Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/iR_k-KqL67lwemNjfQM7RryS7hc.roa
File: iR_k-KqL67lwemNjfQM7RryS7hc.roa (raw, json)
Hash identifier: WR4XiYyy0OzzlpoarWAJPs3Rx7YNnFSzoDhaQcSEQZU=
Subject key identifier: 89:1F:E4:F8:AA:8B:EB:B9:70:7A:63:63:7D:03:3B:46:BC:92:EE:17
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 0185F7E96B9C53A31A28665AA5AC7FAB91B7
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/iR_k-KqL67lwemNjfQM7RryS7hc.roa
Signing time: Sat 28 Jan 2023 10:25:47 +0000
ROA not before: Sat 28 Jan 2023 10:25:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 109.172.74.0/23 maxlen: 24
109.172.84.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f7:e9:6b:9c:53:a3:1a:28:66:5a:a5:ac:7f:ab:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Jan 28 10:25:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=891fe4f8aa8bebb9707a63637d033b46bc92ee17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:66:2b:09:12:0f:20:f0:f4:8e:c1:2d:03:
1c:24:3e:f4:b4:f7:ac:b2:14:c5:b0:67:f4:bd:cd:
5c:65:f4:83:b3:75:bb:61:4f:e3:8a:76:1a:83:72:
43:99:6e:1c:dc:5c:c3:9a:87:bf:5f:85:93:31:5f:
7d:eb:71:3d:e1:49:03:a6:f9:3e:17:97:99:63:19:
70:9f:21:2f:54:04:b1:a0:7b:97:68:bf:e6:92:b3:
34:57:43:5b:08:a6:0a:7b:9c:c8:70:64:c8:7e:8e:
33:25:17:e6:0b:51:6a:25:ea:ce:f9:e1:49:62:d6:
1e:72:ad:72:b1:17:1c:cf:b1:a5:39:09:fd:ca:a7:
e6:04:6c:60:8d:90:5d:3a:67:07:22:48:f5:c8:9d:
d7:96:d2:02:c0:ed:34:53:94:33:8a:77:df:e6:e4:
b8:0c:3d:d5:73:df:3a:c9:8f:88:d4:7c:68:91:5f:
a2:6e:03:f0:6f:a4:4d:82:07:f2:70:2d:c8:e0:c7:
06:66:63:8e:13:04:c8:d6:a3:fc:f3:24:10:db:f4:
23:d1:c1:b2:29:36:e5:9d:ff:b4:71:1e:14:46:17:
9f:5d:f1:58:18:ff:aa:71:cb:ee:24:14:cc:88:41:
34:0d:31:33:9a:6f:39:49:d0:d9:73:20:14:0c:22:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1F:E4:F8:AA:8B:EB:B9:70:7A:63:63:7D:03:3B:46:BC:92:EE:17
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/iR_k-KqL67lwemNjfQM7RryS7hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.74.0/23
109.172.84.0/22
Signature Algorithm: sha256WithRSAEncryption
99:fc:60:9e:f8:81:c2:ff:b1:ff:79:d5:c2:50:a3:1d:64:77:
39:1e:ac:6e:10:c3:cd:b6:23:3c:ed:12:98:1c:c2:40:55:7b:
db:9d:4b:87:70:f0:2e:c1:29:14:ce:a2:f8:01:37:44:32:db:
6d:6f:29:be:a5:67:45:e5:8d:32:72:5e:d5:aa:68:9a:a5:ca:
2e:2a:ce:6e:03:a8:bb:d4:13:c7:b1:82:bb:ab:fd:0e:e6:7f:
fb:31:cd:22:e6:b1:fc:9c:48:07:d9:ce:e9:11:f6:00:e7:a4:
2b:f9:56:ab:45:e0:11:05:e2:5d:f0:0d:20:b6:b7:a2:74:2f:
90:ed:ec:b4:f4:e3:7f:b7:17:49:8c:87:62:7a:1f:66:88:19:
45:c6:00:b3:5d:34:44:cd:c9:44:4e:05:7d:16:5c:26:cd:f1:
71:87:62:dc:2f:44:ce:41:97:d6:87:b2:60:25:35:32:e8:a7:
02:66:d5:b2:65:24:a8:c4:1a:52:c7:27:50:48:e2:e7:63:9a:
75:5b:3e:10:69:2c:7c:f0:11:07:6d:2d:91:3c:a4:f4:62:e6:
b9:fc:8f:00:19:22:a1:39:f0:73:da:85:c2:5f:e5:56:17:de:
3d:45:56:08:8f:8a:6d:d0:8e:04:1d:c6:93:a6:25:be:31:12:
10:67:b8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:47 2023 by rpki-client on console-ams.rpki-client.org