Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/a00-jKik_P4L6vt2WrfcMmqQI38.roa
File: a00-jKik_P4L6vt2WrfcMmqQI38.roa (raw, json)
Hash identifier: t7pZYKFIg+4I6A/7lf68KkTgCQjgAJovLKndzW0/bzA=
Subject key identifier: 6B:4D:3E:8C:A8:A4:FC:FE:0B:EA:FB:76:5A:B7:DC:32:6A:90:23:7F
Certificate issuer: /CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Certificate serial: 01856C1C7638AC5AD2FC565C180DB6ADB2D0
Authority key identifier: 4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/a00-jKik_P4L6vt2WrfcMmqQI38.roa
Signing time: Sun 01 Jan 2023 06:54:42 +0000
ROA not before: Sun 01 Jan 2023 06:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35032
IP address blocks: 109.124.224.0/21 maxlen: 21
109.124.232.0/21 maxlen: 21
109.124.240.0/21 maxlen: 21
109.124.252.0/23 maxlen: 23
109.124.248.0/22 maxlen: 22
109.124.254.0/23 maxlen: 23
85.236.160.0/20 maxlen: 20
185.224.8.0/22 maxlen: 22
85.236.176.0/20 maxlen: 20
109.124.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:76:38:ac:5a:d2:fc:56:5c:18:0d:b6:ad:b2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Validity
Not Before: Jan 1 06:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b4d3e8ca8a4fcfe0beafb765ab7dc326a90237f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:06:af:f8:e3:23:fe:51:88:8b:80:e6:23:3a:
68:bf:81:3b:2f:7a:50:d7:8e:22:f1:be:85:c6:44:
61:e7:2c:ee:a8:59:00:c1:0e:17:30:60:1b:73:df:
6a:93:1f:5c:51:a4:cf:8a:7f:18:a9:53:0b:74:b8:
18:58:0c:87:3c:22:46:ca:bb:b2:bd:1e:55:09:d4:
3f:87:3d:83:7b:bf:cc:90:ba:bf:0d:00:ca:b5:48:
31:57:d9:50:31:17:05:63:c4:f1:31:10:59:d0:cc:
b8:0f:72:ad:0c:67:99:17:c2:21:86:92:8d:9c:29:
91:36:e1:d1:69:24:29:41:dd:a4:a3:c4:83:5e:23:
f9:85:76:07:57:54:dc:37:e1:31:4b:9f:37:27:b0:
cf:98:09:77:66:2c:1a:a0:b0:cd:74:e8:a4:c5:14:
52:f8:bb:fa:07:46:a6:ee:8b:27:3f:37:a1:cf:61:
f4:31:df:fc:96:8f:df:b0:19:09:d0:f9:62:39:9b:
f4:5e:8f:b7:c2:54:26:1e:c9:dc:cb:c7:d5:9d:bd:
e0:6f:74:5f:ce:5e:33:7d:cd:17:42:bf:5b:40:1a:
e7:56:34:e4:9e:5a:38:9a:c3:a4:1e:e6:af:14:61:
7e:17:46:8f:5b:a9:37:e9:10:62:a2:7a:0e:47:9a:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4D:3E:8C:A8:A4:FC:FE:0B:EA:FB:76:5A:B7:DC:32:6A:90:23:7F
X509v3 Authority Key Identifier:
keyid:4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/a00-jKik_P4L6vt2WrfcMmqQI38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.236.160.0/19
109.124.192.0/18
185.224.8.0/22
Signature Algorithm: sha256WithRSAEncryption
27:d3:5e:00:9f:99:2f:bd:a6:31:d3:68:e8:c2:b3:40:ea:93:
93:34:07:ff:5f:3e:39:48:62:0d:aa:85:74:91:51:3d:a7:04:
ae:bc:9a:6e:18:3b:82:e1:d1:61:c4:e4:d4:73:8f:2a:cc:81:
15:66:09:09:9d:9a:3a:5d:69:a8:08:da:20:62:bc:ba:30:ef:
00:d8:b7:68:8b:6f:0f:c4:3d:b2:30:c5:c0:12:3b:fd:82:c7:
b1:50:78:37:ec:2e:37:fb:d5:f1:80:b1:16:3c:0d:ba:5b:8a:
05:73:b5:ed:b6:c3:b4:35:a6:87:0b:c9:d8:63:c6:d2:95:59:
15:d1:3b:fa:64:18:2f:b0:c6:e7:b3:47:9f:f6:55:1c:29:4d:
6a:f8:cb:c8:47:c4:68:4e:4c:6f:40:6a:82:b4:d2:71:ae:c8:
f5:c5:87:27:a5:ea:6a:57:c8:4e:2e:50:2f:f1:1d:07:f2:65:
35:21:d5:78:54:dd:31:33:e5:bb:dc:b4:24:46:0c:b4:0e:94:
6e:24:cd:da:f5:aa:3c:15:3a:98:e8:45:ff:64:b9:ed:d3:c4:
7e:a5:71:0e:a0:ab:00:f3:00:55:38:d9:8d:32:46:0d:97:81:
9c:5e:19:bb:ac:67:91:a1:81:8c:26:22:60:e7:7b:ee:bf:1f:
36:5a:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:53 2023 by rpki-client on console-ams.rpki-client.org