Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/PQxmXxAm-1QLNEIOwUGZpxol0EI.roa
File: PQxmXxAm-1QLNEIOwUGZpxol0EI.roa (raw, json)
Hash identifier: 5okKXftH/wKRoPEdaRr1m3QZ2VL1KEPTg5URQfIGYp8=
Subject key identifier: 3D:0C:66:5F:10:26:FB:54:0B:34:42:0E:C1:41:99:A7:1A:25:D0:42
Certificate issuer: /CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
Certificate serial: 0185714C411529641EF4CE75D79758D01F39
Authority key identifier: E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/PQxmXxAm-1QLNEIOwUGZpxol0EI.roa
Signing time: Mon 02 Jan 2023 07:05:00 +0000
ROA not before: Mon 02 Jan 2023 07:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210309
IP address blocks: 109.73.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:41:15:29:64:1e:f4:ce:75:d7:97:58:d0:1f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
Validity
Not Before: Jan 2 07:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d0c665f1026fb540b34420ec14199a71a25d042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:64:f0:bb:da:5b:3d:b3:a9:61:56:43:dd:19:
eb:9f:05:78:03:a6:f9:79:76:eb:29:d1:47:3d:af:
e3:22:52:df:6b:bf:fc:54:78:cf:ff:fd:e9:2a:c9:
da:47:da:82:97:bf:54:71:4c:06:eb:a5:73:27:bf:
6a:0a:71:54:ef:b1:ab:42:81:c5:a1:c5:3f:be:20:
23:e7:0f:c9:82:8a:43:3d:e8:f9:4a:f8:2c:62:7c:
95:01:ed:20:0d:6e:98:39:a7:55:98:da:39:e3:8c:
99:10:27:86:56:d5:0c:a9:fd:ce:ca:44:0a:cc:7a:
c5:9a:0e:6f:ec:a4:71:16:28:a5:87:25:d2:bd:e7:
9c:34:2a:58:9c:27:3f:e7:5c:d9:d7:3a:c1:15:f2:
8b:14:a6:d8:bd:5f:3c:13:72:c2:dd:07:16:e2:35:
06:a9:ba:ac:3e:0f:f4:d8:3a:dd:eb:72:0a:7c:ed:
24:94:60:2b:7a:59:d8:43:59:ed:f7:d9:5b:09:d0:
46:25:30:31:4c:29:07:54:fe:23:ec:78:5b:5f:d6:
45:78:88:05:03:dd:fc:76:2d:5f:98:ce:fe:1f:90:
fd:e3:e4:55:7b:ba:be:27:14:8f:d0:34:67:fb:2c:
c1:01:c6:a7:43:b6:40:35:76:8c:23:9a:69:47:e8:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:66:5F:10:26:FB:54:0B:34:42:0E:C1:41:99:A7:1A:25:D0:42
X509v3 Authority Key Identifier:
keyid:E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/PQxmXxAm-1QLNEIOwUGZpxol0EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.73.136.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:d4:b9:26:d1:58:6d:ad:36:3b:96:99:57:88:08:7c:be:2f:
40:96:5b:ba:0b:4f:84:62:e0:b5:3a:6e:75:27:5b:90:9b:56:
36:70:38:f8:a0:19:5b:a2:1a:2f:94:fe:19:b8:03:d4:2a:4e:
d5:8b:75:39:1f:68:0c:b3:1e:11:f2:b3:b9:97:f7:77:c4:db:
23:50:2c:4b:85:e3:4f:56:b6:75:da:c2:10:2e:3c:ac:b2:65:
77:2f:c1:b1:05:a2:4a:ce:96:32:a6:40:8b:03:9c:c4:a4:64:
18:16:67:98:f2:bf:72:ec:c5:2b:f7:0d:bc:17:43:e6:9a:1a:
d8:d4:3a:a5:70:03:44:34:4a:5e:f2:6a:fa:79:c6:ae:e8:66:
a9:e3:b2:eb:29:76:69:7d:02:9b:b7:53:a3:cc:a4:2c:bf:6c:
33:3e:b3:c6:60:48:a7:aa:4c:84:18:63:88:b7:5d:e3:39:4d:
86:b0:45:50:45:d5:63:b5:e0:c9:9c:69:bf:9a:8d:a6:a9:23:
65:5a:53:2d:07:04:43:c0:71:a0:fc:67:6b:dc:49:ee:d5:f9:
14:bf:f3:43:1f:f1:5f:d6:02:d5:ba:6a:58:ed:90:96:ca:b2:
56:8a:83:28:d8:42:9e:dd:b0:ae:dd:7d:0e:65:3a:21:9c:b4:
c2:ba:29:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:16 2024 by rpki-client on console-ams.rpki-client.org