Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/4PkglqN3j5fAEgz6o4Dy9IEOekA.roa
File: 4PkglqN3j5fAEgz6o4Dy9IEOekA.roa (raw, json)
Hash identifier: 329dgkj0UbIsVt7NshELYf2aD4XwOZB6P96v+oV6hAg=
Subject key identifier: E0:F9:20:96:A3:77:8F:97:C0:12:0C:FA:A3:80:F2:F4:81:0E:7A:40
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 0188200885BB6AAF662150B4EFA39B5CEDDD
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/4PkglqN3j5fAEgz6o4Dy9IEOekA.roa
Signing time: Mon 15 May 2023 15:30:09 +0000
ROA not before: Mon 15 May 2023 15:30:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208951
IP address blocks: 109.207.169.0/24 maxlen: 24
109.207.172.0/24 maxlen: 24
109.207.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 09:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:08:85:bb:6a:af:66:21:50:b4:ef:a3:9b:5c:ed:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: May 15 15:30:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0f92096a3778f97c0120cfaa380f2f4810e7a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:93:94:3d:11:5f:1b:34:b9:e1:61:85:8f:
7c:4b:10:bc:96:8d:e0:01:4f:a0:b2:e9:48:9a:31:
14:ca:01:b7:b7:5b:3a:50:00:cf:df:3f:70:d6:ad:
75:bd:05:95:10:7e:a9:30:32:9c:a5:c1:7e:1c:93:
ae:34:f6:ff:e5:06:07:27:2e:2b:dd:f9:22:5e:ed:
01:d5:ff:53:0f:7b:e2:f7:6f:d1:db:8d:4c:1d:df:
9f:97:78:09:0f:19:e5:92:10:33:93:52:3f:83:5f:
68:d9:5d:91:0f:10:a3:9d:41:05:74:10:56:eb:e0:
13:51:53:cd:c8:a2:1d:4c:fa:af:5e:af:69:82:9a:
1e:a4:f0:1c:21:39:28:59:44:fe:6e:82:91:24:6e:
44:c0:58:39:04:53:34:e1:a2:30:7f:65:e5:29:97:
36:29:80:a2:8e:d3:0e:dd:17:26:ca:60:28:7f:2f:
8c:94:64:ef:e6:2a:55:86:3a:35:6b:fe:8f:4b:39:
93:b6:dc:42:26:3e:82:bd:90:e6:9a:a2:d3:eb:17:
b1:d3:c0:d2:e8:6b:2f:ef:09:2a:a7:01:4e:12:13:
73:a1:9b:31:4b:54:5f:a0:44:ea:9e:71:51:ad:b5:
5d:87:97:ce:32:a9:d7:2e:7b:91:a0:7b:2d:79:42:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F9:20:96:A3:77:8F:97:C0:12:0C:FA:A3:80:F2:F4:81:0E:7A:40
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/4PkglqN3j5fAEgz6o4Dy9IEOekA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.168.0/23
109.207.172.0/24
Signature Algorithm: sha256WithRSAEncryption
65:7d:86:03:21:d0:25:b2:00:ce:63:53:88:23:a9:19:fc:8b:
5c:3e:24:d6:da:0e:33:23:5a:48:d4:18:f7:1a:29:ea:37:04:
f6:e2:c5:85:55:2a:8d:ff:75:e8:32:49:8b:27:9d:ca:83:73:
51:2e:11:f7:5b:2e:c6:b5:70:32:f5:2e:14:90:02:68:7b:8b:
b6:7a:40:d4:00:0d:91:70:d4:8c:43:19:21:a1:33:84:bc:78:
e0:a7:41:43:79:fc:b0:89:f2:a2:d2:ee:f9:9f:d4:b1:9a:4c:
16:5c:76:e0:4e:07:98:3f:0e:8d:da:b1:68:55:70:41:35:e3:
9b:ca:2a:63:85:c7:a7:70:f3:7f:04:02:9a:d3:af:e3:86:45:
78:e0:12:27:79:c8:a4:4e:c9:14:5f:62:c1:e8:9d:dc:23:b7:
f8:22:04:0e:55:e5:73:60:1c:56:72:6b:7a:2f:68:cd:ef:55:
f2:30:01:e2:69:28:e6:73:aa:4b:85:6e:2f:f4:9f:23:88:a4:
bc:6e:b0:72:98:4c:6b:7e:f4:c2:b9:1e:f0:74:2e:48:06:43:
59:18:9b:94:f3:9a:1f:90:ba:d2:7e:f1:75:31:3e:0e:80:3e:
0a:b7:96:49:82:dc:52:2e:56:5c:e4:b0:c2:15:ed:38:2b:ba:
15:b1:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:14 2024 by rpki-client on console-fra.rpki-client.org