Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/F61L04-0-vvKq2TezqV1XSv5f-k.roa
File: F61L04-0-vvKq2TezqV1XSv5f-k.roa (raw, json)
Hash identifier: 3Z29yFqjmcT7QilkH4kJRd7qzl4TLJ5PWI8rY6sWBg8=
Subject key identifier: 17:AD:4B:D3:8F:B4:FA:FB:CA:AB:64:DE:CE:A5:75:5D:2B:F9:7F:E9
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 01856E01D6DED28F2E2D1FA476A9D53F8657
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/F61L04-0-vvKq2TezqV1XSv5f-k.roa
Signing time: Sun 01 Jan 2023 15:44:52 +0000
ROA not before: Sun 01 Jan 2023 15:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50446
IP address blocks: 109.69.186.0/24 maxlen: 24
109.69.185.0/24 maxlen: 24
109.69.184.0/21 maxlen: 24
109.69.190.0/24 maxlen: 24
109.69.188.0/24 maxlen: 24
185.73.52.0/22 maxlen: 22
2a03:ba80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:d6:de:d2:8f:2e:2d:1f:a4:76:a9:d5:3f:86:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Jan 1 15:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17ad4bd38fb4fafbcaab64decea5755d2bf97fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:c9:cc:02:98:23:f3:29:1a:87:de:db:23:
4e:9d:bb:b5:49:91:09:d8:18:17:8d:e7:47:82:b4:
10:f0:8d:11:29:39:1a:56:1e:5c:e7:42:bb:b5:f2:
0a:6c:29:f9:97:5e:b3:2b:7a:f0:f0:b8:c5:b2:97:
23:80:85:d1:c5:4e:03:55:91:2a:65:cd:0f:56:d2:
85:f1:c0:dc:6f:b5:df:32:62:87:43:15:75:d2:7d:
3b:32:bc:b7:f7:34:18:a2:b2:65:f7:fb:9c:e9:ef:
5d:36:34:e3:5f:8d:88:91:2c:93:1a:b0:63:91:b7:
61:a7:15:b7:74:1c:34:03:2f:b8:23:fe:08:d0:08:
82:d8:91:b1:be:28:03:9f:7f:dc:5d:69:0e:57:e1:
22:bd:ec:35:6e:f1:b6:ca:d5:4b:68:67:62:2b:3d:
85:8a:72:76:60:bc:6a:08:09:b0:e2:b9:c3:62:be:
0c:66:d2:ac:05:e5:4a:19:73:c8:fc:04:d2:42:8f:
87:82:11:cb:77:58:34:7b:2d:58:9b:d1:0f:95:71:
06:a4:c3:83:7f:f5:92:91:fc:2a:23:f4:f2:50:df:
eb:7b:50:68:34:05:77:88:85:f7:14:10:58:82:c2:
ea:04:1e:47:fd:0f:79:f2:4a:d4:81:51:fc:06:7c:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AD:4B:D3:8F:B4:FA:FB:CA:AB:64:DE:CE:A5:75:5D:2B:F9:7F:E9
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/F61L04-0-vvKq2TezqV1XSv5f-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.184.0/21
185.73.52.0/22
IPv6:
2a03:ba80::/32
Signature Algorithm: sha256WithRSAEncryption
bb:b2:c7:8c:01:98:69:9c:ad:18:e2:12:35:5c:d0:54:2f:eb:
7c:20:ac:bb:6f:b6:f3:aa:14:66:1e:7a:51:6c:e6:01:92:67:
5e:76:bc:ae:60:d9:16:c5:a6:e2:da:69:31:bd:a5:3c:8c:e0:
36:ac:1e:b7:0a:f1:4f:ba:60:bc:16:cc:bf:96:5a:68:ba:04:
f2:4c:45:e6:5a:9f:bf:ae:62:68:ed:23:32:e1:34:6a:8b:8e:
b5:eb:25:f6:df:aa:5b:1e:22:6a:0e:0c:8d:c6:5c:07:b5:6a:
45:22:c0:a8:9f:4f:a8:9a:fb:a9:68:6a:c9:bf:3b:07:f0:ea:
ac:5e:4e:cc:1d:a6:0d:b1:f5:75:32:d2:bd:96:b8:5e:c7:a3:
82:c5:1f:46:6d:ff:b8:47:a9:27:af:72:c7:55:6b:7b:39:6d:
0a:02:ee:6d:9a:9f:a8:ef:54:f2:75:57:e4:1b:8b:14:e6:1c:
c2:db:85:a7:bb:3e:3e:01:15:5d:a3:c0:6d:e6:f4:a6:02:f5:
85:c5:be:3e:ba:30:3e:57:e1:d2:bd:d1:f4:f3:1c:86:7c:39:
68:99:cf:9a:80:77:72:eb:8e:aa:84:03:5b:61:48:bc:8c:72:
78:a3:ce:65:75:66:24:f3:ea:fb:0e:bb:b8:7d:12:99:5c:6f:
c3:e9:b1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:50 2024 by rpki-client on console-ams.rpki-client.org