Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/1-fAgarYcvdTtfeMrOmd5AX3MfKY.roa
File: 1-fAgarYcvdTtfeMrOmd5AX3MfKY.roa (raw, json)
Hash identifier: QkuIzsWHB15VJeq9f1n5mBP0CyM6b3AtWnS8zGXFQk0=
Subject key identifier: F9:F0:20:6A:B6:1C:BD:D4:ED:7D:E3:2B:3A:67:79:01:7D:CC:7C:A6
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018B434C2B15BF510150A980F6351E972D72
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/1-fAgarYcvdTtfeMrOmd5AX3MfKY.roa
Signing time: Wed 18 Oct 2023 14:59:07 +0000
ROA not before: Wed 18 Oct 2023 14:59:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32613
IP address blocks: 109.122.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:4c:2b:15:bf:51:01:50:a9:80:f6:35:1e:97:2d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Oct 18 14:59:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9f0206ab61cbdd4ed7de32b3a6779017dcc7ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:01:8f:0b:0f:c5:a2:e6:3b:43:7e:06:50:
ab:33:eb:55:42:c5:57:78:14:5c:41:66:be:d3:db:
65:8c:bd:c3:87:20:9b:52:1d:77:9d:34:20:f4:8c:
87:1a:87:3f:c1:7f:72:6d:22:44:10:6a:d9:75:3f:
0f:73:aa:3c:43:7a:33:eb:1b:7e:de:70:a1:6f:72:
f7:02:62:33:e7:4c:7c:c7:2b:91:37:98:93:e4:2e:
a3:b8:32:77:e6:a2:a5:b5:27:00:fe:d0:21:12:fa:
6f:ca:43:6c:bf:af:47:ff:cf:b7:76:8a:0f:46:ed:
2a:ac:23:d8:e2:4b:87:84:93:44:f2:88:ed:7e:fa:
2b:ba:77:ce:a4:17:f7:a0:be:4b:b0:21:51:20:02:
30:d4:e9:1c:80:5f:69:dc:cf:03:5f:88:b0:6b:06:
ea:69:f3:ef:8d:9b:77:b2:02:22:65:76:55:ff:ff:
e4:2b:ac:41:8a:79:79:67:ec:59:e4:a6:3c:a8:9b:
8e:f6:18:f4:39:e3:56:03:3c:51:83:d0:e2:a0:85:
58:06:b1:87:a7:9a:9c:7b:ac:09:cb:97:d1:42:e6:
7b:47:c6:bc:21:cb:4a:b9:d6:08:4e:a1:e3:e6:21:
32:71:f8:c5:0c:65:f6:db:06:3d:df:c0:72:67:34:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:20:6A:B6:1C:BD:D4:ED:7D:E3:2B:3A:67:79:01:7D:CC:7C:A6
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/1-fAgarYcvdTtfeMrOmd5AX3MfKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:45:88:8c:c1:e0:2b:e8:de:48:9e:be:e4:a1:39:eb:a2:86:
8c:9c:7d:82:f6:fd:62:62:b0:99:8c:ae:39:2b:63:08:f2:91:
1e:e4:d4:3d:32:4d:b2:92:fe:e1:a2:02:a8:d7:ef:5a:80:57:
b0:52:45:b6:af:50:4e:59:e5:da:e2:88:40:fe:4f:f2:11:c6:
67:c4:d9:09:62:66:72:c1:b8:61:11:a8:25:c3:1f:ac:fa:df:
bc:10:b0:c3:e9:ea:99:c1:0a:4b:94:e1:53:a5:a5:47:98:a4:
7f:5a:18:00:5b:3e:fc:5f:1b:a6:e4:24:f3:d0:54:4f:a5:5c:
8e:a6:cd:d0:0b:1b:fb:c1:41:19:91:37:83:50:ab:26:cf:ed:
7b:5e:f5:c5:9b:27:38:b6:2b:d6:36:38:a9:0d:31:05:c5:d4:
ee:7a:ae:84:8f:ba:ae:6f:d9:26:83:ec:c2:d7:72:fa:b2:37:
75:38:ca:ab:06:85:45:dd:7e:43:c4:4c:ec:01:e3:b7:8a:1c:
94:70:a3:fe:7b:79:25:7b:6f:2c:a2:68:b4:e8:bd:a2:bc:25:
1c:00:d7:c4:1b:2f:98:d8:c5:d3:22:cf:c1:b5:71:73:89:75:
a5:f5:93:e4:15:cc:36:a7:7c:7d:15:dc:15:24:8f:6c:b1:49:
3e:fb:fe:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 03:06:28 2023 by rpki-client on console-fra.rpki-client.org