Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/7v9D8jcKInu7WbyGzqrV-KgQZx0.roa
File: 7v9D8jcKInu7WbyGzqrV-KgQZx0.roa (raw, json)
Hash identifier: HExTy89Cz9Ow1Q4VzHA2YA2BZkkMZivVRBbtn2soXOg=
Subject key identifier: EE:FF:43:F2:37:0A:22:7B:BB:59:BC:86:CE:AA:D5:F8:A8:10:67:1D
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 018A60370C13B19B635D4BAD091B351E0EFD
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/7v9D8jcKInu7WbyGzqrV-KgQZx0.roa
Signing time: Mon 04 Sep 2023 12:42:14 +0000
ROA not before: Mon 04 Sep 2023 12:42:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 109.205.152.0/22 maxlen: 22
109.205.156.0/24 maxlen: 24
185.6.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:37:0c:13:b1:9b:63:5d:4b:ad:09:1b:35:1e:0e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Sep 4 12:42:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeff43f2370a227bbb59bc86ceaad5f8a810671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4f:1b:4c:c5:16:20:94:f1:a0:06:85:6c:0c:
0e:4c:56:62:50:dc:c9:89:3b:10:71:e4:d7:42:6e:
32:4f:02:41:37:a8:a3:f9:ea:80:aa:c8:62:aa:fb:
f4:fa:34:af:91:63:6b:ae:01:de:76:ef:84:1e:89:
b9:52:49:1e:25:e1:ed:7e:1e:49:91:bb:23:de:e0:
a1:50:09:ed:0b:74:8d:90:bf:2e:1e:52:13:de:c1:
f2:99:d9:3c:e6:5c:f4:eb:e0:e5:a1:2f:bd:6f:6c:
09:4e:aa:73:c3:2a:10:63:ea:65:37:19:ec:e9:95:
8a:56:72:01:0d:a7:31:42:33:a3:92:25:34:e2:f1:
ae:2a:20:31:4b:8b:7b:f1:c7:8d:ec:f6:4b:38:cd:
14:6e:a7:c8:39:60:a5:b1:49:7a:e9:36:9c:33:94:
4d:60:5a:c2:cc:96:ac:f3:e9:16:d4:ba:78:22:de:
6b:96:2a:07:80:bd:87:9a:67:76:b5:0b:93:22:d2:
24:3f:d9:ed:bd:5f:08:03:3e:5b:38:96:0d:75:1f:
07:eb:f1:b3:09:55:a8:d4:ab:58:0c:f4:3d:dd:15:
8b:83:6c:af:61:f2:90:c7:d4:cf:f6:bc:a6:b3:45:
c7:2c:ba:91:ac:76:59:00:a4:bf:07:62:29:0d:ba:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FF:43:F2:37:0A:22:7B:BB:59:BC:86:CE:AA:D5:F8:A8:10:67:1D
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/7v9D8jcKInu7WbyGzqrV-KgQZx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.152.0-109.205.156.255
185.6.132.0/23
Signature Algorithm: sha256WithRSAEncryption
be:3e:29:18:54:44:f9:4c:47:fc:15:45:b0:69:07:6b:a2:72:
8f:3d:56:4b:a7:4a:21:51:a7:af:5e:b5:a0:a6:8a:fd:ee:06:
f6:32:49:01:1e:99:d8:08:11:2f:04:e5:ce:59:e5:15:db:28:
0d:20:66:73:27:e5:c2:41:90:d7:9e:9e:3b:6d:9b:c0:83:ae:
6d:c1:c1:36:8d:2e:62:9b:23:2a:00:d6:c4:15:1e:92:e7:4f:
d0:c7:ec:05:ce:a2:2d:eb:3d:3f:fd:4b:59:f2:85:c2:4d:46:
4f:28:29:9b:5f:9e:30:ec:39:a1:79:0d:d7:0f:86:2e:65:9f:
b1:c0:35:e8:b3:46:eb:90:bf:aa:9c:95:8c:6f:8e:f3:47:bb:
0a:e1:50:18:c0:24:73:ec:4a:80:4f:06:e0:93:4e:31:b7:74:
0b:b9:cf:42:fa:89:65:b0:b0:ff:2c:0f:78:0b:98:e4:39:58:
e7:e2:a5:a3:00:49:d8:72:92:93:dc:99:af:d6:a2:04:2c:10:
af:c6:8e:2a:db:7e:5d:85:11:34:0b:00:46:e3:dc:62:e3:8d:
0a:52:32:7d:03:5a:e0:82:ab:e5:8b:e7:6a:2c:73:cf:cd:8c:
eb:13:ec:ff:86:c4:c0:bf:29:8a:ed:96:c2:77:ca:d9:b0:4b:
57:88:fe:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:46 2024 by rpki-client on console-ams.rpki-client.org