Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/PFh0_VIWWKgKxJoyn9l9yz3ml1o.roa
File: PFh0_VIWWKgKxJoyn9l9yz3ml1o.roa (raw, json)
Hash identifier: MMl0xVXmLeY12E1vH7S8mwWd/wZ02SkwKazwv6uvsME=
Subject key identifier: 3C:58:74:FD:52:16:58:A8:0A:C4:9A:32:9F:D9:7D:CB:3D:E6:97:5A
Certificate issuer: /CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Certificate serial: 01856D01668B5B4E8EC9696A81CB649A0B52
Authority key identifier: F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/PFh0_VIWWKgKxJoyn9l9yz3ml1o.roa
Signing time: Sun 01 Jan 2023 11:04:46 +0000
ROA not before: Sun 01 Jan 2023 11:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202470
IP address blocks: 109.205.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:66:8b:5b:4e:8e:c9:69:6a:81:cb:64:9a:0b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Validity
Not Before: Jan 1 11:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c5874fd521658a80ac49a329fd97dcb3de6975a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:f0:ee:91:34:64:03:49:b7:6e:c1:71:25:
96:df:6d:97:3b:d5:74:b4:44:df:f8:03:0f:9c:79:
47:c6:e4:9d:06:7b:12:74:66:ff:f2:42:8b:7e:95:
9a:16:9b:d9:02:b7:bc:c8:b9:c6:7f:a9:9c:11:60:
91:e4:f9:7a:15:60:45:cf:5c:d0:d6:e6:ff:dd:ff:
55:90:8c:63:ff:26:38:55:51:4a:0d:7c:6d:de:fa:
e8:02:36:73:3e:b3:ce:c8:db:be:83:94:aa:66:fb:
b0:65:92:52:e4:95:74:8b:a1:25:d5:2a:1c:79:99:
58:3b:5c:f7:da:14:f1:93:14:a5:87:9c:b4:13:ac:
ac:e0:5d:34:41:f6:4e:62:8f:b2:2b:ec:a0:d8:e1:
7e:2f:ff:34:b6:6f:9f:0a:74:f4:9f:d0:a3:fb:d8:
66:76:39:6d:33:2e:51:c9:d1:9c:3a:0e:2a:12:e8:
bc:c9:b3:9b:73:26:64:fe:df:e9:84:08:dd:7b:44:
20:d7:5c:8a:ce:10:13:bd:5d:e0:7e:24:87:f3:56:
a6:c5:68:03:3b:7b:a5:ae:4a:a4:13:a5:e8:33:c3:
de:70:10:58:51:8a:b9:c9:b4:f2:76:75:9f:92:d5:
b0:27:0b:cf:95:61:af:ef:78:c2:1f:95:94:4d:23:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:58:74:FD:52:16:58:A8:0A:C4:9A:32:9F:D9:7D:CB:3D:E6:97:5A
X509v3 Authority Key Identifier:
keyid:F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/PFh0_VIWWKgKxJoyn9l9yz3ml1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f5:7c:63:28:6f:09:41:32:02:39:5c:5c:59:6d:63:ff:d0:
b0:f4:16:1a:33:0e:45:5b:18:fe:4f:cf:c3:58:85:6c:54:2e:
11:30:f4:32:5e:db:08:b0:d0:22:55:8e:f1:9d:25:35:70:d4:
d4:25:50:04:a4:4f:13:c3:73:82:a1:91:60:c8:a3:13:2a:cc:
41:b8:09:e2:2b:eb:f2:a5:7d:d5:8b:29:79:04:01:91:81:7e:
d3:d2:3e:31:d4:7a:b0:e6:9e:c1:54:a1:85:22:08:d4:e8:bf:
96:a5:b4:f9:80:c3:74:3a:30:c4:f3:ec:00:51:19:39:e3:79:
07:2d:c6:22:40:09:65:78:6f:b5:f2:9b:b7:c8:cd:59:b8:9f:
c7:8a:4e:68:5f:e6:ee:01:91:31:74:96:6a:68:c2:dc:0b:36:
b8:d9:6c:88:20:f4:7c:14:61:f2:8f:49:90:9e:0c:1f:2e:92:
a4:a2:ef:ee:41:8e:df:c0:d3:3c:83:02:50:77:fc:13:34:dd:
a5:d4:c9:93:44:f2:ef:33:a2:ac:5e:a8:f9:24:23:60:fe:95:
7d:8a:04:57:d1:48:8c:05:3e:d3:97:e7:84:de:12:aa:f2:9b:
a5:11:c4:17:20:48:bf:dc:3f:56:d6:05:f3:6c:bc:17:8a:f5:
16:8f:3f:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtAWaLW06OyWlqgctkmgtSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDU3ZmJlMTBlYjJhZTZlMGY4ZGM3ZWE2MmQ3MGYzMzE2
YzM1ZGIwHhcNMjMwMTAxMTEwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzU4NzRmZDUyMTY1OGE4MGFjNDlhMzI5ZmQ5N2RjYjNkZTY5NzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8Lw7pE0ZANJt27BcSWW322XO9V0
tETf+AMPnHlHxuSdBnsSdGb/8kKLfpWaFpvZAre8yLnGf6mcEWCR5Pl6FWBFz1zQ
1ub/3f9VkIxj/yY4VVFKDXxt3vroAjZzPrPOyNu+g5SqZvuwZZJS5JV0i6El1Soc
eZlYO1z32hTxkxSlh5y0E6ys4F00QfZOYo+yK+yg2OF+L/80tm+fCnT0n9Cj+9hm
djltMy5RydGcOg4qEui8ybObcyZk/t/phAjde0Qg11yKzhATvV3gfiSH81amxWgD
O3ulrkqkE6XoM8PecBBYUYq5ybTydnWfktWwJwvPlWGv73jCH5WUTSO2wQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDxYdP1SFlioCsSaMp/Zfcs95pdaMB8GA1UdIwQY
MBaAFPRFf74Q6yrm4PjcfqYtcPMxbDXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVWX3ZoRHJLdWJnLU54LXBpMXc4ekZzTmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85NDVmMGUtMjY4ZS00OTQ3LWFiYjMt
YTk0MjRkOTQ4MjUxLzEvUEZoMF9WSVdXS2dLeEpveW45bDl5ejNtbDFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85NDVmMGUtMjY4ZS00OTQ3LWFiYjMtYTk0MjRkOTQ4MjUx
LzEvOUVWX3ZoRHJLdWJnLU54LXBpMXc4ekZzTmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc2/MA0G
CSqGSIb3DQEBCwUAA4IBAQBr9XxjKG8JQTICOVxcWW1j/9Cw9BYaMw5FWxj+T8/D
WIVsVC4RMPQyXtsIsNAiVY7xnSU1cNTUJVAEpE8Tw3OCoZFgyKMTKsxBuAniK+vy
pX3Viyl5BAGRgX7T0j4x1Hqw5p7BVKGFIgjU6L+WpbT5gMN0OjDE8+wAURk543kH
LcYiQAlleG+18pu3yM1ZuJ/Hik5oX+buAZExdJZqaMLcCza42WyIIPR8FGHyj0mQ
ngwfLpKkou/uQY7fwNM8gwJQd/wTNN2l1MmTRPLvM6KsXqj5JCNg/pV9igRX0UiM
BT7Tl+eE3hKq8pulEcQXIEi/3D9W1gXzbLwXivUWjz9x
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:48 2023 by rpki-client on console-fra.rpki-client.org