Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/j-uMMoyz3dBKrHYzGK4-RNf1CK8.roa
File: j-uMMoyz3dBKrHYzGK4-RNf1CK8.roa (raw, json)
Hash identifier: DNr3fL6o/T1oKkyU1mmOpq2qXtw3//64cnq+MgUvATg=
Subject key identifier: 8F:EB:8C:32:8C:B3:DD:D0:4A:AC:76:33:18:AE:3E:44:D7:F5:08:AF
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01856D13CAD9ECCF9388FCC1E1DDD98D805F
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/j-uMMoyz3dBKrHYzGK4-RNf1CK8.roa
Signing time: Sun 01 Jan 2023 11:24:51 +0000
ROA not before: Sun 01 Jan 2023 11:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147001
IP address blocks: 109.206.244.0/24 maxlen: 24
85.8.180.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:ca:d9:ec:cf:93:88:fc:c1:e1:dd:d9:8d:80:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 1 11:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8feb8c328cb3ddd04aac763318ae3e44d7f508af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:a9:04:19:e1:89:f1:e2:d4:6e:b9:d5:b2:
ea:ec:7e:8d:27:96:cb:70:ec:92:ef:e2:56:a0:1b:
ff:77:35:4a:ca:4a:d4:9b:dc:f4:b9:07:e8:40:3b:
ac:bd:ef:d4:54:78:28:10:3e:be:03:d1:a5:38:33:
35:06:20:17:f2:5c:95:b1:86:39:4e:8b:7c:b2:2c:
df:08:03:d3:7b:c8:f8:9b:bb:0e:43:c3:b9:4a:78:
ad:fb:d5:4e:f0:3b:a7:2e:ca:78:c7:5f:56:4b:d4:
47:d8:5c:da:b8:bb:4b:f4:63:65:a7:84:05:56:bd:
34:35:eb:b7:19:64:0f:13:ab:e2:13:a2:0a:fc:65:
af:17:82:6c:6d:0f:76:bd:1c:85:9d:d3:d3:66:8b:
f3:b4:d6:55:be:ee:a5:89:e3:55:4a:af:10:03:c4:
d7:85:17:13:a6:ce:8b:3a:13:f0:37:78:8c:a1:15:
b7:ae:5a:9c:45:3d:fb:a9:21:a3:a1:b5:e9:db:d8:
73:d8:af:51:36:e1:05:16:fa:30:6e:79:c3:23:97:
55:d6:ec:f8:bd:b7:5f:b2:2e:96:b8:2f:01:71:08:
2b:10:f2:99:8e:b8:91:8c:34:fb:40:2e:a9:54:1d:
b3:c2:1b:05:b6:a0:fd:bc:d0:29:19:5f:33:e7:a0:
6b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EB:8C:32:8C:B3:DD:D0:4A:AC:76:33:18:AE:3E:44:D7:F5:08:AF
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/j-uMMoyz3dBKrHYzGK4-RNf1CK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.180.0/23
109.206.244.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d6:f3:ce:4c:6e:af:18:3e:60:ff:93:fe:bb:4e:07:2e:1b:
d2:d6:3d:8a:23:94:a1:2e:94:42:19:63:74:a8:d5:be:9c:a7:
68:5d:e2:0e:24:5f:41:48:a2:64:99:ea:16:98:2e:46:28:9a:
9d:16:27:26:0b:3d:f5:9d:01:11:28:6e:b2:91:12:44:cb:bd:
66:72:d7:0d:d7:26:82:3d:27:05:b7:ce:c8:ed:9d:9c:d8:ce:
bb:32:81:cb:1f:91:39:80:97:ca:1e:50:b4:24:28:ed:29:1d:
a5:8e:af:d7:f6:60:f4:bb:94:9b:29:ae:da:1b:63:1b:ed:e9:
7c:cd:72:d1:ed:01:7f:f5:7a:5e:3d:31:64:bd:89:19:1c:ad:
e7:92:33:e2:2c:44:eb:5c:0c:a9:9f:f1:24:b1:02:0f:da:94:
e5:6e:99:bd:f1:d6:5d:fd:0f:e3:d6:49:16:6b:6b:e9:1e:49:
02:48:6a:9f:ff:9a:41:d3:dc:93:34:4a:7c:26:26:d2:68:05:
50:d7:c8:05:45:e9:f2:a6:18:37:53:b4:1d:6f:62:9a:d8:35:
34:2b:36:c0:44:7c:40:84:77:13:71:b7:71:7c:26:0f:24:a5:
a1:b5:ca:59:80:29:95:6a:5d:2d:7f:86:86:99:e5:e9:04:de:
1e:a3:e5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:20 2023 by rpki-client on console-ams.rpki-client.org