Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/IOI8qrqQi3ezIuNv6EiT9jECm20.roa
File: IOI8qrqQi3ezIuNv6EiT9jECm20.roa (raw, json)
Hash identifier: J51Mkyq4SdgchJ/eiQSEOn/8naOof0MWs1T/QUBWiWE=
Subject key identifier: 20:E2:3C:AA:BA:90:8B:77:B3:22:E3:6F:E8:48:93:F6:31:02:9B:6D
Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial: 018DEF520D62C8A299BCC94B292FFEA67D58
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/IOI8qrqQi3ezIuNv6EiT9jECm20.roa
Signing time: Wed 28 Feb 2024 10:45:48 +0000
ROA not before: Wed 28 Feb 2024 10:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 273134
IP address blocks: 109.70.132.0/22 maxlen: 22
109.70.132.0/23 maxlen: 23
109.70.132.0/24 maxlen: 24
109.70.133.0/24 maxlen: 24
109.70.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 10:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:52:0d:62:c8:a2:99:bc:c9:4b:29:2f:fe:a6:7d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
Validity
Not Before: Feb 28 10:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20e23caaba908b77b322e36fe84893f631029b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:f3:19:d7:2f:ba:9e:c7:38:04:67:33:6a:
b8:64:7e:74:99:ac:32:f1:fc:b1:e4:7e:5f:14:6d:
38:da:52:59:ac:93:b9:b0:6b:cc:12:03:65:89:a2:
7a:dd:b2:0d:ef:2a:e9:0a:ca:fd:ff:a3:c0:43:62:
89:db:59:a6:8f:24:17:99:67:15:51:80:25:f1:82:
77:3a:02:51:3a:79:64:f6:2f:31:44:9b:18:f5:85:
31:63:11:3c:6d:a7:dc:bf:4b:16:14:06:7d:05:54:
29:ab:94:30:da:81:aa:66:f9:c7:88:5f:18:f0:02:
f3:68:3c:39:07:b6:6f:15:c7:bf:0e:ac:ab:4d:7f:
f9:70:b0:94:76:77:93:df:2c:33:f4:d5:14:68:af:
37:fe:9d:98:e0:35:8e:47:76:0c:99:40:1e:64:fb:
1b:df:77:3f:91:81:70:96:1d:f8:f8:0d:1e:f2:69:
18:e4:fc:7e:6f:5d:d1:62:4f:0d:fc:de:36:83:28:
9c:5c:90:40:db:a2:00:ef:a9:f6:f8:10:b1:5c:6b:
47:f2:3f:b0:9c:61:f5:05:8b:00:59:a2:10:16:f8:
76:66:23:0b:68:21:09:62:5f:11:df:6b:21:8f:13:
74:2a:3b:8f:74:00:07:08:55:94:a3:7b:c8:f7:ef:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:3C:AA:BA:90:8B:77:B3:22:E3:6F:E8:48:93:F6:31:02:9B:6D
X509v3 Authority Key Identifier:
keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/IOI8qrqQi3ezIuNv6EiT9jECm20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.132.0/22
Signature Algorithm: sha256WithRSAEncryption
62:42:6f:73:d8:27:7c:11:00:5f:34:34:74:a3:9d:22:3e:f6:
43:3d:2d:20:f8:45:75:4e:5e:d2:61:dc:12:2b:da:db:e8:bd:
52:5d:0b:9f:34:86:86:d6:23:92:21:7c:63:59:a4:c2:18:ce:
a6:26:27:61:49:86:a7:dc:ac:d7:06:1e:21:18:f8:09:78:17:
52:15:63:13:ef:41:5c:62:fe:88:9d:a2:14:9f:65:c5:3e:6f:
aa:cc:35:dc:bb:01:7f:27:cb:ed:10:f1:8b:eb:97:47:9c:12:
03:4c:22:c1:59:93:61:e6:47:01:3a:a7:25:74:fe:ef:2a:99:
17:3e:5c:1b:7f:6e:b3:d3:df:4a:d6:c8:ef:e0:4b:c9:c0:62:
5c:8a:5b:3a:72:2a:58:d6:45:07:0a:78:0b:5f:8e:c8:2f:2a:
2d:54:3e:a1:f0:8c:e2:c7:79:2e:80:cb:98:fa:86:64:bd:c5:
dd:49:2a:50:5e:b7:10:8c:e9:ed:e6:8e:72:53:de:0c:98:16:
5d:fe:b7:1e:b5:64:36:24:3a:67:3a:98:72:73:2f:59:ed:55:
04:9d:2f:3e:e8:3d:5b:3f:88:29:e5:61:3c:ce:d5:d7:92:db:
08:f3:3b:c4:b6:f8:d8:dd:8f:4c:10:f3:99:17:b3:37:eb:25:
a3:28:0f:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3vUg1iyKKZvMlLKS/+pn1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MjQ3Zjc3YTNhZTBhZjcxZWFjMDMyNTY0NDlmNWQyOTJj
ZmZkNzQwHhcNMjQwMjI4MTA0NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGUyM2NhYWJhOTA4Yjc3YjMyMmUzNmZlODQ4OTNmNjMxMDI5YjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwzzGdcvup7HOARnM2q4ZH50mawy
8fyx5H5fFG042lJZrJO5sGvMEgNliaJ63bIN7yrpCsr9/6PAQ2KJ21mmjyQXmWcV
UYAl8YJ3OgJROnlk9i8xRJsY9YUxYxE8bafcv0sWFAZ9BVQpq5Qw2oGqZvnHiF8Y
8ALzaDw5B7ZvFce/DqyrTX/5cLCUdneT3ywz9NUUaK83/p2Y4DWOR3YMmUAeZPsb
33c/kYFwlh34+A0e8mkY5Px+b13RYk8N/N42gyicXJBA26IA76n2+BCxXGtH8j+w
nGH1BYsAWaIQFvh2ZiMLaCEJYl8R32shjxN0KjuPdAAHCFWUo3vI9+8mnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCDiPKq6kIt3syLjb+hIk/YxApttMB8GA1UdIwQY
MBaAFDkkf3ejrgr3HqwDJWRJ9dKSz/10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYt
Y2Q2NmFkNTM0ODEyLzEvSU9JOHFycVFpM2V6SXVOdjZFaVQ5akVDbTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYtY2Q2NmFkNTM0ODEy
LzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbUaEMA0G
CSqGSIb3DQEBCwUAA4IBAQBiQm9z2Cd8EQBfNDR0o50iPvZDPS0g+EV1Tl7SYdwS
K9rb6L1SXQufNIaG1iOSIXxjWaTCGM6mJidhSYan3KzXBh4hGPgJeBdSFWMT70Fc
Yv6InaIUn2XFPm+qzDXcuwF/J8vtEPGL65dHnBIDTCLBWZNh5kcBOqcldP7vKpkX
Plwbf26z099K1sjv4EvJwGJcils6cipY1kUHCngLX47ILyotVD6h8Izix3kugMuY
+oZkvcXdSSpQXrcQjOnt5o5yU94MmBZd/rcetWQ2JDpnOphycy9Z7VUEnS8+6D1b
P4gp5WE8ztXXktsI8zvEtvjY3Y9MEPOZF7M36yWjKA/W
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:15 2024 by rpki-client on console-fra.rpki-client.org