Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/x9-D3g_e-kplnhQxjzQi7dgiQQc.roa
File: x9-D3g_e-kplnhQxjzQi7dgiQQc.roa (raw, json)
Hash identifier: A+cCsYX2cp9aEilz7FsGnldW0u62WsaT8ecZKf6Mqug=
Subject key identifier: C7:DF:83:DE:0F:DE:FA:4A:65:9E:14:31:8F:34:22:ED:D8:22:41:07
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018B61187A7ABAA1E5F203D196F4C8FB9787
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/x9-D3g_e-kplnhQxjzQi7dgiQQc.roa
Signing time: Tue 24 Oct 2023 09:51:15 +0000
ROA not before: Tue 24 Oct 2023 09:51:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.105.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:18:7a:7a:ba:a1:e5:f2:03:d1:96:f4:c8:fb:97:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Oct 24 09:51:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7df83de0fdefa4a659e14318f3422edd8224107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:58:46:76:20:ce:1f:18:24:f6:13:a5:1d:
b5:77:78:d3:7e:05:fd:f7:2c:f4:50:1a:cc:74:f2:
cf:ea:da:64:a0:a9:80:34:27:b1:a4:29:27:e8:54:
76:14:aa:74:5e:71:eb:d1:c4:fa:a5:15:85:1b:3a:
80:7c:5e:46:38:b2:e6:6b:22:e3:46:00:5d:63:09:
e4:a6:84:41:c6:8c:3a:e2:7d:33:29:42:a1:c6:06:
95:6e:75:c0:39:00:29:0c:b6:29:fa:e4:4c:5c:16:
55:44:25:ab:06:76:79:48:21:bf:59:b7:52:22:24:
08:0a:90:9c:e0:ac:ad:85:92:b1:8b:b3:32:3b:a0:
14:f3:4d:45:39:a2:04:9f:d5:df:72:18:62:4f:94:
07:dc:05:1c:83:6f:d2:56:4d:37:20:a2:0a:6d:8f:
6b:c8:62:83:c7:10:d7:ae:75:14:a0:4f:9b:8c:fd:
d4:ab:8f:31:ca:43:f4:7c:44:4f:27:7a:07:4e:35:
9d:ff:64:cf:f6:9f:e1:66:35:a3:78:c5:95:5a:44:
84:0f:c2:75:4f:9a:e3:12:56:55:fc:74:13:97:0a:
e2:25:ff:ca:59:53:53:91:07:d1:94:e4:f7:94:ee:
c1:b9:89:02:89:dc:e6:20:48:1f:6f:d6:bb:56:66:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DF:83:DE:0F:DE:FA:4A:65:9E:14:31:8F:34:22:ED:D8:22:41:07
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/x9-D3g_e-kplnhQxjzQi7dgiQQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3a:aa:01:d1:22:61:fd:2d:0d:35:89:5e:7e:41:72:b4:d4:
ba:fb:90:3d:5c:4c:c6:1a:d0:6e:78:a0:de:9b:21:80:89:c4:
73:c6:c7:c2:ba:c0:4d:94:2a:2e:a3:80:90:25:9b:ec:20:89:
83:7d:8d:79:12:5d:91:7d:d8:c2:5e:dc:da:f9:cd:28:81:4e:
58:55:84:1b:e8:4f:5e:12:70:e0:f5:b6:48:74:42:70:89:2a:
3c:0a:dc:18:2b:34:e3:5a:38:d1:b2:c0:43:e6:71:a5:9a:2b:
15:f9:76:79:ca:58:59:90:3d:85:d7:ee:e2:95:37:f1:04:b9:
05:c9:6f:83:fd:91:f4:96:c6:02:39:06:14:a4:da:03:1c:15:
1b:a5:da:20:1b:9d:3a:b0:80:4b:f8:0a:cb:23:0d:97:64:14:
0d:92:c7:5f:5d:78:7f:9b:46:ab:9b:8d:90:56:d0:48:63:ab:
95:2d:e2:53:2e:cf:3d:53:2e:3e:17:6a:ba:3b:4e:78:54:c7:
82:a6:05:1a:92:4c:dd:09:0e:48:2c:fa:90:a9:cf:53:d6:fa:
47:07:5f:06:bf:bc:08:27:68:2d:ba:9a:53:37:0e:19:ae:78:
e5:0a:92:90:67:52:e3:ef:81:1b:d9:a8:ef:80:e0:f7:d1:7d:
d9:d5:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 16:04:32 2023 by rpki-client on console-fra.rpki-client.org