Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/_-MQ32Up9XuqU9hZRmya3M5j0sQ.roa
File: _-MQ32Up9XuqU9hZRmya3M5j0sQ.roa (raw, json)
Hash identifier: 0oiMvEUYs6cY7ZRTbwPrR6Ql4/GyjZRvizwMd46hmXo=
Subject key identifier: FF:E3:10:DF:65:29:F5:7B:AA:53:D8:59:46:6C:9A:DC:CE:63:D2:C4
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 01856C013EDFB8C2568C687F02A027F8D899
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/_-MQ32Up9XuqU9hZRmya3M5j0sQ.roa
Signing time: Sun 01 Jan 2023 06:24:58 +0000
ROA not before: Sun 01 Jan 2023 06:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 109.71.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:3e:df:b8:c2:56:8c:68:7f:02:a0:27:f8:d8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jan 1 06:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffe310df6529f57baa53d859466c9adcce63d2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:89:df:c2:16:9a:94:3b:94:89:6c:c3:cf:
dd:ee:a2:81:b9:85:94:81:3e:f0:0f:8f:3d:e0:aa:
a7:21:09:bd:0a:d6:b8:e7:1e:9c:22:74:93:bd:a8:
e8:40:4c:8b:10:e2:c5:f9:98:b5:23:13:26:c0:4d:
82:f6:0a:5b:d2:b3:4f:db:ca:84:9f:14:11:1b:3e:
8b:27:3f:a6:cc:ca:b3:43:5c:34:2d:d4:59:e1:fc:
f6:be:cd:4c:9a:cd:52:78:41:60:69:cf:1c:e4:a6:
8a:76:9b:6d:53:87:9b:30:f6:20:83:7b:59:b1:bc:
11:12:07:4f:c7:87:25:e5:ac:38:2f:16:fd:29:50:
b0:4f:37:e6:49:a4:66:22:aa:74:e9:73:a5:e8:dc:
1e:5c:08:7f:6b:18:a5:0d:d4:72:36:f7:da:57:ca:
b3:7e:cb:43:17:cf:85:b5:f5:b3:95:05:28:55:7f:
6d:d7:4a:f5:28:76:9e:56:ae:ac:ee:20:8c:d5:68:
fd:f5:6a:79:57:ff:ad:a8:78:5e:03:ba:97:34:c0:
f2:41:c6:4f:d8:91:65:ad:05:0f:d2:6a:80:22:0e:
7f:47:83:30:91:b0:2c:c4:96:4c:26:85:c4:74:2f:
21:cf:23:16:3b:fb:7e:e6:6f:a9:8c:10:5c:c6:76:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:10:DF:65:29:F5:7B:AA:53:D8:59:46:6C:9A:DC:CE:63:D2:C4
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/_-MQ32Up9XuqU9hZRmya3M5j0sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.24.0/24
Signature Algorithm: sha256WithRSAEncryption
66:30:c7:d1:c2:df:08:4d:92:a1:87:d8:28:ba:b3:03:ff:14:
5e:a8:db:e4:6f:18:81:94:77:2d:0f:5a:d0:35:29:72:28:6a:
5f:de:32:a8:82:5c:0c:7c:0e:f1:e2:10:bb:cd:4e:96:cb:83:
66:4c:a9:d3:13:ec:04:99:80:11:44:c8:93:3f:0b:d7:82:e3:
d2:5b:b0:2d:56:bc:6c:1a:3d:7c:ac:25:e0:a4:49:19:3d:39:
ae:e9:9f:77:e5:90:0e:a7:90:65:c7:a3:02:5f:c3:c6:58:bd:
af:46:1c:5c:c0:92:bb:21:83:a7:e6:9e:e5:4d:8a:c6:b5:db:
ba:be:f6:1c:a7:61:8e:ee:61:a6:c4:de:5a:93:6a:bb:82:be:
38:1f:9f:30:4e:b7:cf:c7:2c:42:ce:fe:8a:17:99:d4:db:01:
72:8c:61:ac:96:5c:e7:c9:29:6c:f5:89:4a:54:b4:e3:e3:ff:
06:2d:ee:35:10:5f:f1:ad:33:48:e8:3d:9b:21:86:d1:d0:32:
95:66:ab:7e:fc:cc:f4:09:d8:0f:90:92:9d:41:eb:95:4a:72:
7b:16:75:f5:28:f9:9a:e1:43:63:9c:ed:2a:a1:88:17:6b:0a:
a3:44:32:a1:4e:fe:3b:64:da:a3:90:82:6a:e9:42:82:fa:81:
52:d2:25:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:30 2024 by rpki-client on console-fra.rpki-client.org