Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/hSDJOvhGc7O5kzBzdkNWMAtgJ7Q.roa
File: hSDJOvhGc7O5kzBzdkNWMAtgJ7Q.roa (raw, json)
Hash identifier: kr3n7W1WjAJwFG+Ly77SoQt8+9oMVQKSDmhbYNOtTCc=
Subject key identifier: 85:20:C9:3A:F8:46:73:B3:B9:93:30:73:76:43:56:30:0B:60:27:B4
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0185C571FC4B6B472B524D01A20EC5CB8041
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/hSDJOvhGc7O5kzBzdkNWMAtgJ7Q.roa
Signing time: Wed 18 Jan 2023 15:14:19 +0000
ROA not before: Wed 18 Jan 2023 15:14:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4826
IP address blocks: 109.206.250.0/23 maxlen: 23
2a0e:eb44::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 05 Dec 2023 15:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:71:fc:4b:6b:47:2b:52:4d:01:a2:0e:c5:cb:80:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 18 15:14:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8520c93af84673b3b9933073764356300b6027b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:c9:70:bf:da:30:89:c8:89:08:18:b8:7f:
c8:cf:37:f2:d9:ec:c9:33:2b:e9:e0:c6:40:21:8d:
e7:d4:08:17:ef:94:1c:10:12:3c:d3:d3:40:b4:81:
08:23:c1:79:a3:ed:43:de:2f:2b:d2:71:13:20:7f:
08:17:a5:5f:58:61:0d:44:d4:0e:d2:88:44:0e:7c:
b8:f4:f0:55:4a:1f:e5:d0:ca:d3:13:44:c5:73:e2:
5d:2b:f1:90:48:ea:82:76:3c:08:4f:0a:aa:3e:30:
ca:a2:83:75:68:48:0c:29:a6:ab:61:ab:60:d9:52:
e2:f3:8b:45:d6:d3:f1:28:66:28:4c:b0:7a:9a:bc:
5c:9e:97:02:f5:bc:e6:d8:51:8b:a0:78:fc:08:1c:
b0:f5:c1:9a:db:e4:48:eb:2e:71:7a:8d:11:b7:2e:
de:77:78:77:59:6d:11:2d:b0:70:a0:fe:94:97:df:
36:18:12:d0:b6:24:27:13:f1:5b:c4:1f:bf:40:cd:
8a:91:15:6a:44:23:23:8a:1b:95:5f:39:8e:9c:f6:
46:53:27:ad:5c:9c:83:87:69:1c:f5:60:78:40:08:
94:f3:9d:36:37:98:ce:f5:c9:80:9b:3a:d9:bd:0c:
58:a9:fa:bd:13:7c:95:60:f7:48:41:d3:e3:91:13:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:20:C9:3A:F8:46:73:B3:B9:93:30:73:76:43:56:30:0B:60:27:B4
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/hSDJOvhGc7O5kzBzdkNWMAtgJ7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.250.0/23
IPv6:
2a0e:eb44::/32
Signature Algorithm: sha256WithRSAEncryption
98:3d:25:bb:f4:e5:51:58:6e:ab:38:94:11:ca:72:e5:66:d2:
fe:d6:5c:a4:e7:2c:11:b0:c7:8a:50:ec:bf:f0:3f:3c:a4:13:
90:38:68:4b:d3:b2:d1:90:1b:d4:71:0d:3f:86:61:a6:0e:27:
b9:64:45:90:90:c7:76:6e:3d:66:42:66:95:98:f0:ec:b5:39:
13:90:1f:04:a3:af:96:b2:fd:a2:27:6d:92:4c:0b:c3:9c:0e:
59:ea:c0:48:c3:86:5d:f3:5c:d6:56:8d:f3:0b:1d:7d:0a:2c:
c1:47:ff:c4:a9:74:3b:51:de:b8:c3:17:5c:1e:e5:e3:ab:1e:
89:c9:3a:64:ea:67:6f:f0:50:61:47:8d:b0:11:a6:1a:e2:b0:
9f:72:b9:bc:1b:c4:c7:eb:1a:05:10:b3:95:c9:e0:0f:a1:e6:
3d:96:7f:dc:fa:38:e0:57:81:2b:fb:80:5a:c4:d2:4b:65:ea:
9b:e4:61:e0:af:2d:5c:0a:60:40:ba:d1:bf:b1:ad:c8:a4:ba:
df:a3:78:30:da:a3:26:ab:4d:b7:3b:ae:6a:f9:36:7c:c8:60:
ce:11:2b:f1:35:28:f7:99:a0:2e:a0:78:ff:07:f0:67:b5:3b:
97:4a:bc:6a:d1:43:4b:b5:92:df:bc:6b:66:79:6c:b7:52:ff:
e1:56:f3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org