Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U-01Vf73XXdpSPY5C9D1-Cir_K0.roa
File: U-01Vf73XXdpSPY5C9D1-Cir_K0.roa (raw, json)
Hash identifier: SgydWZAb+cWrw8ncE+MDlcZmSm+z+3Vx72Oh5p+aq8k=
Subject key identifier: 53:ED:35:55:FE:F7:5D:77:69:48:F6:39:0B:D0:F5:F8:28:AB:FC:AD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187D59766580E7F344B099D596B4088F42C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U-01Vf73XXdpSPY5C9D1-Cir_K0.roa
Signing time: Mon 01 May 2023 04:34:41 +0000
ROA not before: Mon 01 May 2023 04:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46308
IP address blocks: 109.206.242.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 May 2023 20:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d5:97:66:58:0e:7f:34:4b:09:9d:59:6b:40:88:f4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 1 04:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53ed3555fef75d776948f6390bd0f5f828abfcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:a0:67:19:71:52:1e:37:c9:f0:6e:8b:e9:
ef:56:40:88:16:a2:38:fb:4f:01:f6:c9:0e:a5:95:
42:05:a1:13:23:c2:7e:ed:55:4c:86:8c:37:f9:4b:
96:a6:cb:03:4f:28:ad:a4:10:4e:b0:4a:e6:7a:27:
4b:c9:a4:75:4d:37:c1:ff:21:82:66:1b:44:bf:1f:
f8:4d:73:8f:c6:2d:26:b0:ea:cc:6b:c0:5a:01:02:
c8:12:c5:cf:dd:48:e0:0b:bd:06:0f:2e:c6:18:6d:
c1:c3:5e:6d:c8:e2:de:d2:e0:7d:94:30:51:bf:52:
15:a8:44:e5:10:47:79:ac:a6:8e:9a:c0:c2:e4:ad:
43:16:25:3b:cf:25:c3:a4:2c:38:54:1f:cb:69:69:
f1:0c:1a:e6:ab:cb:a4:d6:23:27:26:5c:70:56:8f:
85:a2:5e:be:32:45:2a:a2:12:27:ba:2b:91:72:d8:
5f:3c:2a:05:bd:1f:e4:16:26:f9:8e:36:68:d8:2b:
59:7f:c7:4b:c8:f4:dd:fd:b1:d9:48:d3:36:48:77:
d9:96:ad:b3:2f:9a:48:77:39:b6:db:9b:71:1c:22:
9a:b9:d9:89:84:40:96:c8:f9:d6:2f:0c:0f:f8:71:
01:ae:bc:27:93:3d:6c:3c:53:13:fe:55:76:64:57:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:35:55:FE:F7:5D:77:69:48:F6:39:0B:D0:F5:F8:28:AB:FC:AD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U-01Vf73XXdpSPY5C9D1-Cir_K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.242.0/24
185.246.222.0/24
185.252.179.0/24
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:02:31:a9:e1:e4:08:b0:db:7e:51:ed:cf:1d:5e:7b:e1:4f:
ab:95:fe:25:c9:6a:20:fa:55:d2:2c:05:79:5b:37:3e:ec:b8:
ef:6e:46:61:65:8a:bd:8f:90:2d:97:03:10:97:1b:4f:64:62:
44:e3:d8:70:5f:4c:03:78:f5:7e:b1:fd:1a:74:00:63:f1:74:
26:a7:78:f4:c8:2c:0d:5b:5f:0c:41:f2:cb:31:9d:9b:ff:0b:
8a:0c:28:4c:e0:ca:bd:a6:71:12:e5:eb:97:c4:32:5b:22:6d:
cc:9a:75:bd:34:13:1b:8a:a1:08:08:e2:35:86:e4:32:39:27:
6d:d4:f1:46:ad:69:66:e8:53:e1:0c:68:92:5e:5b:3d:19:9c:
8b:c3:24:6e:7a:84:7a:eb:64:c4:42:ab:eb:64:f0:99:8d:f6:
83:ef:c9:6d:4f:7e:74:39:b2:07:1f:f7:27:a4:df:ba:5d:51:
9f:74:42:a6:ef:81:ae:77:47:f1:4e:f4:93:10:c9:a7:6f:c4:
31:f2:86:2a:51:0d:8c:3f:b6:a9:ca:65:32:31:c2:3e:f5:76:
90:38:fc:8c:78:63:81:5a:8c:bf:e7:06:3a:0d:b9:c2:60:1e:
58:fb:99:4f:e4:46:40:70:1c:d3:a3:d7:d7:e0:d2:6c:94:ec:
2e:97:ef:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:34 2024 by rpki-client on console-ams.rpki-client.org