Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/adPrbg--SAp6ycj_TBhZMNOHhMs.roa
File: adPrbg--SAp6ycj_TBhZMNOHhMs.roa (raw, json)
Hash identifier: W0GF+3wYzmX+cp6qEfKI4kyxApJrQJNxB5lJE8NYOZQ=
Subject key identifier: 69:D3:EB:6E:0F:BE:48:0A:7A:C9:C8:FF:4C:18:59:30:D3:87:84:CB
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA4D2D681F983FD2059C9DA121886F
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/adPrbg--SAp6ycj_TBhZMNOHhMs.roa
Signing time: Mon 02 Jan 2023 13:44:50 +0000
ROA not before: Mon 02 Jan 2023 13:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47193
IP address blocks: 109.248.64.0/19 maxlen: 20
109.248.112.0/20 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:4d:2d:68:1f:98:3f:d2:05:9c:9d:a1:21:88:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69d3eb6e0fbe480a7ac9c8ff4c185930d38784cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:97:bb:8a:80:cc:86:8d:83:2f:d0:50:31:51:
9b:08:ee:9e:d5:75:f1:fa:79:2c:df:98:db:1c:03:
a6:00:82:f8:f4:bf:ab:78:9e:fa:51:14:72:ef:a9:
ab:ea:d0:5a:03:86:bb:f7:46:2d:93:21:d8:2a:7e:
ff:15:ca:60:7f:29:bb:f2:4b:f7:5d:4d:a8:ee:fe:
eb:18:d0:9a:6c:4c:6d:2a:e4:c9:0a:98:52:f5:79:
de:7a:02:da:71:5c:80:3d:cf:6d:27:cc:da:97:03:
c7:b0:97:89:94:9d:1e:57:f1:ef:51:0e:4c:26:57:
f0:23:69:f6:4a:95:55:c4:db:ce:0e:d7:97:e6:f2:
b5:88:e8:16:07:bd:63:25:97:3e:d3:d5:2c:d5:bf:
b5:ab:a5:26:2e:8d:62:ce:3b:e8:75:6b:0f:5b:81:
06:06:87:51:72:ec:db:d2:bb:5f:6f:6a:83:4b:be:
94:5d:4c:a8:92:17:46:36:7b:11:5d:e0:94:7a:6a:
0f:59:fb:91:6f:44:1a:8c:06:0f:14:65:0c:36:11:
3e:b4:f7:17:81:c1:1f:c3:bb:b0:96:e3:36:a0:ef:
d4:44:8a:37:90:71:5e:12:4e:22:19:fb:02:c5:f6:
a1:38:4e:72:fe:15:6f:26:fd:60:fb:16:50:05:b3:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D3:EB:6E:0F:BE:48:0A:7A:C9:C8:FF:4C:18:59:30:D3:87:84:CB
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/adPrbg--SAp6ycj_TBhZMNOHhMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.64.0/19
109.248.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:63:5e:34:83:54:5a:62:38:7c:2e:b2:fc:84:2f:57:24:83:
c1:84:0e:b4:69:ab:6f:ab:01:ee:2c:2a:7c:16:7b:2c:95:a3:
67:61:73:6b:4f:6f:33:66:f8:4c:bc:13:11:f3:58:e5:2d:45:
5e:16:05:71:f3:18:22:ca:a7:df:e1:d9:18:1d:26:86:40:1b:
8e:8e:bd:15:31:42:66:c2:53:96:76:5f:88:84:24:8f:fa:f7:
bc:55:9f:cc:8d:db:27:0b:42:c5:3f:f9:d0:41:85:6c:b3:ea:
c7:87:63:38:f1:75:6a:e4:ba:70:54:d2:5d:60:78:7e:0e:ab:
ff:9c:8d:92:d6:53:ae:d0:55:56:65:50:7a:91:d2:0e:92:f6:
a4:1a:e4:1f:04:8e:7a:6c:42:58:5b:78:9c:80:7c:99:73:10:
91:43:ea:df:be:26:e3:8b:ac:bc:d4:01:91:3f:d4:b2:f4:46:
6c:92:4c:6d:eb:e5:8d:d4:2f:c8:1d:24:f1:45:88:d6:79:8d:
3b:a0:e7:c2:13:7a:4f:f8:4c:03:04:24:f9:7e:e0:11:68:bb:
f8:c3:1b:73:f9:58:42:41:5f:8e:c6:6c:57:27:ac:4c:ee:47:
fc:67:cb:7a:1d:55:1e:a5:4d:cd:6e:07:ee:f4:bb:8f:92:b1:
78:08:2a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org