Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RoEVsKxfUIsnJbrMKWoxdJREQkk.roa
File: RoEVsKxfUIsnJbrMKWoxdJREQkk.roa (raw, json)
Hash identifier: ++QswxuuKMDFBx6fS4LXzMzwQE67Ihs/CS2vDUwwUxc=
Subject key identifier: 46:81:15:B0:AC:5F:50:8B:27:25:BA:CC:29:6A:31:74:94:44:42:49
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7D1C6A5C28486B3591EDF76A50605
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RoEVsKxfUIsnJbrMKWoxdJREQkk.roa
Signing time: Mon 02 Jan 2023 09:37:27 +0000
ROA not before: Mon 02 Jan 2023 09:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 109.233.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d1:c6:a5:c2:84:86:b3:59:1e:df:76:a5:06:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=468115b0ac5f508b2725bacc296a317494444249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:18:2b:c2:83:b6:2a:54:7a:ce:6a:b9:39:
dd:f3:fe:57:9d:e3:40:5d:0f:2e:dd:c4:6e:5f:90:
81:6c:b0:cd:1d:fd:ba:f4:93:6a:d7:c7:f2:7c:99:
7d:9a:9f:5a:70:57:71:7e:f0:50:2e:8b:81:9e:e1:
43:b0:29:52:ea:1c:58:59:1f:90:63:a8:2d:03:ba:
0d:4e:2c:da:6f:c0:e7:08:f7:bd:76:92:a1:2b:cd:
c3:8d:70:4c:ee:82:be:cd:8c:aa:7a:3a:08:23:9b:
05:f0:8a:91:60:9d:1a:c5:05:8d:6a:24:97:20:f3:
89:80:4a:0b:b1:32:cf:f8:44:76:4b:8d:45:0d:d4:
ce:4c:0e:82:9c:9d:82:a2:91:10:03:44:ba:06:10:
8c:ad:f3:21:74:05:47:2e:1f:5b:ba:af:69:9a:b2:
73:3b:00:b0:82:be:70:e1:41:14:c5:5e:d6:5e:d2:
b6:af:97:96:d8:91:0a:c7:cf:71:e4:48:76:55:24:
8d:aa:29:bf:1d:87:a9:5c:10:4a:b9:e2:2b:c7:da:
4b:52:c9:32:ea:cd:36:ec:fa:00:7c:56:4a:29:5d:
40:fb:9b:a1:15:6e:ab:3e:d9:49:a2:fb:47:e8:ea:
b6:f5:79:8d:06:85:83:0a:dd:d9:89:a7:7c:fd:ec:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:15:B0:AC:5F:50:8B:27:25:BA:CC:29:6A:31:74:94:44:42:49
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RoEVsKxfUIsnJbrMKWoxdJREQkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2c:f1:6b:23:51:f9:c2:1c:c0:ae:9a:c1:5c:99:ad:46:d3:
5d:a6:4f:3c:76:9c:85:92:f9:94:a4:42:97:48:98:68:72:5f:
9a:53:e9:6f:18:82:b0:09:3a:10:5d:03:db:8f:27:9a:72:ad:
86:74:dd:b1:10:e7:c4:51:0e:28:22:d1:12:8a:16:d4:40:d7:
c2:c4:d0:2b:b0:d0:f4:7e:9e:8b:43:23:b1:de:2a:bb:32:dd:
dc:3b:e5:80:42:53:14:31:a1:3c:62:70:2b:dc:a1:28:06:28:
44:60:d9:ae:05:c0:78:8a:2d:66:73:94:bb:28:f4:6b:fa:3e:
14:57:58:1b:8d:3b:3d:8c:b2:e2:6f:e5:f8:bb:e1:ce:f3:eb:
81:5b:c6:39:91:b8:02:29:49:ab:40:77:8b:66:a1:b2:02:5c:
4d:e9:ea:a7:1a:dc:71:d7:e5:5d:53:ff:2a:84:43:47:4e:ab:
27:27:56:87:8c:ce:30:31:b9:1a:44:1c:1a:b9:f9:80:63:9c:
38:2b:2c:f5:7d:1a:e8:dd:19:75:14:0d:4c:5a:8b:2a:67:92:
e9:d4:1d:bb:81:d3:12:24:f9:f7:9e:1a:7b:99:09:ca:a6:5a:
9d:d9:fb:d6:14:b3:29:1d:db:35:eb:f2:7d:e1:20:19:77:49:
6e:3b:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:57 2024 by rpki-client on console-ams.rpki-client.org