Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/EG0CjJ9YFYAWZicCKfWo6dGpWo0.roa
File: EG0CjJ9YFYAWZicCKfWo6dGpWo0.roa (raw, json)
Hash identifier: fOkMIC5v8JWku/vcL+3szS/rHDZRdC7UQmJWzW+ydcM=
Subject key identifier: 10:6D:02:8C:9F:58:15:80:16:66:27:02:29:F5:A8:E9:D1:A9:5A:8D
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 018B4323E167E9685A57255D8FBA242B90EE
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/EG0CjJ9YFYAWZicCKfWo6dGpWo0.roa
Signing time: Wed 18 Oct 2023 14:15:06 +0000
ROA not before: Wed 18 Oct 2023 14:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202306
IP address blocks: 109.237.96.0/22 maxlen: 22
109.237.97.0/24 maxlen: 24
109.237.98.0/24 maxlen: 24
109.237.98.0/23 maxlen: 23
109.237.96.0/24 maxlen: 24
109.237.96.0/23 maxlen: 23
109.237.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:23:e1:67:e9:68:5a:57:25:5d:8f:ba:24:2b:90:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Oct 18 14:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=106d028c9f5815801666270229f5a8e9d1a95a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:ac:4e:f9:80:13:e6:14:c8:77:3b:7e:27:
62:67:90:09:0e:da:ff:d6:c4:ed:05:88:bd:bd:4d:
a4:56:d7:e5:87:be:81:7c:ce:ba:80:1a:26:a1:bf:
97:c2:52:8b:95:48:1c:a0:29:ba:6f:ce:b4:be:5a:
6c:96:b0:f4:d7:90:b1:9a:28:16:ab:47:b2:b0:9e:
a3:6f:44:15:0a:7c:c9:7b:30:4a:31:9b:e8:3c:50:
2f:a5:b0:65:1c:7d:d4:f6:ed:22:78:4c:94:42:92:
6e:cd:8a:c2:29:5b:cd:32:b5:e5:d1:20:47:9a:f0:
3f:70:25:4a:29:b4:f8:59:c3:38:be:80:9e:ed:85:
a2:6a:90:04:de:db:cd:28:c1:40:e2:b7:09:2f:51:
b5:15:6e:67:af:25:55:8b:fa:b3:27:d4:6c:0e:61:
62:98:a5:24:7a:d1:ce:f9:9f:6b:e8:06:e9:94:0d:
9c:6a:0c:b4:3b:9e:08:8f:4c:c5:5c:c6:9f:88:6d:
db:bf:58:bb:a6:ed:c5:ed:e1:19:b4:87:6f:8a:78:
b5:0d:9a:cd:0d:88:32:8f:a0:36:44:25:d6:2f:f1:
9b:62:1f:72:38:66:d5:fa:9d:78:16:9c:3d:29:bd:
80:a4:45:a4:99:59:7d:bb:cb:d1:1f:ed:6c:81:57:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6D:02:8C:9F:58:15:80:16:66:27:02:29:F5:A8:E9:D1:A9:5A:8D
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/EG0CjJ9YFYAWZicCKfWo6dGpWo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.96.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:0f:ab:22:76:1f:59:af:02:d1:ba:3e:bf:38:81:1b:de:b2:
bb:be:13:69:5a:47:51:2c:17:42:53:b7:bd:b1:83:84:a1:a9:
53:70:6c:10:d9:98:da:c3:b3:0f:86:0c:32:82:96:19:ec:c8:
cd:f4:5c:a8:90:2b:5f:85:ce:74:98:33:19:43:68:80:2c:a0:
20:49:8b:e2:21:ea:ab:da:d5:04:63:e7:5b:04:f0:d4:54:7f:
ba:0f:5b:3e:8d:53:5f:7a:57:4c:a9:e2:b5:b1:61:63:ba:0b:
29:ab:67:43:f1:26:65:01:c7:5a:ed:3f:50:04:0c:c6:26:b6:
13:06:b1:ac:39:d4:6e:f4:7d:32:00:62:71:3e:5a:a5:6c:46:
0d:96:43:1c:c9:fc:d7:42:f0:c9:3a:e5:7c:6a:c7:ac:01:af:
f8:e5:43:e6:4e:82:b7:66:1a:c0:10:08:3e:33:ff:c4:ad:bf:
19:0f:22:e6:b0:56:61:9e:aa:9a:07:5e:af:9f:e8:d2:af:7f:
66:9d:cc:51:ae:69:b2:72:1f:13:79:38:67:6e:02:9c:ad:4f:
9d:4f:60:dc:2a:25:14:b1:ed:bf:ee:19:fc:8d:e0:9b:62:82:
7c:a4:0e:63:5a:cf:d7:0e:c2:dc:a2:4f:73:c3:09:c8:eb:22:
94:68:18:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 16:57:00 2023 by rpki-client on console-ams.rpki-client.org