Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/aEfPUShfCjOBChqJ4So1xhTxP_w.roa
File: aEfPUShfCjOBChqJ4So1xhTxP_w.roa (raw, json)
Hash identifier: ZUnM436bszFDLk3PotHmuEDLiQM3Ciw3OH07ew6IoP8=
Subject key identifier: 68:47:CF:51:28:5F:0A:33:81:0A:1A:89:E1:2A:35:C6:14:F1:3F:FC
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 01857094F15238BE8F33F10E8CFABA32DE12
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/aEfPUShfCjOBChqJ4So1xhTxP_w.roa
Signing time: Mon 02 Jan 2023 03:44:47 +0000
ROA not before: Mon 02 Jan 2023 03:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49872
IP address blocks: 109.122.193.0/24 maxlen: 24
109.122.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 07:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f1:52:38:be:8f:33:f1:0e:8c:fa:ba:32:de:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Jan 2 03:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6847cf51285f0a33810a1a89e12a35c614f13ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:8c:d8:11:40:19:46:a4:c1:a3:e0:e1:10:
64:58:07:31:4c:16:6d:c5:91:fd:ae:61:57:1a:7f:
1f:81:e9:81:f3:4f:0c:49:f5:d1:f3:8c:d2:50:f4:
c3:12:a1:2b:96:9a:8c:22:06:c5:34:f7:82:4f:64:
6e:8a:ba:95:bb:6f:e2:a5:bf:61:d6:ff:34:6c:1b:
05:1a:f8:6e:21:7f:04:f6:43:49:0f:39:75:8f:12:
6f:85:57:f4:df:5c:46:01:b8:f8:bb:d7:51:5a:25:
ca:7a:6c:20:cb:66:30:9e:f4:64:64:70:41:71:f0:
0b:c6:41:64:5f:8d:e2:42:c2:9d:0a:55:af:eb:cc:
7a:8a:d7:45:da:ff:e8:9b:f6:f9:59:f0:65:e8:08:
8b:bd:87:a4:9a:a1:7e:7a:2c:f1:f2:bf:58:a1:22:
d5:08:30:71:02:fc:39:43:69:c1:5b:d8:df:4d:fd:
79:4d:f8:e9:a0:bc:7a:33:9b:09:ee:4b:a3:83:f6:
16:e6:62:82:2f:8e:49:38:cf:78:ae:93:f4:6b:26:
ae:b9:c4:b5:78:28:a1:8e:ff:a5:6f:29:c1:c1:0e:
6c:0c:a1:69:df:02:44:b4:ea:9b:68:09:9a:0b:b6:
df:93:95:76:7c:d7:b8:20:d6:07:17:a1:87:74:fb:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:47:CF:51:28:5F:0A:33:81:0A:1A:89:E1:2A:35:C6:14:F1:3F:FC
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/aEfPUShfCjOBChqJ4So1xhTxP_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.193.0/24
109.122.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:87:80:54:ef:c7:23:e0:29:c7:bc:19:72:93:06:ee:7e:08:
6c:4b:0f:e7:34:6b:14:71:9e:c7:ee:0c:2a:b7:e5:c0:dd:10:
d5:22:3c:92:aa:74:50:c0:74:d4:6a:ac:50:4b:c5:d4:61:80:
77:af:48:fb:11:2f:bf:dc:fa:7c:86:35:d0:30:06:c4:43:09:
92:91:b4:d7:af:75:d7:9f:0a:b9:20:55:c4:c0:92:b2:13:ac:
1c:a1:dd:c3:2b:9e:93:d0:01:3f:f3:85:b3:df:0a:2f:79:08:
26:d7:b7:48:ec:f9:33:7c:90:a0:e3:c9:1f:5f:5b:0b:ea:44:
c9:94:bf:7a:34:a8:f6:a0:48:c1:c8:91:36:88:9d:5d:52:60:
fb:9d:61:bf:79:90:ff:f4:1c:da:17:29:66:c4:f6:ee:57:cc:
81:44:de:fd:e0:76:b6:fb:91:e9:1d:a2:72:84:ca:07:77:4b:
d9:82:a1:17:a6:4c:4a:2c:74:92:95:38:4b:32:0a:47:8e:ff:
40:6f:22:86:df:5e:b3:d2:e4:cd:3e:c4:1c:52:a1:75:2f:8b:
c7:3e:53:45:d7:11:e4:f8:9e:d1:60:f5:20:c1:be:2d:01:e8:
0d:a9:89:15:fb:9b:db:62:70:9a:35:0b:ab:d1:c4:8f:9e:61:
2a:ff:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:57 2024 by rpki-client on console-fra.rpki-client.org