Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/SCpvyvslDQZBRQ9xcv6ae0YSrQ0.roa
File: SCpvyvslDQZBRQ9xcv6ae0YSrQ0.roa (raw, json)
Hash identifier: Rj5HCFx3E2Z53dI7VVKf2R52GSCISg2oGy5TgYsxcgI=
Subject key identifier: 48:2A:6F:CA:FB:25:0D:06:41:45:0F:71:72:FE:9A:7B:46:12:AD:0D
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 0187A866CD29AF8009C4B3EE045FE6A37777
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/SCpvyvslDQZBRQ9xcv6ae0YSrQ0.roa
Signing time: Sat 22 Apr 2023 09:58:42 +0000
ROA not before: Sat 22 Apr 2023 09:58:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211617
IP address blocks: 109.122.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:66:cd:29:af:80:09:c4:b3:ee:04:5f:e6:a3:77:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Apr 22 09:58:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=482a6fcafb250d0641450f7172fe9a7b4612ad0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:76:c1:57:54:4f:60:c5:a1:aa:f4:08:55:
09:7e:9e:0d:fd:61:0a:8b:d9:de:ac:67:f0:49:8c:
99:ce:15:20:fc:49:55:72:0a:d5:bf:5c:8c:4f:a1:
c9:98:cd:08:82:4d:2c:3d:24:d7:a1:8a:22:c3:71:
f8:c9:70:7f:67:0e:c5:d1:5f:7f:54:67:88:86:17:
b8:a1:54:7d:b1:36:75:12:b1:a4:b6:05:36:0e:c9:
55:4e:e1:8a:5b:e1:3a:9e:c8:9a:10:d4:f1:6b:d1:
7e:b0:80:5a:34:ec:cb:35:e2:90:b5:25:9d:42:37:
ef:57:3e:8f:bc:a5:a2:2a:5f:d4:0c:f4:c6:a6:24:
79:99:32:b5:f1:83:df:41:a8:06:4a:2e:43:25:40:
64:b5:b7:f3:36:f2:ae:13:d7:db:9a:91:e7:65:a8:
31:03:f1:41:d5:93:0e:ff:f8:c2:be:52:6b:7a:f7:
0f:60:18:2f:da:26:29:36:2d:a6:86:8a:51:c1:f0:
b3:14:e2:c9:0e:5a:72:b2:05:3e:61:50:b5:e1:48:
33:1e:be:2c:44:72:e6:f2:39:26:3a:79:ed:1f:72:
27:5e:d3:e7:20:ac:13:af:29:b2:31:b8:d9:6f:20:
52:c9:73:38:0c:01:5b:bd:ab:90:23:3b:c4:77:ab:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:6F:CA:FB:25:0D:06:41:45:0F:71:72:FE:9A:7B:46:12:AD:0D
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/SCpvyvslDQZBRQ9xcv6ae0YSrQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.197.0/24
Signature Algorithm: sha256WithRSAEncryption
44:08:d5:82:95:5e:33:73:50:89:54:71:47:de:c2:6c:b9:dd:
26:15:f3:29:4a:29:dd:ee:1b:0b:c2:d0:3c:e9:9b:53:fa:f4:
00:d8:d9:2b:19:3e:bf:8f:be:1d:5b:6e:04:49:b6:86:4d:26:
2e:2e:7d:91:1b:0b:22:ce:d3:45:e7:c2:a9:36:41:da:09:ec:
cb:50:e1:92:fe:b0:59:4a:8b:08:84:e9:e2:2f:81:58:02:d0:
f0:61:70:1a:44:30:3b:60:fd:0a:83:03:61:71:bc:ca:b2:f0:
f0:5b:f3:84:a5:68:1b:e5:3a:a4:47:47:31:97:19:bf:e5:16:
63:16:6e:46:09:2f:06:89:43:4b:27:74:21:15:78:27:ae:21:
ab:ff:7b:db:2a:7e:da:7b:37:f9:9a:37:3d:0a:f9:f9:75:5b:
f0:d7:84:7e:8b:d1:75:81:23:01:30:04:9b:5d:db:5f:ac:10:
60:3f:f7:0c:8f:90:c2:08:02:e0:53:12:a8:59:a1:17:f5:2e:
e0:72:c8:e6:ff:07:e7:37:42:7f:2d:c2:e2:7f:e9:e5:fc:c9:
ed:d0:39:df:d7:5d:ca:ba:4a:e6:0c:27:11:75:44:0e:7e:3f:
b1:af:ed:91:10:ab:db:85:29:10:1c:07:bc:36:9d:6b:1a:d8:
3a:69:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:16 2023 by rpki-client on console-fra.rpki-client.org