Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/sQfGam1LWFZKz4Pq5eKEcvpFQ8o.roa
File: sQfGam1LWFZKz4Pq5eKEcvpFQ8o.roa (raw, json)
Hash identifier: yjNj3humRDjy/N3aCsfRdZjsTzt/KsM/YlO1C4qH3G8=
Subject key identifier: B1:07:C6:6A:6D:4B:58:56:4A:CF:83:EA:E5:E2:84:72:FA:45:43:CA
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018B6ADAF37D98ABE6152F7F86B8AC0ED668
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/sQfGam1LWFZKz4Pq5eKEcvpFQ8o.roa
Signing time: Thu 26 Oct 2023 07:20:15 +0000
ROA not before: Thu 26 Oct 2023 07:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49872
IP address blocks: 109.122.192.0/24 maxlen: 24
109.122.197.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6a:da:f3:7d:98:ab:e6:15:2f:7f:86:b8:ac:0e:d6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Oct 26 07:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b107c66a6d4b58564acf83eae5e28472fa4543ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:9b:f7:a8:06:28:89:c5:65:09:f9:a9:a5:
4f:7d:d7:46:4d:55:6c:39:e7:9a:b2:02:64:ba:82:
26:57:92:ed:fe:5b:92:e2:5a:da:8c:8c:5d:3f:26:
0a:b3:60:bb:34:d8:74:04:b0:d2:6c:cf:be:e7:b6:
e4:ab:b7:9f:13:42:9f:5b:b3:cc:1d:9c:aa:eb:1a:
80:c0:59:e7:52:30:88:ec:ad:cf:0c:4c:b3:eb:a3:
61:b1:56:d4:90:8a:c0:97:aa:3a:59:b5:73:54:b3:
74:c5:6f:e1:69:7a:f0:3e:34:09:c4:75:b6:e7:ec:
33:da:fe:bf:0a:eb:c1:6a:24:e3:86:ee:b3:d4:b6:
ed:4b:a4:6a:f6:52:93:62:29:7c:9f:fc:88:c2:32:
6a:21:73:a2:95:12:b3:9b:70:d5:de:86:32:3a:75:
0f:c8:21:29:43:ca:d3:b4:47:ad:8c:3a:ab:8c:82:
c7:57:40:ff:3a:96:a7:ef:9c:43:b0:ac:af:b4:89:
2b:6e:65:4c:25:21:45:9d:79:05:d2:ec:b2:6d:6c:
28:2e:16:ac:19:7d:1f:23:bc:b3:53:b7:90:fe:ed:
87:ec:7d:0e:52:96:4d:48:13:18:da:0f:e3:ca:00:
9c:9f:04:3d:e2:eb:cb:e5:14:ba:5c:b7:4e:74:7b:
47:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:07:C6:6A:6D:4B:58:56:4A:CF:83:EA:E5:E2:84:72:FA:45:43:CA
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/sQfGam1LWFZKz4Pq5eKEcvpFQ8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0/24
109.122.195.0/24
109.122.197.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f4:6d:b4:af:4e:12:4e:5c:4b:a2:a0:72:4e:75:5c:3f:37:
bb:40:01:5f:66:2f:d4:7d:12:24:57:84:b1:f1:dc:29:2b:67:
77:b6:04:73:50:9d:c8:06:40:dd:e7:00:61:ad:0b:e4:56:7f:
f4:49:9b:eb:b2:ec:c8:99:b0:b8:b0:6c:62:dd:9d:a6:50:d3:
19:ca:a6:71:e9:40:2f:0a:d4:47:33:e8:7b:bb:0d:18:e3:67:
ce:3f:99:0f:ef:f6:6d:d1:14:6e:53:e0:51:5c:a5:ca:e5:fb:
60:60:f7:30:0d:2b:27:c7:1d:40:4c:cd:c0:7f:66:30:83:de:
bf:d1:09:d9:67:db:fd:87:69:01:cd:02:41:e0:7c:d1:7f:04:
c1:31:72:4b:91:69:76:81:38:db:6f:46:1d:a5:78:07:13:70:
a3:6a:f9:b2:4c:86:c2:e3:71:b0:e8:81:a0:4b:41:29:f5:08:
00:f9:60:32:77:ac:7d:a1:7b:83:4a:51:e7:f9:60:27:d0:a3:
92:09:b4:76:99:7c:3f:4f:de:bd:c0:23:8f:9e:a9:5b:24:e5:
54:ad:f7:15:80:e0:34:89:3c:f8:f9:95:af:91:0e:f6:43:93:
64:f9:dc:37:05:5f:f0:e3:b9:f4:d9:5e:3e:10:3c:bd:17:26:
b2:7d:05:aa
-----BEGIN CERTIFICATE-----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 at Tue Oct 31 10:25:35 2023 by rpki-client on console-ams.rpki-client.org