Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/pMvci6pDq6YWYA1o4urQDo2S_1E.roa
File: pMvci6pDq6YWYA1o4urQDo2S_1E.roa (raw, json)
Hash identifier: 9/QKDDPU4SzUhbQKDD15LjARWiOqNm71HJwmP9syoco=
Subject key identifier: A4:CB:DC:8B:AA:43:AB:A6:16:60:0D:68:E2:EA:D0:0E:8D:92:FF:51
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 018BB0A7ED577C5BDC671C70B51AAFBEA182
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/pMvci6pDq6YWYA1o4urQDo2S_1E.roa
Signing time: Wed 08 Nov 2023 20:37:57 +0000
ROA not before: Wed 08 Nov 2023 20:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9008
IP address blocks: 109.69.240.0/21 maxlen: 24
195.200.240.0/23 maxlen: 24
185.211.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b0:a7:ed:57:7c:5b:dc:67:1c:70:b5:1a:af:be:a1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Nov 8 20:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4cbdc8baa43aba616600d68e2ead00e8d92ff51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2e:85:42:fa:76:23:b7:90:19:9c:aa:a5:ab:
a7:93:ef:ed:b2:ed:84:32:18:63:d4:cf:01:ae:25:
9d:0d:4a:9f:aa:85:01:88:a3:29:26:1e:81:76:2f:
d3:9d:8d:8b:ee:f2:fb:2e:0a:60:ec:1c:1e:60:61:
69:05:d2:74:56:1b:21:64:1e:2a:76:2e:f6:27:b7:
37:a3:a6:78:f5:ec:59:49:b4:fd:01:96:9f:b2:32:
67:c0:82:82:d2:a4:38:c0:eb:a9:90:71:c1:ac:e4:
1b:4b:78:c8:3b:a6:ce:76:5e:98:9d:e9:fe:3c:8a:
e4:5b:55:da:82:b6:d2:70:d9:69:50:be:84:37:32:
4c:8e:ed:0d:70:20:6b:14:b5:81:92:bf:3f:13:7e:
b0:19:6f:f5:ea:ae:1e:4f:88:ab:42:bf:c2:5e:f4:
2b:bf:e9:31:1c:f1:dc:8b:25:c5:a4:6b:a8:20:62:
a8:ed:04:56:1a:0d:f5:44:7e:77:83:c7:49:b4:e0:
62:74:d3:d7:e2:4b:f1:fe:3b:c4:11:19:d8:38:bf:
55:1e:e2:c2:41:bc:41:95:ae:0c:3f:88:5a:d4:00:
9a:f4:ff:4c:c5:77:25:77:37:0e:81:93:b5:c6:c3:
08:ee:1c:9f:f3:f0:92:c3:c3:7c:6e:69:ce:6a:69:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CB:DC:8B:AA:43:AB:A6:16:60:0D:68:E2:EA:D0:0E:8D:92:FF:51
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/pMvci6pDq6YWYA1o4urQDo2S_1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.240.0/21
185.211.232.0/22
195.200.240.0/23
Signature Algorithm: sha256WithRSAEncryption
48:e2:e2:c8:bf:c4:c4:8e:8c:2e:c6:b4:a1:42:c5:67:c0:5d:
ec:31:d0:b2:16:78:18:a1:37:3e:18:c5:0a:d4:93:3d:60:12:
cb:43:33:41:78:90:07:b8:2c:a7:75:5a:29:f5:2a:6b:14:7c:
57:2c:5c:20:3b:62:e2:c4:0a:60:90:86:f6:d5:a1:f2:a1:11:
6d:90:e6:9e:ba:75:1b:4a:47:68:3b:cb:e5:2c:cc:23:50:d8:
ad:73:24:ab:9e:47:30:04:5f:62:72:82:6e:9b:00:6c:15:6d:
42:50:e4:4a:3a:5c:61:17:7d:83:a1:08:2f:e1:c0:b9:ac:81:
5e:3c:97:48:f5:ae:bd:36:65:6b:75:08:73:64:16:8c:d8:a8:
e6:57:0b:95:69:00:72:bc:03:9e:c7:d1:71:87:a9:06:19:8d:
3a:24:52:c3:69:2b:99:7f:e8:47:85:1b:fa:9b:76:e8:7e:73:
22:5c:50:77:76:f1:12:21:3f:77:64:a3:38:20:c4:9e:4d:17:
4e:78:cf:bc:d8:e6:e5:6f:ad:73:7c:24:80:3f:3a:ac:87:e7:
bb:92:02:04:92:b9:dc:e6:17:c4:45:45:d8:cb:ba:15:dd:8c:
09:a0:fd:43:be:5e:3c:24:f6:df:8a:6f:f0:33:d3:91:3c:b0:
07:ee:5d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 22:05:02 2023 by rpki-client on console-ams.rpki-client.org