Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/ej__21nffcg_QjkBGJuXvnBwfA0.roa
File: ej__21nffcg_QjkBGJuXvnBwfA0.roa (raw, json)
Hash identifier: jdKOcKZlEXC3IyaOI69AOFbSG0EIgbK4Xm9pg71qGvw=
Subject key identifier: 7A:3F:FF:DB:59:DF:7D:C8:3F:42:39:01:18:9B:97:BE:70:70:7C:0D
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018C5D547954ADB402C5F2EB8221DC72C836
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/ej__21nffcg_QjkBGJuXvnBwfA0.roa
Signing time: Tue 12 Dec 2023 09:21:06 +0000
ROA not before: Tue 12 Dec 2023 09:21:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34661
IP address blocks: 109.122.32.0/22 maxlen: 22
109.122.36.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:54:79:54:ad:b4:02:c5:f2:eb:82:21:dc:72:c8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Dec 12 09:21:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a3fffdb59df7dc83f423901189b97be70707c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:32:98:b3:75:8e:d9:ce:ef:82:d4:0f:79:
d4:5c:64:0b:29:b6:a0:ae:ba:83:49:f5:80:12:5c:
e8:66:37:98:9a:dd:a0:a9:38:11:97:62:8c:55:e0:
13:37:96:ac:07:c2:59:dd:de:28:fd:1d:25:62:da:
df:70:72:16:c7:96:5f:af:6d:24:a9:0a:1c:05:63:
49:4d:12:72:46:55:5c:06:1d:ff:fb:43:ea:ba:16:
a2:76:35:62:d5:70:49:46:d3:9f:a7:16:f5:74:07:
c3:e7:d7:a5:7d:fc:23:4a:2c:22:ad:c1:f9:43:63:
12:46:78:53:8e:7e:8e:7b:48:e6:c0:46:c6:41:f5:
96:1c:d2:15:c3:07:84:ea:b2:c1:56:20:b5:8a:cf:
64:1b:a1:b5:56:b1:90:9d:42:1a:35:a9:63:1e:67:
9b:f9:2f:7f:46:79:a9:11:86:75:8d:11:d1:f2:93:
c5:bf:af:94:27:8d:d8:49:0b:7c:4a:36:d0:14:46:
e2:40:d7:2e:ac:34:5c:59:3b:14:57:41:a3:49:3a:
55:be:c5:35:f5:78:2b:5d:b5:9b:56:30:f9:30:47:
e9:c0:ae:63:5a:4d:7b:5c:9a:08:6c:ad:93:82:47:
a3:f3:00:99:35:af:4d:53:08:dd:08:25:ef:68:cd:
77:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3F:FF:DB:59:DF:7D:C8:3F:42:39:01:18:9B:97:BE:70:70:7C:0D
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/ej__21nffcg_QjkBGJuXvnBwfA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.32.0/21
Signature Algorithm: sha256WithRSAEncryption
97:bc:b6:f2:2e:81:b7:81:a5:7d:5a:b4:bc:e4:44:1f:1d:b3:
90:9e:7e:7d:4a:32:af:a4:fd:6c:1c:9e:d5:15:bc:21:ea:e4:
e7:88:58:e8:5b:6a:34:0c:14:36:d1:62:6c:97:8e:72:9f:79:
9b:c4:40:dc:19:bb:9c:27:21:36:de:ec:43:de:8c:54:cb:d1:
4f:24:8e:12:a9:16:7a:0b:1a:d1:bc:6d:e7:95:e1:b7:59:b3:
57:9e:3b:7d:94:ec:67:86:8c:d5:da:0c:f3:64:3b:4e:2f:8b:
e2:53:60:1b:d0:f5:ae:4e:90:09:a8:e0:b9:a5:ba:76:ef:1b:
44:d2:32:1c:05:1c:24:85:77:1b:5b:47:9e:d2:51:4d:fa:6d:
3d:ba:f1:85:84:62:af:b8:3f:13:1e:93:41:6c:a2:7b:4e:e6:
cf:a6:5b:3e:b8:e4:fb:9c:20:ac:cc:00:da:df:d1:5f:24:16:
40:20:ed:5f:65:15:af:74:c1:cb:20:52:65:46:fd:5e:03:fe:
58:41:c8:15:2c:e0:88:3c:84:74:cd:fd:4b:6e:16:de:50:cd:
22:b0:f3:2a:3d:70:7e:85:d9:d6:28:8d:c6:75:5d:03:f9:b0:
f0:05:a6:93:dc:c7:23:71:d4:ab:23:f4:ba:7d:00:af:ab:5c:
fc:26:f7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 15:02:44 2023 by rpki-client on console-ams.rpki-client.org