Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/1_EfGL--LtZ5WLMklDCtZ16dsTY.roa
File: 1_EfGL--LtZ5WLMklDCtZ16dsTY.roa (raw, json)
Hash identifier: CfypuVHJcdsUkUD9D5jeaaxRPfhO6Xmo3ozJ9Llil00=
Subject key identifier: D7:F1:1F:18:BF:BE:2E:D6:79:58:B3:24:94:30:AD:67:5E:9D:B1:36
Certificate issuer: /CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Certificate serial: 01856D0165CF806E1D79DE09D91647DFA7FB
Authority key identifier: F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/1_EfGL--LtZ5WLMklDCtZ16dsTY.roa
Signing time: Sun 01 Jan 2023 11:04:46 +0000
ROA not before: Sun 01 Jan 2023 11:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 109.205.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:65:cf:80:6e:1d:79:de:09:d9:16:47:df:a7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Validity
Not Before: Jan 1 11:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7f11f18bfbe2ed67958b3249430ad675e9db136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:25:9c:f4:5c:50:23:60:8b:26:db:bc:35:ad:
0b:2a:8b:9e:c5:02:a5:3b:68:62:46:5c:56:cc:2b:
69:c7:6e:20:78:e7:d0:59:61:5d:29:ae:aa:a7:17:
00:65:38:fd:8c:a8:cc:1b:0b:75:d1:37:5e:de:cb:
09:cc:5f:e7:c8:38:09:4c:4f:ef:73:5f:eb:ee:fa:
3f:0e:81:13:b5:8c:e8:07:50:d0:4d:46:5f:fb:cc:
ac:84:37:f7:18:5b:07:fa:10:b5:f8:9b:af:54:cf:
9d:f9:2f:ac:18:b3:13:c0:a4:55:78:8e:0b:5b:5f:
42:1a:11:81:4f:63:3c:2e:43:c3:db:d5:cc:3f:78:
28:ab:cb:2c:7d:d7:bb:93:9e:06:19:a4:66:0b:35:
9c:18:96:12:9a:39:65:5d:bf:cd:5f:f7:01:ae:7f:
4f:84:c5:4b:d9:5f:85:17:50:6a:f1:50:34:65:b3:
fd:41:4e:26:d4:f6:c1:38:5a:5f:1f:eb:31:b3:f3:
da:47:06:e8:35:a4:11:94:1c:6c:dc:77:e9:8d:a4:
f3:05:da:d2:1b:ce:b2:c4:39:90:89:97:08:6e:38:
ad:e6:5f:0b:e4:14:0f:44:b2:cd:06:ed:b1:b4:88:
ce:c5:41:33:a4:a5:e4:63:83:7c:fc:52:c8:68:ff:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F1:1F:18:BF:BE:2E:D6:79:58:B3:24:94:30:AD:67:5E:9D:B1:36
X509v3 Authority Key Identifier:
keyid:F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/1_EfGL--LtZ5WLMklDCtZ16dsTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.191.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5b:b2:b3:50:34:58:e9:e0:1a:ca:95:96:da:2c:fc:f3:6c:
9e:8a:e9:f7:af:de:69:b7:4b:65:d5:0a:1a:48:04:ea:03:71:
d6:95:6a:5a:10:1b:91:01:7d:90:c5:1e:f3:50:d3:f5:7c:bc:
6d:c2:87:c6:46:01:38:82:f0:13:50:82:05:0a:4b:e6:d1:5e:
a8:73:d2:0d:5c:95:3a:23:8f:39:f4:dc:92:4f:2a:6c:4b:43:
0f:78:11:6b:79:17:81:97:54:9f:53:74:87:97:e4:a1:c1:a0:
ed:f8:05:9d:1a:93:30:9c:1c:d5:f3:fd:0e:7f:7e:34:ed:9b:
50:74:6f:ab:2d:fb:46:f9:42:c6:c3:9e:7c:2c:0e:ed:19:18:
49:93:55:d2:54:84:2b:1e:3a:cf:db:97:62:d6:45:91:09:5e:
6e:f9:7e:aa:e1:1d:b0:ea:03:f2:cf:85:d8:83:85:ed:d5:9b:
c1:d2:79:45:b0:00:58:de:d1:b0:32:af:52:4d:b0:f7:27:dd:
7a:8c:bd:c1:00:1e:ed:27:3e:19:df:8a:35:be:7e:5f:57:56:
60:28:40:7c:ad:02:ab:4e:64:31:a1:39:4e:96:68:eb:c1:21:
b5:f1:fd:f6:1d:d1:f6:02:cb:1f:38:84:d2:fb:af:1e:a4:47:
fb:f7:00:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtAWXPgG4ded4J2RZH36f7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDU3ZmJlMTBlYjJhZTZlMGY4ZGM3ZWE2MmQ3MGYzMzE2
YzM1ZGIwHhcNMjMwMTAxMTEwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2YxMWYxOGJmYmUyZWQ2Nzk1OGIzMjQ5NDMwYWQ2NzVlOWRiMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyWc9FxQI2CLJtu8Na0LKouexQKl
O2hiRlxWzCtpx24geOfQWWFdKa6qpxcAZTj9jKjMGwt10Tde3ssJzF/nyDgJTE/v
c1/r7vo/DoETtYzoB1DQTUZf+8yshDf3GFsH+hC1+JuvVM+d+S+sGLMTwKRVeI4L
W19CGhGBT2M8LkPD29XMP3goq8ssfde7k54GGaRmCzWcGJYSmjllXb/NX/cBrn9P
hMVL2V+FF1Bq8VA0ZbP9QU4m1PbBOFpfH+sxs/PaRwboNaQRlBxs3HfpjaTzBdrS
G86yxDmQiZcIbjit5l8L5BQPRLLNBu2xtIjOxUEzpKXkY4N8/FLIaP9JPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNfxHxi/vi7WeVizJJQwrWdenbE2MB8GA1UdIwQY
MBaAFPRFf74Q6yrm4PjcfqYtcPMxbDXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVWX3ZoRHJLdWJnLU54LXBpMXc4ekZzTmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85NDVmMGUtMjY4ZS00OTQ3LWFiYjMt
YTk0MjRkOTQ4MjUxLzEvMV9FZkdMLS1MdFo1V0xNa2xEQ3RaMTZkc1RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85NDVmMGUtMjY4ZS00OTQ3LWFiYjMtYTk0MjRkOTQ4MjUx
LzEvOUVWX3ZoRHJLdWJnLU54LXBpMXc4ekZzTmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc2/MA0G
CSqGSIb3DQEBCwUAA4IBAQA1W7KzUDRY6eAaypWW2iz882yeiun3r95pt0tl1Qoa
SATqA3HWlWpaEBuRAX2QxR7zUNP1fLxtwofGRgE4gvATUIIFCkvm0V6oc9INXJU6
I4859NySTypsS0MPeBFreReBl1SfU3SHl+ShwaDt+AWdGpMwnBzV8/0Of3407ZtQ
dG+rLftG+ULGw558LA7tGRhJk1XSVIQrHjrP25di1kWRCV5u+X6q4R2w6gPyz4XY
g4Xt1ZvB0nlFsABY3tGwMq9STbD3J916jL3BAB7tJz4Z34o1vn5fV1ZgKEB8rQKr
TmQxoTlOlmjrwSG18f32HdH2AssfOITS+68epEf79wDJ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:48 2023 by rpki-client on console-fra.rpki-client.org