Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Pf5WjsHmX7rz0ZEVY3vpXDjC91s.roa
File: Pf5WjsHmX7rz0ZEVY3vpXDjC91s.roa (raw, json)
Hash identifier: A8zGP5P/xRyD1rRoMOQnQz4BI9HfY4Hp6qqlGhPtHCA=
Subject key identifier: 3D:FE:56:8E:C1:E6:5F:BA:F3:D1:91:15:63:7B:E9:5C:38:C2:F7:5B
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188074656121CE42E159079FD0E9D0B5630
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Pf5WjsHmX7rz0ZEVY3vpXDjC91s.roa
Signing time: Wed 10 May 2023 20:07:10 +0000
ROA not before: Wed 10 May 2023 20:07:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.72.114.0/24 maxlen: 24
109.72.115.0/24 maxlen: 24
89.185.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 11 May 2023 07:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:07:46:56:12:1c:e4:2e:15:90:79:fd:0e:9d:0b:56:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 10 20:07:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dfe568ec1e65fbaf3d19115637be95c38c2f75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:c9:82:1a:d2:68:8d:a0:07:00:f4:80:ce:
60:93:18:3d:81:74:0a:2e:55:f9:0e:11:61:82:b0:
17:48:10:8a:cf:b5:80:04:41:9c:0f:0c:ac:f8:e6:
c9:4e:ad:06:cc:3b:83:25:81:38:87:67:4c:79:84:
69:25:7a:51:ab:db:3b:8c:0a:af:5a:37:da:74:25:
96:9d:83:14:c7:f4:8c:5b:e3:fd:c2:ea:d6:0d:ba:
c9:00:f7:02:bd:61:4a:09:fc:4d:cb:bf:3e:49:2b:
7d:60:dc:9f:42:f5:f6:f9:66:84:59:b4:69:69:9b:
0b:e0:7f:c8:ce:3a:68:2a:47:73:e9:68:ae:02:ed:
32:db:db:8c:ca:77:30:0a:64:92:9f:0a:6a:2f:2f:
32:dc:22:cf:29:b4:65:ee:94:65:df:12:63:50:5e:
f1:de:2a:cc:b4:08:d9:96:79:49:09:03:22:34:db:
96:9b:aa:73:09:ea:f4:7b:b8:1c:15:8c:b1:3a:74:
a0:24:90:21:84:77:3d:2e:f9:79:a6:52:76:bf:26:
de:9d:1d:20:42:f6:25:8b:ca:ae:08:1b:be:20:70:
d3:42:b6:a8:5f:4e:92:56:f2:c4:a7:fa:4e:c6:69:
09:85:21:72:d4:0b:b1:1d:ad:d8:13:01:5d:22:db:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:56:8E:C1:E6:5F:BA:F3:D1:91:15:63:7B:E9:5C:38:C2:F7:5B
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Pf5WjsHmX7rz0ZEVY3vpXDjC91s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/22
109.72.114.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:7c:3c:b9:e3:07:4c:14:2d:26:d6:94:b2:af:1d:44:b7:d3:
24:8e:49:3c:16:f8:ea:58:ba:51:dc:41:04:33:e5:08:3e:1a:
7c:88:b9:79:91:59:82:f9:40:85:c1:1a:c8:46:1a:40:38:39:
ee:e3:38:99:df:0a:b3:61:7b:93:84:10:60:fe:cf:ef:41:3a:
66:6d:05:bd:a6:8c:66:b8:e6:80:58:69:2e:a6:63:1e:d4:e3:
78:68:05:32:87:97:a2:20:3a:d5:15:93:8e:3a:47:26:60:c6:
69:3e:8f:ab:a0:52:78:ae:ca:d7:d7:46:d5:4c:6f:85:d2:0f:
49:37:be:d4:03:79:90:6f:b6:cd:2a:63:e1:c8:44:89:2f:b9:
f4:6a:fb:ff:0e:18:18:c1:90:8d:90:bb:9b:33:a3:da:ca:7d:
a4:42:f3:50:db:b6:9e:f9:14:9d:85:a8:70:6d:81:a6:f9:be:
26:75:4c:66:b9:3a:fd:04:f2:a8:99:7b:c6:22:3d:6a:03:ff:
e7:ca:ed:b5:cf:09:25:25:4a:aa:29:9b:3d:29:7c:e2:5e:6c:
aa:6f:da:4b:d2:f9:d5:73:d9:06:7e:6a:9f:a3:24:bf:70:1e:
bd:ac:23:63:18:2d:ed:12:19:43:26:9e:3c:8f:95:3f:23:4b:
74:80:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org