Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/6Isi2JG5rZyGOyb6LXG5xXpp1zo.roa
File: 6Isi2JG5rZyGOyb6LXG5xXpp1zo.roa (raw, json)
Hash identifier: 43uLhx/T4zv9DXablrbk8Q/yt/98BdqKmyXkdPLqE4I=
Subject key identifier: E8:8B:22:D8:91:B9:AD:9C:86:3B:26:FA:2D:71:B9:C5:7A:69:D7:3A
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F023BCB774D8837DB25D8D017B3AF29
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/6Isi2JG5rZyGOyb6LXG5xXpp1zo.roa
Signing time: Sun 01 Jan 2023 20:24:55 +0000
ROA not before: Sun 01 Jan 2023 20:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28699
IP address blocks: 185.27.92.0/22 maxlen: 22
109.205.120.0/21 maxlen: 21
109.205.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3b:cb:77:4d:88:37:db:25:d8:d0:17:b3:af:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e88b22d891b9ad9c863b26fa2d71b9c57a69d73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:63:74:e9:b0:db:b7:20:9e:1a:71:10:76:bf:
ca:7b:89:9b:7d:c6:32:4d:00:60:fb:f3:a6:7a:16:
bc:a9:95:46:23:b9:84:7e:86:66:c8:5a:f0:b2:5d:
53:2c:b8:74:00:0f:30:bf:98:af:f2:56:3c:81:23:
17:15:42:4d:ae:48:f7:2d:1e:fd:ca:a1:89:01:16:
90:f7:ec:fc:22:56:1f:bf:bc:79:11:75:3e:7f:5d:
58:f6:53:e3:0d:74:92:cb:70:2d:af:d2:d8:8c:52:
cc:da:c9:d2:b0:3d:da:b3:9e:74:ee:e0:35:3f:2e:
c2:49:6f:62:9e:2c:64:c4:04:1a:bc:e0:14:d3:c4:
f2:e9:9b:6d:6a:ea:a6:c1:48:61:41:15:e5:a4:76:
67:64:c4:e8:aa:5a:57:e7:23:a0:fa:01:fa:6b:97:
fc:34:2a:c8:b1:a0:00:64:73:50:bb:d2:ff:ef:1a:
94:f8:de:f0:ea:66:09:bb:f3:4e:f4:e1:dd:07:c7:
3b:ea:94:e9:c8:32:89:36:45:4c:e2:75:1f:23:ac:
20:e7:46:ac:d6:90:cd:d4:b0:d4:63:44:b1:d3:52:
ba:21:d7:60:f7:43:1f:89:f8:6d:c4:27:7f:9f:8c:
53:aa:19:20:43:33:8e:e5:0d:da:47:15:a6:8d:eb:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8B:22:D8:91:B9:AD:9C:86:3B:26:FA:2D:71:B9:C5:7A:69:D7:3A
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/6Isi2JG5rZyGOyb6LXG5xXpp1zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.120.0/21
185.27.92.0/22
Signature Algorithm: sha256WithRSAEncryption
38:fe:1d:a1:80:46:56:f9:9a:4f:12:63:cf:cc:a1:a0:7b:8e:
b9:98:5f:04:36:82:d8:4f:8f:c2:b2:e6:6c:66:56:a0:25:fb:
41:85:2b:ab:1f:d6:d5:6f:f5:e7:92:62:6e:0a:a2:37:27:65:
48:8a:e4:a9:68:7f:1a:28:65:45:04:c1:3e:d1:04:e5:fa:67:
d2:0c:27:34:24:a0:33:6c:e0:77:67:7e:4b:42:df:30:1c:c3:
30:8c:23:01:1f:ca:82:01:9e:1a:e8:51:0e:46:58:2a:71:c9:
61:05:b0:73:66:82:73:5e:ac:24:c1:47:ea:98:87:4b:4b:4f:
c1:49:9b:45:c7:74:c0:38:69:ac:58:51:16:4c:f6:d2:95:17:
7b:ea:d1:3c:db:7b:fd:c6:93:f8:37:b5:5e:ab:d0:73:86:2f:
67:27:e5:d7:47:c0:80:7b:9f:d7:b2:5e:dc:04:e0:ec:1a:ce:
17:92:fd:36:75:29:fc:38:d1:b2:0c:8f:c2:64:9c:37:0a:35:
b7:a8:0f:c7:82:ab:17:a9:db:d5:d5:7c:65:5b:1b:92:9e:49:
51:a6:4f:a3:d8:96:d7:36:7b:20:80:a6:58:05:35:45:9c:7d:
0a:23:f3:b7:1d:d9:ad:bc:97:20:fd:f4:79:43:80:39:49:53:
36:f5:33:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:48 2024 by rpki-client on console-ams.rpki-client.org