Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/0iG1antotG3L9hXgQ1IEmT72kOA.roa
File: 0iG1antotG3L9hXgQ1IEmT72kOA.roa (raw, json)
Hash identifier: Vb3V5A3ODjutObJq934gyOupYDCYyvC/LKnKJUbtbhs=
Subject key identifier: D2:21:B5:6A:7B:68:B4:6D:CB:F6:15:E0:43:52:04:99:3E:F6:90:E0
Certificate issuer: /CN=e47521e7b6b38abfb88bf71e9bc5a02b2eccd3b3
Certificate serial: 01891E4CB45D96A5FFD365802870569199F9
Authority key identifier: E4:75:21:E7:B6:B3:8A:BF:B8:8B:F7:1E:9B:C5:A0:2B:2E:CC:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HUh57azir-4i_cem8WgKy7M07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/0iG1antotG3L9hXgQ1IEmT72kOA.roa
Signing time: Tue 04 Jul 2023 00:28:10 +0000
ROA not before: Tue 04 Jul 2023 00:28:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204248
IP address blocks: 185.109.240.0/23 maxlen: 23
185.109.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1e:4c:b4:5d:96:a5:ff:d3:65:80:28:70:56:91:99:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47521e7b6b38abfb88bf71e9bc5a02b2eccd3b3
Validity
Not Before: Jul 4 00:28:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d221b56a7b68b46dcbf615e0435204993ef690e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:fc:89:a3:2b:ed:b2:86:65:48:ba:dc:4a:
30:50:f7:ad:5e:35:f9:36:e4:1b:46:23:fa:6f:0a:
97:6f:a0:30:39:27:73:16:fb:56:cc:c6:af:ee:1d:
e2:cb:bc:4a:35:3d:9d:75:85:dd:d0:09:86:49:d9:
b4:60:d4:cf:96:e3:3f:35:8a:6e:80:c8:32:30:01:
8a:9e:c4:a4:6a:cd:13:c6:c5:a4:50:27:db:82:1c:
6f:a8:91:5f:c6:ca:a4:c3:47:ae:3b:81:c4:a0:35:
b1:11:76:37:66:02:d3:5e:2c:51:a2:80:db:98:bc:
35:57:da:8b:01:46:a3:7f:73:6e:a0:d8:be:45:9e:
87:a7:2f:f5:19:86:3d:b2:db:6b:49:d3:26:6e:91:
0c:3a:a9:97:e3:ef:3f:8f:42:da:08:4a:d0:70:e9:
f9:c0:c2:cf:0d:35:eb:c9:31:53:11:f1:a3:d0:07:
d2:6e:90:1c:16:6d:00:7c:a0:49:3a:02:25:09:47:
40:b1:a4:f2:8b:19:64:f7:dd:ab:e7:c1:43:51:ae:
16:ee:96:4e:0b:55:71:1d:91:13:3c:e8:04:ac:0c:
18:8f:d5:d1:89:dd:35:c4:12:19:84:6b:9c:14:24:
32:b0:83:93:a8:65:2a:1c:78:b7:f8:4b:32:36:cd:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:B5:6A:7B:68:B4:6D:CB:F6:15:E0:43:52:04:99:3E:F6:90:E0
X509v3 Authority Key Identifier:
keyid:E4:75:21:E7:B6:B3:8A:BF:B8:8B:F7:1E:9B:C5:A0:2B:2E:CC:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HUh57azir-4i_cem8WgKy7M07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/0iG1antotG3L9hXgQ1IEmT72kOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/5HUh57azir-4i_cem8WgKy7M07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.240.0-185.109.242.255
Signature Algorithm: sha256WithRSAEncryption
c1:68:95:b3:d0:b1:f5:70:ca:52:bb:e9:17:97:b9:57:37:3d:
40:c3:49:3f:16:34:34:15:ea:14:0f:d2:da:d4:1c:ac:a3:b8:
b9:f7:fd:82:32:8a:d1:7d:d7:1c:eb:36:e5:48:5e:96:19:ef:
c3:45:e8:bd:a7:9d:40:bd:fc:08:94:29:4b:1e:bd:e6:43:6d:
1a:fa:5a:f9:79:21:87:94:93:c2:91:0b:54:b2:17:2c:af:7b:
d6:94:6c:7d:3e:16:59:09:e2:13:25:b8:e9:fd:45:cf:68:1c:
2a:f8:c4:7d:3f:3b:be:d7:6f:48:08:a0:79:0d:44:1b:68:3b:
9c:a0:d4:df:c8:08:d0:02:1b:1a:1e:84:94:aa:46:d2:48:48:
ac:92:f4:f7:a8:9f:16:6c:52:e6:9b:59:4f:fb:37:6a:b6:0a:
8c:40:25:e9:ab:7b:70:97:94:9e:24:2e:ae:8f:bd:bc:f9:3a:
2a:0f:fd:05:e6:b4:d8:62:f7:b5:22:e1:59:bc:f0:cb:52:79:
73:62:90:25:a3:e1:42:1a:3b:10:ef:10:02:ae:60:72:fb:2d:
13:c7:e1:1f:da:f3:57:cd:06:a8:1d:40:d4:fc:84:35:ca:21:
de:d5:ff:8c:10:3d:cd:31:f0:ed:7d:3e:ee:0f:0f:8f:c9:33:
80:c4:ba:92
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYkeTLRdlqX/02WAKHBWkZn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzUyMWU3YjZiMzhhYmZiODhiZjcxZTliYzVhMDJiMmVj
Y2QzYjMwHhcNMjMwNzA0MDAyODEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjIxYjU2YTdiNjhiNDZkY2JmNjE1ZTA0MzUyMDQ5OTNlZjY5MGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6T8iaMr7bKGZUi63EowUPetXjX5
NuQbRiP6bwqXb6AwOSdzFvtWzMav7h3iy7xKNT2ddYXd0AmGSdm0YNTPluM/NYpu
gMgyMAGKnsSkas0TxsWkUCfbghxvqJFfxsqkw0euO4HEoDWxEXY3ZgLTXixRooDb
mLw1V9qLAUajf3NuoNi+RZ6Hpy/1GYY9sttrSdMmbpEMOqmX4+8/j0LaCErQcOn5
wMLPDTXryTFTEfGj0AfSbpAcFm0AfKBJOgIlCUdAsaTyixlk992r58FDUa4W7pZO
C1VxHZETPOgErAwYj9XRid01xBIZhGucFCQysIOTqGUqHHi3+EsyNs01eQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNIhtWp7aLRty/YV4ENSBJk+9pDgMB8GA1UdIwQY
MBaAFOR1Iee2s4q/uIv3HpvFoCsuzNOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhVaDU3YXppci00aV9jZW04V2dLeTdNMDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xOTEzNmUtNDI5Zi00M2FkLTk0ZWYt
ODM2MWE4MzAzNTIyLzEvMGlHMWFudG90RzNMOWhYZ1ExSUVtVDcya09BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xOTEzNmUtNDI5Zi00M2FkLTk0ZWYtODM2MWE4MzAzNTIy
LzEvNUhVaDU3YXppci00aV9jZW04V2dLeTdNMDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAS5bfAD
BAC5bfIwDQYJKoZIhvcNAQELBQADggEBAMFolbPQsfVwylK76ReXuVc3PUDDST8W
NDQV6hQP0trUHKyjuLn3/YIyitF91xzrNuVIXpYZ78NF6L2nnUC9/AiUKUseveZD
bRr6Wvl5IYeUk8KRC1SyFyyve9aUbH0+FlkJ4hMluOn9Rc9oHCr4xH0/O77Xb0gI
oHkNRBtoO5yg1N/ICNACGxoehJSqRtJISKyS9PeonxZsUuabWU/7N2q2CoxAJemr
e3CXlJ4kLq6Pvbz5OioP/QXmtNhi97Ui4Vm88MtSeXNikCWj4UIaOxDvEAKuYHL7
LRPH4R/a81fNBqgdQNT8hDXKId7V/4wQPc0x8O19Pu4PD4/JM4DEupI=
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:56 2024 by rpki-client on console-ams.rpki-client.org