19:31:c9:a8:1a:5c:03:7c:ac:45:08:e6:42:70:
91:4a:9b:06:0c:5b:a6:92:f8:b7:8d:32:8b:08:2c:
69:7d:93:cf:a2:88:29:ea:ee:bc:7b:3b:7e:c3:ba:
e3:7b:32:04:ad:f3:89:51:a8:37:29:98:14:81:cc:
6f:18:bb:6a:8f:6e:87:81:f9:fc:c0:14:81:1b:1c:
5e:32:7e:a2:a5:dd:e7:69:68:e5:2c:bd:87:ae:d9:
d6:a0:c7:64:b7:c9:19:32:84:6b:48:f7:f3:32:59:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:11:92:8E:DA:D6:04:79:45:57:B3:D6:D1:97:11:37:B5:B8:98:7C
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/3xGSjtrWBHlFV7PW0ZcRN7W4mHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.152.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ed:1d:3e:b4:1a:e5:b0:af:80:bf:85:c9:80:b9:76:3d:f0:
80:34:ec:b3:33:9c:76:92:fc:89:56:68:b2:98:07:0e:76:b2:
59:03:5c:36:11:95:41:67:4c:07:1a:89:29:62:92:32:69:ba:
d3:96:4b:63:72:eb:48:6f:27:09:57:db:a0:e8:91:72:5f:7b:
0b:1c:e8:99:be:69:ab:fc:2d:54:1c:26:90:50:1f:cc:97:02:
12:a6:9a:5d:b2:57:eb:96:95:12:1b:8a:c3:97:8a:23:5b:20:
6e:2f:ed:c8:64:53:05:9a:37:25:fb:13:85:7d:72:0e:91:c9:
9b:c6:45:4f:b7:97:42:f9:1e:72:55:bc:e6:36:3a:2f:f2:06:
e7:1c:d4:19:7b:fc:fa:d3:d2:ec:8c:de:dc:1b:42:cc:ec:f0:
45:a2:d7:11:59:bb:e8:2f:69:9a:ea:d7:55:7b:f7:d1:05:36:
d1:f4:d5:ee:a5:32:73:4e:7d:58:3b:b1:07:32:a4:81:8d:ed:
f4:04:21:e7:02:54:d0:41:71:67:7d:1a:43:55:0f:7f:39:11:
cb:94:63:c3:d0:dc:18:d6:bc:96:d2:6b:c7:38:4b:06:2a:4c:
d4:39:f6:23:e2:a0:40:45:b1:a1:01:fc:56:40:b3:aa:66:5b:
64:04:dc:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxXmv7v30UudW/uD9Fr8OeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz
YjcxYzUwHhcNMjMwMTAyMDcyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjExOTI4ZWRhZDYwNDc5NDU1N2IzZDZkMTk3MTEzN2I1Yjg5ODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur+7IZa1d2T3m6kpjw1C5fxA8CHU
cwWt4kFN4PQJ6wYhZ0Z4AhR+vA4NV85rzBTjEIGdpwyhIsYezcNj+DuUWBNmiyaF
/e+sdniatgcKKZUPwBAQleTb6XU7LZE2hftu1ZG3EjTy6EUgV5uMii7qR/mIP9Na
ikYfek16DuNPO38tAHm7AUIHYLmJIpLjYaJzpvWhQx7yGTHJqBpcA3ysRQjmQnCR
SpsGDFumkvi3jTKLCCxpfZPPoogp6u68ezt+w7rjezIErfOJUag3KZgUgcxvGLtq
j26Hgfn8wBSBGxxeMn6ipd3naWjlLL2HrtnWoMdkt8kZMoRrSPfzMlntzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN8Rko7a1gR5RVez1tGXETe1uJh8MB8GA1UdIwQY
MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt
MWQ1ZDk0NWEwNWEzLzEvM3hHU2p0cldCSGxGVjdQVzBaY1JON1c0bUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz
LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmYMA0G
CSqGSIb3DQEBCwUAA4IBAQBS7R0+tBrlsK+Av4XJgLl2PfCANOyzM5x2kvyJVmiy
mAcOdrJZA1w2EZVBZ0wHGokpYpIyabrTlktjcutIbycJV9ug6JFyX3sLHOiZvmmr
/C1UHCaQUB/MlwISpppdslfrlpUSG4rDl4ojWyBuL+3IZFMFmjcl+xOFfXIOkcmb
xkVPt5dC+R5yVbzmNjov8gbnHNQZe/z609LsjN7cG0LM7PBFotcRWbvoL2ma6tdV
e/fRBTbR9NXupTJzTn1YO7EHMqSBje30BCHnAlTQQXFnfRpDVQ9/ORHLlGPD0NwY
1ryW0mvHOEsGKkzUOfYj4qBARbGhAfxWQLOqZltkBNwS
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:15 2024 by rpki-client on console-ams.rpki-client.org