Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/7HXSLvDdkulmbYbrcJ9fKuOZ0KY.roa
File: 7HXSLvDdkulmbYbrcJ9fKuOZ0KY.roa (raw, json)
Hash identifier: lpWX8HfwjNT8GzAeBU/4IDn7bMbN1OmemD84wcpHJ2U=
Subject key identifier: EC:75:D2:2E:F0:DD:92:E9:66:6D:86:EB:70:9F:5F:2A:E3:99:D0:A6
Certificate issuer: /CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Certificate serial: 018B4279977F5C7587496672DD208DD1AE48
Authority key identifier: F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/7HXSLvDdkulmbYbrcJ9fKuOZ0KY.roa
Signing time: Wed 18 Oct 2023 11:09:06 +0000
ROA not before: Wed 18 Oct 2023 11:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 109.122.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:79:97:7f:5c:75:87:49:66:72:dd:20:8d:d1:ae:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Validity
Not Before: Oct 18 11:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec75d22ef0dd92e9666d86eb709f5f2ae399d0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:96:33:ae:56:7a:0f:dd:29:d2:f5:43:3d:
4f:38:a8:53:5a:2c:47:b7:b6:e2:18:81:83:2d:4d:
6c:c4:eb:3b:64:f5:16:82:cd:d8:e2:61:e8:b2:62:
00:ea:c7:52:31:5b:e1:5f:d0:61:71:e6:6b:c7:8f:
56:54:98:b2:68:03:ed:cd:52:80:82:6e:6a:cf:ca:
a7:2f:bf:f4:4e:da:57:80:c2:35:e1:04:86:b7:63:
10:5c:ec:be:7a:98:7c:2d:a1:cd:d9:01:48:4e:32:
08:eb:09:ad:ff:6d:b9:6a:2b:db:33:05:2a:0a:cc:
c8:11:9f:1f:c5:8f:a0:6c:99:30:e5:7d:99:4f:e4:
c6:54:22:78:3a:ab:d4:1d:81:89:33:dc:f1:88:14:
d0:74:d9:7c:f9:79:2a:3a:20:6c:d9:72:c3:b3:b3:
95:6c:1e:6d:8c:9f:e0:c1:03:1d:2f:d8:e2:27:72:
e9:0d:ac:97:35:af:2c:fb:5a:49:fe:4a:83:48:52:
31:e1:eb:03:73:c2:02:c7:af:3d:a7:bf:7f:96:da:
23:5a:ff:87:0c:49:71:22:e3:4e:20:6b:7c:f1:6d:
fc:41:4b:de:7a:83:83:6f:80:f5:23:67:5a:45:d3:
bf:f6:50:84:92:93:d8:be:2c:9c:01:b4:7e:ba:c2:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:75:D2:2E:F0:DD:92:E9:66:6D:86:EB:70:9F:5F:2A:E3:99:D0:A6
X509v3 Authority Key Identifier:
keyid:F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/7HXSLvDdkulmbYbrcJ9fKuOZ0KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/9OLptfuWen09eND7uTDAgOydkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.60.0/22
Signature Algorithm: sha256WithRSAEncryption
81:87:57:df:18:6f:4a:4d:30:28:1f:7d:79:8f:f3:09:9f:6b:
cf:2a:d5:c3:ef:d8:d2:91:e6:1f:28:a0:f1:ad:83:2b:b3:2f:
5d:7d:86:a2:5e:9a:d0:61:76:55:1a:15:95:76:08:1e:30:9d:
7f:ba:04:48:94:50:22:5f:1f:be:6c:55:bc:94:28:67:67:d6:
73:28:44:28:1e:03:61:43:85:11:72:0c:c1:d0:b7:17:0b:8e:
4d:99:7f:45:eb:56:c8:d0:4e:4e:51:58:f2:2c:89:a4:f5:a8:
5c:34:14:9c:69:b9:35:30:b6:8a:04:23:a0:e2:4d:da:18:80:
4d:1e:16:55:0c:dc:b9:02:7e:f8:db:4d:09:09:20:7b:49:ce:
14:33:93:eb:b1:07:42:52:5c:57:a9:82:e5:10:7b:a5:48:fb:
d8:0c:c6:6d:5a:6f:8e:65:21:c9:2a:36:1f:05:0e:5a:a5:58:
4c:4e:41:28:8f:49:c6:30:23:c8:76:6b:73:a3:ce:87:8a:d7:
cb:bb:b9:42:fb:ad:63:42:92:2d:f2:09:b6:ec:bf:52:c3:59:
c9:1a:38:01:08:bf:1b:44:a5:28:d3:cc:87:9c:c5:31:43:4e:
b6:f0:10:ef:af:cf:ba:53:20:d3:76:df:b6:c8:87:1c:96:84:
19:d3:a6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 10:06:50 2023 by rpki-client on console-ams.rpki-client.org