Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/RC4ikab_YwsTQR2B747rsN29O3c.roa
File: RC4ikab_YwsTQR2B747rsN29O3c.roa (raw, json)
Hash identifier: e8TakYPq8PRgYU74Am0zgd3ZVCIx88YsL4XFq0yorkE=
Subject key identifier: 44:2E:22:91:A6:FF:63:0B:13:41:1D:81:EF:8E:EB:B0:DD:BD:3B:77
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 01856C0140362BDFC52D73F39E9EC9F5111E
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/RC4ikab_YwsTQR2B747rsN29O3c.roa
Signing time: Sun 01 Jan 2023 06:24:59 +0000
ROA not before: Sun 01 Jan 2023 06:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35684
IP address blocks: 109.71.26.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:40:36:2b:df:c5:2d:73:f3:9e:9e:c9:f5:11:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jan 1 06:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=442e2291a6ff630b13411d81ef8eebb0ddbd3b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:3e:09:b2:1b:65:30:d0:5c:f3:92:1b:4c:
62:f1:e8:17:6f:a4:6b:61:1d:a5:f7:1a:b2:7e:95:
aa:49:21:fb:c7:39:a2:f7:ee:e8:31:9c:ec:30:43:
4d:c0:60:3c:0e:20:e7:c9:d6:d4:22:46:6b:2d:18:
8b:b7:7d:31:cb:43:de:9a:b7:b1:ed:ad:90:93:b1:
fb:fa:2c:9a:6b:33:37:2e:9d:58:5c:72:bf:e8:0d:
07:74:f8:ef:a2:38:f2:42:e9:ef:70:c8:4b:81:c7:
4c:32:66:fb:c3:37:d8:3d:a4:66:cd:db:6e:b1:8f:
71:e6:e5:35:b1:d4:7a:6f:4d:d0:85:67:3e:5c:76:
cf:dc:3c:53:0e:0d:3d:80:64:24:5d:54:70:3c:11:
58:21:0f:e9:91:7d:52:1a:93:41:43:2a:ca:8d:bc:
dc:ea:27:c9:59:0c:05:b0:ed:a3:a5:1c:6a:ac:1e:
f6:25:c0:af:41:47:0a:06:fa:0d:ad:b7:cb:51:e5:
74:03:34:2e:97:9d:f8:cb:2c:11:2c:2d:04:af:7c:
9f:3c:dd:2e:2e:1d:05:05:87:7a:8e:27:cd:4c:06:
c0:fc:a2:f2:b8:06:33:e0:df:db:9a:03:9c:0d:59:
fb:b5:db:08:bc:de:d6:5e:96:10:f0:47:3c:38:86:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2E:22:91:A6:FF:63:0B:13:41:1D:81:EF:8E:EB:B0:DD:BD:3B:77
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/RC4ikab_YwsTQR2B747rsN29O3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.26.0/23
Signature Algorithm: sha256WithRSAEncryption
05:b4:52:9e:d1:c9:73:e7:d2:9a:cd:ac:da:c2:04:51:41:e8:
49:33:b2:25:c3:65:cb:0d:af:e1:dc:f4:d7:8d:44:f2:d2:f3:
ad:82:88:b4:7b:ae:42:42:ad:dd:fd:83:92:6b:19:63:5d:db:
c2:9e:a9:e1:36:98:de:a3:da:17:ad:f4:d0:47:57:db:5e:64:
f6:a6:78:a5:59:da:ef:c6:a8:2e:8a:4c:a5:3e:fd:0b:4d:72:
b1:98:7a:f9:11:c9:4e:bd:38:f0:52:73:57:ff:65:bf:b9:71:
43:ae:59:3f:eb:99:38:0e:d2:fe:ff:37:05:44:f3:a2:b5:bf:
5a:58:cc:ea:ad:2e:4e:41:02:d9:6e:ab:21:31:3c:f9:0b:7f:
17:17:1c:7f:7e:e1:6d:db:85:55:1f:af:4e:35:98:dd:12:55:
3e:f0:3c:65:29:4b:db:32:4b:4a:7c:e0:0e:6f:cf:b1:54:ad:
08:5b:01:b0:be:33:17:d7:2c:34:00:8a:5a:02:dd:2f:36:8b:
c4:b7:d7:6d:21:b7:ad:82:6d:66:b2:36:80:e4:1e:6f:ee:24:
87:db:30:1c:07:e0:1d:39:59:03:42:ca:f0:1e:39:e7:1a:a2:
8f:7a:e7:7e:04:f9:88:92:11:f6:29:99:5a:e2:54:e9:91:dc:
96:95:f0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:30 2024 by rpki-client on console-fra.rpki-client.org