Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/GHNGFl69PKn0kyJivK9WKq59RNM.roa
File: GHNGFl69PKn0kyJivK9WKq59RNM.roa (raw, json)
Hash identifier: PfR0ttJTbnZ7uXedykaNd1kSz11zfvpqsZW+p0tnj90=
Subject key identifier: 18:73:46:16:5E:BD:3C:A9:F4:93:22:62:BC:AF:56:2A:AE:7D:44:D3
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018BD601B220EB6BBC6DD8068045512C754D
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/GHNGFl69PKn0kyJivK9WKq59RNM.roa
Signing time: Thu 16 Nov 2023 02:41:57 +0000
ROA not before: Thu 16 Nov 2023 02:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 109.122.196.0/24 maxlen: 24
109.122.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:01:b2:20:eb:6b:bc:6d:d8:06:80:45:51:2c:75:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Nov 16 02:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=187346165ebd3ca9f4932262bcaf562aae7d44d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:b0:c8:6e:7d:d4:9e:31:e9:6e:97:a4:f9:
8b:b0:42:d1:5d:d2:1c:a8:62:82:d9:b9:2a:b6:a0:
bd:4f:73:bd:ea:50:1b:43:9e:89:b2:8d:68:fc:89:
5b:98:ab:a7:16:da:3a:d3:86:3b:7b:91:49:5d:46:
26:8d:f2:43:91:a5:4e:1a:89:c2:97:1c:b9:11:f0:
8c:c9:21:1f:41:7e:c2:f7:c7:27:e8:ce:32:6a:b0:
6f:db:38:58:f5:c9:0c:67:14:ae:be:54:35:bb:8c:
23:b6:c7:5c:fd:c5:3d:02:0d:f2:d0:da:77:87:e3:
fb:28:ee:2a:11:61:b8:19:81:d0:e1:62:6e:e7:b9:
29:45:b6:05:a6:e4:2d:4d:56:44:60:b1:f2:28:90:
0f:84:a7:08:a1:c0:fe:53:31:2c:b7:b2:fa:19:7f:
9f:5c:f9:ca:0d:24:76:36:68:df:a2:cb:d3:8c:e8:
72:27:72:be:e3:38:42:15:15:bf:f8:0e:f5:af:b9:
e6:31:f8:13:d2:8b:5f:95:5c:e3:b6:25:ce:05:a8:
66:72:5b:c3:95:b8:7c:4d:c0:04:0b:69:68:23:af:
43:37:27:c0:b9:ab:2b:43:ed:73:21:0b:ff:ae:28:
4c:0d:20:64:64:8b:7a:71:82:02:f3:d8:61:a1:03:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:73:46:16:5E:BD:3C:A9:F4:93:22:62:BC:AF:56:2A:AE:7D:44:D3
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/GHNGFl69PKn0kyJivK9WKq59RNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
109.122.196.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e4:cb:bc:25:3f:bb:d0:b3:ff:f4:28:6d:cc:49:e8:19:21:
35:9b:3a:7d:8b:14:cb:19:f9:ad:61:56:8c:dd:40:dd:21:67:
0d:d1:22:b2:f8:f0:34:20:ba:bb:85:09:fd:79:70:0f:3d:7b:
7f:20:b4:de:43:f9:57:ba:72:b9:64:44:01:c2:6c:90:df:12:
9f:06:21:d0:55:9a:6e:53:ae:69:d2:27:5d:27:f6:24:78:c6:
e2:a1:df:de:c8:46:48:8e:4e:c9:35:29:bc:ec:d1:a7:da:b4:
91:20:eb:9e:77:3b:32:e6:bf:64:26:e8:61:63:d6:ee:57:6e:
38:b4:5a:80:17:75:1d:bf:b0:7b:e8:e2:4d:3f:ee:48:82:1b:
58:8d:62:7e:20:bc:5d:91:ff:aa:86:49:58:79:d3:af:8e:60:
28:03:1a:8d:e3:1c:ee:b3:f6:a3:d2:85:30:ff:04:23:2d:ce:
8e:7b:46:e5:d9:e9:78:f2:8d:be:26:b6:8c:0c:fc:64:24:05:
cf:c0:5f:91:6a:c6:0c:e0:39:25:a1:2c:1b:b0:93:e0:3b:5a:
90:87:b9:be:94:62:61:3a:b2:b4:7c:de:c7:e8:58:66:3b:5e:
54:70:a8:98:28:9a:fb:32:ef:3a:dc:01:df:7d:fc:13:e7:a2:
db:4a:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 03:35:59 2023 by rpki-client on console-fra.rpki-client.org