Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/E44AtJEGjo1J6WwCyaFVflkvIh4.roa
File: E44AtJEGjo1J6WwCyaFVflkvIh4.roa (raw, json)
Hash identifier: I2L7JnxSYTZJzFDxAcGTi6NR36vT+JZJVni5UEMdbss=
Subject key identifier: 13:8E:00:B4:91:06:8E:8D:49:E9:6C:02:C9:A1:55:7E:59:2F:22:1E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 01856F2FEEC51AE071EE18F78DDBFA875DDA
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/E44AtJEGjo1J6WwCyaFVflkvIh4.roa
Signing time: Sun 01 Jan 2023 21:14:50 +0000
ROA not before: Sun 01 Jan 2023 21:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21317
IP address blocks: 109.205.92.0/24 maxlen: 24
109.205.94.0/24 maxlen: 24
109.205.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:ee:c5:1a:e0:71:ee:18:f7:8d:db:fa:87:5d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jan 1 21:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=138e00b491068e8d49e96c02c9a1557e592f221e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:17:d6:34:5d:ed:9d:ac:c1:2c:30:e8:6d:
a1:61:f1:ac:bc:2f:3a:66:ad:64:3b:96:34:69:32:
c4:4d:be:71:9e:19:9f:05:c6:6a:f8:da:31:2f:20:
ad:af:87:6d:71:a3:a6:c2:28:d1:a5:0a:db:43:12:
68:2a:de:77:f6:79:37:81:86:fd:07:47:a5:5a:5c:
8c:79:28:30:93:3d:e6:4e:84:bf:84:c8:56:37:e9:
0b:6e:05:69:69:c5:97:d1:8a:a2:5c:f1:e9:e9:13:
da:d7:2d:c2:1d:25:54:89:eb:ae:56:32:64:ad:19:
8b:16:4e:b0:41:30:5e:ab:b3:c0:54:83:33:0a:c7:
db:d5:de:69:36:1c:0c:f7:de:68:be:17:1e:3e:f1:
fc:61:e1:67:40:63:a9:a1:a2:bf:bc:21:5e:b8:98:
31:f4:7e:db:5f:5c:26:d5:58:8a:07:f2:b2:5a:92:
b0:1f:b1:4a:25:e6:e0:10:f5:9b:1a:ba:0e:2b:df:
26:00:48:06:88:18:ba:19:49:68:e0:cf:2c:33:f4:
31:a6:40:2d:b1:76:90:a3:30:6c:ee:54:88:ce:4f:
9d:61:11:46:c1:8a:7a:88:b9:52:e6:8d:79:61:54:
9a:1d:09:5c:fb:85:c5:de:72:8f:90:7c:94:39:f1:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8E:00:B4:91:06:8E:8D:49:E9:6C:02:C9:A1:55:7E:59:2F:22:1E
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/E44AtJEGjo1J6WwCyaFVflkvIh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.92.0-109.205.94.255
Signature Algorithm: sha256WithRSAEncryption
30:78:bc:d5:6f:ed:32:a9:c9:ac:31:70:d8:e1:8b:2b:20:c4:
06:33:cd:8d:a2:41:b9:3f:a2:1e:fd:e7:be:78:30:eb:43:12:
cf:11:ab:a8:6b:b5:dc:2d:81:38:d8:6f:8c:4a:fc:e1:40:c5:
1b:4d:a8:8b:b3:8d:44:a9:b8:82:6e:79:47:e1:5b:1c:c4:42:
d4:f4:cf:a2:39:f0:dc:9a:be:51:ce:fb:42:96:d5:43:04:7f:
5a:74:9a:df:a9:55:0f:dc:39:33:21:4e:c2:a2:0d:9f:63:52:
a6:45:ec:0f:df:a7:d0:ce:95:16:24:a7:cf:85:ad:17:1e:dc:
28:a0:8a:bf:b6:09:25:ff:4b:89:ea:8f:05:90:26:bf:d7:a8:
22:90:f0:f5:06:33:65:6c:58:d8:d2:1d:7d:9e:58:83:d2:b3:
d6:a7:55:23:f2:af:ff:c5:4d:7a:bb:52:04:45:58:24:90:2f:
e2:9b:cf:e1:54:35:ae:65:ed:08:68:f8:1e:d5:80:51:34:58:
48:d7:bf:2f:fa:93:71:33:62:1e:7d:ca:8b:31:e7:48:a0:5d:
f8:a1:32:bd:78:11:e9:b9:fe:07:1c:c6:33:d6:08:14:b9:83:
7b:8e:41:41:26:8b:50:96:28:f1:cd:f2:02:ca:17:5f:9a:2b:
f9:73:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:23 2024 by rpki-client on console-fra.rpki-client.org