Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/UJI5dJNGN2qK-hqwKmKCMYO0ZDU.roa
File: UJI5dJNGN2qK-hqwKmKCMYO0ZDU.roa (raw, json)
Hash identifier: sLF5dpjKoMdtidda55YT7HXEnbUNPIqsBvy3Q7uYUEk=
Subject key identifier: 50:92:39:74:93:46:37:6A:8A:FA:1A:B0:2A:62:82:31:83:B4:64:35
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 0187A865E919F4057D44D1F80EF351EBF02C
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/UJI5dJNGN2qK-hqwKmKCMYO0ZDU.roa
Signing time: Sat 22 Apr 2023 09:57:43 +0000
ROA not before: Sat 22 Apr 2023 09:57:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 109.122.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:65:e9:19:f4:05:7d:44:d1:f8:0e:f3:51:eb:f0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Apr 22 09:57:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=509239749346376a8afa1ab02a62823183b46435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:04:d1:89:9b:26:b5:66:6f:0d:5f:ec:c9:
f4:23:68:9b:25:93:ec:97:af:48:bc:c2:0b:3f:d2:
62:49:7d:d9:b1:c0:8f:e7:54:61:68:37:dd:64:c8:
84:97:84:36:ab:40:43:90:b5:19:b7:4b:0d:77:1a:
db:10:6b:40:d4:f7:7b:fb:68:45:98:36:e1:0c:ec:
be:78:58:ab:b5:96:79:29:70:e9:d8:d0:14:b2:a8:
c3:09:b6:68:9c:d5:ed:70:a5:8b:31:b9:3d:21:a6:
54:f9:2b:c5:39:1f:90:1b:c0:64:59:69:81:9b:b8:
93:de:41:1b:eb:cd:4e:a1:2a:d1:39:09:06:d1:e3:
77:be:68:92:be:23:e3:9e:ad:2a:61:dd:52:8c:19:
44:ed:0d:87:57:a6:26:95:ad:97:ca:f8:7b:fc:d0:
99:25:84:77:f4:54:e8:ba:e1:6b:d5:bc:9e:26:03:
00:c1:87:2b:fb:21:44:69:5f:fe:e3:1c:9e:a5:e6:
75:5c:ac:9b:bb:f5:eb:81:08:fc:73:e0:02:5c:55:
c5:71:51:a6:0a:bd:f5:b7:99:d3:85:91:18:dd:48:
e9:67:b6:4f:60:6e:c2:d2:80:a6:bb:84:5d:6c:ba:
91:89:45:84:a2:7f:7b:0d:f8:a2:93:20:1e:48:e2:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:92:39:74:93:46:37:6A:8A:FA:1A:B0:2A:62:82:31:83:B4:64:35
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/UJI5dJNGN2qK-hqwKmKCMYO0ZDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.213.0/24
Signature Algorithm: sha256WithRSAEncryption
96:1d:db:08:b7:bb:3f:21:fd:97:dd:33:e7:aa:a4:c1:61:52:
a6:94:6a:0a:e1:64:40:20:c6:f5:42:39:7d:dd:31:22:70:88:
b9:09:b4:f5:76:2b:01:60:19:d9:41:53:bb:08:7c:c0:aa:8d:
ab:ad:84:a4:40:ca:cb:05:54:59:ea:bb:84:19:0c:aa:91:84:
5c:88:d7:f4:92:bd:46:7f:56:da:66:35:06:c6:5d:00:2f:81:
9c:9a:6b:d2:ff:dd:94:8c:4e:25:f5:b3:23:fb:8c:80:52:66:
ca:db:c8:c2:43:05:f5:32:4e:2f:57:e7:1b:c3:cf:ff:aa:81:
52:3e:fc:ab:df:fb:d8:4c:0e:dd:61:08:a3:23:20:a0:72:e2:
ea:ff:be:47:b2:42:d1:94:17:f9:3e:c9:d9:3b:48:56:c6:05:
3f:73:de:58:3f:23:c2:af:2f:a4:44:83:8d:74:9e:a0:d6:5d:
78:de:1d:fc:08:b7:82:d2:58:91:b6:85:7a:dd:18:3f:1b:33:
1b:31:98:09:e3:44:07:c9:4e:67:33:ff:1e:65:aa:c0:0e:d7:
7d:2d:18:c2:94:b3:92:1c:68:17:a0:23:d8:ae:ac:86:a3:60:
79:8b:04:c9:a9:38:88:82:80:3a:2d:f6:2f:8d:f3:5a:10:38:
27:57:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:16 2023 by rpki-client on console-fra.rpki-client.org