Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/oEoU1TLJtkzaJwcn9qDAeod0a60.roa
File: oEoU1TLJtkzaJwcn9qDAeod0a60.roa (raw, json)
Hash identifier: V4yV5o9omTMOTFJDsg4u7VB/cqBfR3vnDkMgQOcJNts=
Subject key identifier: A0:4A:14:D5:32:C9:B6:4C:DA:27:07:27:F6:A0:C0:7A:87:74:6B:AD
Certificate issuer: /CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Certificate serial: 01876185F6BBA9517639435DF701F1446933
Authority key identifier: F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/oEoU1TLJtkzaJwcn9qDAeod0a60.roa
Signing time: Sat 08 Apr 2023 15:39:42 +0000
ROA not before: Sat 08 Apr 2023 15:39:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34529
IP address blocks: 109.205.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:61:85:f6:bb:a9:51:76:39:43:5d:f7:01:f1:44:69:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Validity
Not Before: Apr 8 15:39:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a04a14d532c9b64cda270727f6a0c07a87746bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:be:9d:b9:3b:ac:de:79:c5:73:4b:68:eb:
64:2c:43:0a:47:d3:a8:e6:1e:84:37:0b:26:cf:74:
65:1c:17:8e:65:00:0c:57:e1:6e:ad:22:f7:4d:a3:
99:3c:cc:c3:be:6c:e6:ea:e3:b9:f4:19:e0:21:f1:
29:20:54:6c:28:95:b2:13:7c:5e:ec:03:58:6d:1e:
c7:74:23:3b:f0:99:10:21:db:c2:15:f2:16:df:53:
0e:f4:0a:b5:ec:73:7a:d7:f1:f4:6a:7a:bf:62:ef:
30:66:e1:bf:26:4d:83:f1:9b:cd:f6:e6:c6:8e:4c:
89:ee:a7:34:68:dc:6c:a8:8f:38:61:2d:75:cc:02:
91:c5:6e:a1:51:95:8b:44:26:58:b0:0d:f2:4b:23:
5f:5e:2c:42:43:39:57:e0:14:38:2d:af:e7:3b:26:
39:af:9b:3d:47:7b:59:6d:2e:65:05:d9:9b:67:d5:
fb:11:a0:71:cf:dc:4f:cc:30:29:c5:55:29:e2:01:
ed:d0:ed:d8:bd:71:00:37:9d:18:d1:38:f6:d4:9f:
7d:67:2e:43:0d:4b:d9:7e:31:6e:e9:e7:e7:72:35:
24:a2:8b:f6:8e:a2:fb:73:88:d9:82:42:b6:f6:d3:
78:2c:d2:84:52:dc:88:d9:69:94:30:cc:1c:6e:16:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4A:14:D5:32:C9:B6:4C:DA:27:07:27:F6:A0:C0:7A:87:74:6B:AD
X509v3 Authority Key Identifier:
keyid:F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/oEoU1TLJtkzaJwcn9qDAeod0a60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.191.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d4:64:d2:fd:ec:d2:fb:de:be:01:6c:81:4a:28:cf:a2:45:
2e:2e:cc:6d:34:9c:c0:57:b6:75:e4:ef:21:a6:80:ee:f2:fc:
c4:25:56:88:5b:fc:46:60:e9:46:49:7c:6e:0a:a4:f3:50:a8:
08:f2:9c:7b:01:74:5d:69:06:95:fe:08:d0:eb:a8:d9:fc:1b:
60:f0:73:4a:c1:89:2e:69:84:cb:ab:8c:48:73:6c:1f:50:bf:
88:ef:21:4c:e0:52:ad:89:36:fe:55:98:7e:2c:36:52:ee:f5:
36:d4:bd:4c:36:d0:d5:17:2f:99:56:f8:90:0e:42:07:18:d2:
2d:f9:1a:b8:bc:39:05:5a:ad:9d:5b:9f:0c:3a:ec:3f:72:96:
b2:5d:75:cd:d7:9c:05:9f:cc:63:f1:18:f2:2a:5a:d9:65:9f:
fd:3b:d1:4e:99:ce:84:a3:c9:02:2a:84:cd:10:ce:c5:71:51:
b1:82:04:0f:b1:be:3f:ed:d8:1d:4c:b1:ba:34:b1:cf:68:34:
ee:16:63:14:a3:da:d3:38:d6:89:69:f2:00:0b:6f:67:6f:98:
31:22:43:b3:da:b2:1e:66:2a:c7:08:9b:66:ac:2e:01:e9:c4:
b6:03:bb:8b:9f:f0:90:49:bf:fb:7f:36:ef:e6:df:4f:f5:c4:
87:7e:76:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdhhfa7qVF2OUNd9wHxRGkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDU3ZmJlMTBlYjJhZTZlMGY4ZGM3ZWE2MmQ3MGYzMzE2
YzM1ZGIwHhcNMjMwNDA4MTUzOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDRhMTRkNTMyYzliNjRjZGEyNzA3MjdmNmEwYzA3YTg3NzQ2YmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMK+nbk7rN55xXNLaOtkLEMKR9Oo
5h6ENwsmz3RlHBeOZQAMV+FurSL3TaOZPMzDvmzm6uO59BngIfEpIFRsKJWyE3xe
7ANYbR7HdCM78JkQIdvCFfIW31MO9Aq17HN61/H0anq/Yu8wZuG/Jk2D8ZvN9ubG
jkyJ7qc0aNxsqI84YS11zAKRxW6hUZWLRCZYsA3ySyNfXixCQzlX4BQ4La/nOyY5
r5s9R3tZbS5lBdmbZ9X7EaBxz9xPzDApxVUp4gHt0O3YvXEAN50Y0Tj21J99Zy5D
DUvZfjFu6efncjUkoov2jqL7c4jZgkK29tN4LNKEUtyI2WmUMMwcbhZN4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKBKFNUyybZM2icHJ/agwHqHdGutMB8GA1UdIwQY
MBaAFPRFf74Q6yrm4PjcfqYtcPMxbDXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVWX3ZoRHJLdWJnLU54LXBpMXc4ekZzTmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85NDVmMGUtMjY4ZS00OTQ3LWFiYjMt
YTk0MjRkOTQ4MjUxLzEvb0VvVTFUTEp0a3phSndjbjlxREFlb2QwYTYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85NDVmMGUtMjY4ZS00OTQ3LWFiYjMtYTk0MjRkOTQ4MjUx
LzEvOUVWX3ZoRHJLdWJnLU54LXBpMXc4ekZzTmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc2/MA0G
CSqGSIb3DQEBCwUAA4IBAQCt1GTS/ezS+96+AWyBSijPokUuLsxtNJzAV7Z15O8h
poDu8vzEJVaIW/xGYOlGSXxuCqTzUKgI8px7AXRdaQaV/gjQ66jZ/Btg8HNKwYku
aYTLq4xIc2wfUL+I7yFM4FKtiTb+VZh+LDZS7vU21L1MNtDVFy+ZVviQDkIHGNIt
+Rq4vDkFWq2dW58MOuw/cpayXXXN15wFn8xj8RjyKlrZZZ/9O9FOmc6Eo8kCKoTN
EM7FcVGxggQPsb4/7dgdTLG6NLHPaDTuFmMUo9rTONaJafIAC29nb5gxIkOz2rIe
ZirHCJtmrC4B6cS2A7uLn/CQSb/7fzbv5t9P9cSHfnY3
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:38:02 2024 by rpki-client on console-fra.rpki-client.org