Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/E0Nq2dEl2ADBbOD4ZKUzDbpObRk.roa
File: E0Nq2dEl2ADBbOD4ZKUzDbpObRk.roa (raw, json)
Hash identifier: LA/DTsakWPoSS5sivkF7wDfI23ftgB2Pr490VHu5eNU=
Subject key identifier: 13:43:6A:D9:D1:25:D8:00:C1:6C:E0:F8:64:A5:33:0D:BA:4E:6D:19
Certificate issuer: /CN=c63976b4b9b2ac900b24ff41e64e455e0f1ce725
Certificate serial: 018572D5AECB6B1D4ECF5768CFB89459BB73
Authority key identifier: C6:39:76:B4:B9:B2:AC:90:0B:24:FF:41:E6:4E:45:5E:0F:1C:E7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjl2tLmyrJALJP9B5k5FXg8c5yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/E0Nq2dEl2ADBbOD4ZKUzDbpObRk.roa
Signing time: Mon 02 Jan 2023 14:14:44 +0000
ROA not before: Mon 02 Jan 2023 14:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 109.107.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:ae:cb:6b:1d:4e:cf:57:68:cf:b8:94:59:bb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63976b4b9b2ac900b24ff41e64e455e0f1ce725
Validity
Not Before: Jan 2 14:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13436ad9d125d800c16ce0f864a5330dba4e6d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:83:27:10:86:37:1f:5c:9b:67:4e:da:c8:68:
48:0a:ba:d4:d1:56:70:0e:d3:60:2f:86:13:d9:62:
ce:6b:e5:77:6d:9e:4d:ee:f6:33:fc:41:a9:55:03:
1a:36:c6:9b:3b:5f:5d:c1:47:88:43:8f:ca:d0:9e:
dc:29:75:3a:55:c3:57:d1:6f:f7:ff:cf:9c:dc:58:
1e:f6:e6:a0:6c:d1:34:1e:c5:0c:9c:b4:ee:87:53:
76:9a:63:8c:3c:03:89:2a:fe:36:60:2d:29:de:64:
1e:01:0f:75:0c:76:78:ac:12:e8:74:6d:a2:87:dd:
03:f5:d2:8a:05:39:b2:ac:16:50:2e:83:ab:ef:b1:
1b:8d:2e:e2:b5:e4:60:8c:59:7c:1c:0a:3b:e6:26:
06:f8:98:9c:3d:e5:1f:c2:d1:34:31:a1:6a:c4:62:
ef:d8:21:5c:8a:8f:04:1f:44:d4:d8:c0:6d:7c:2f:
0c:4c:b0:78:22:39:04:2b:1d:39:b9:9c:d3:2a:36:
fd:da:0e:87:f5:ab:bd:bc:b4:1d:dc:1b:e6:d0:38:
14:2f:45:20:57:da:ba:3f:62:ce:22:f0:5c:f6:7f:
73:6b:e3:16:f6:f9:ee:09:da:b3:bb:70:73:94:b4:
63:ec:0b:38:39:10:da:95:e9:cf:2f:16:ca:ac:a0:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:43:6A:D9:D1:25:D8:00:C1:6C:E0:F8:64:A5:33:0D:BA:4E:6D:19
X509v3 Authority Key Identifier:
keyid:C6:39:76:B4:B9:B2:AC:90:0B:24:FF:41:E6:4E:45:5E:0F:1C:E7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjl2tLmyrJALJP9B5k5FXg8c5yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/E0Nq2dEl2ADBbOD4ZKUzDbpObRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/xjl2tLmyrJALJP9B5k5FXg8c5yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.151.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b8:a1:1f:92:2d:df:1f:57:f7:34:52:c9:77:5c:85:a5:76:
f6:d1:71:52:74:ba:0d:e6:73:86:98:5d:9c:76:77:96:74:a5:
35:81:da:ad:b3:4b:f3:7e:ad:be:45:f5:bd:ee:33:db:0f:9b:
7d:82:8d:8b:85:e6:34:b9:a5:e3:36:5b:ca:d3:2a:8a:99:9c:
5c:85:76:ed:01:b9:79:58:2e:42:78:93:08:48:8e:5e:5b:4b:
23:ff:83:a0:ba:e1:a0:42:ab:d2:83:29:53:79:38:51:36:2f:
23:87:d4:e0:45:3e:7d:a2:4a:95:19:ba:94:53:99:84:33:1d:
5f:b6:11:c5:f8:56:d7:86:23:59:bd:00:6d:c9:ab:66:94:85:
9b:98:b6:04:cc:b8:9a:65:9c:d3:b3:e8:aa:66:4a:2f:96:9a:
62:9d:02:4d:e1:b6:67:f0:4c:f6:b4:58:5a:3e:a4:e6:6e:7d:
52:18:b1:28:62:1d:85:ec:8a:1c:e9:40:45:0b:34:59:d2:ca:
2d:15:7a:02:f1:eb:6d:6e:2f:ec:15:d6:3f:52:ee:a2:a0:37:
09:5a:63:ad:a9:26:b1:0d:f4:8d:00:6e:e6:bc:48:06:e3:ba:
f6:76:ba:3f:48:6e:7f:a4:f4:4e:e2:69:a8:5d:c1:03:04:bb:
59:14:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:24 2023 by rpki-client on console-ams.rpki-client.org