Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/dOl-h4WTgseYwMZ08mhPdvw0xsc.roa
File: dOl-h4WTgseYwMZ08mhPdvw0xsc.roa (raw, json)
Hash identifier: CyEd7bjeAPC7mC5QusN/IHqYOMEjjbesNGRPF93eWO0=
Subject key identifier: 74:E9:7E:87:85:93:82:C7:98:C0:C6:74:F2:68:4F:76:FC:34:C6:C7
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 018C6C8C0B3EC54D239BF38B09BB0EFCD6B8
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/dOl-h4WTgseYwMZ08mhPdvw0xsc.roa
Signing time: Fri 15 Dec 2023 08:16:06 +0000
ROA not before: Fri 15 Dec 2023 08:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49872
IP address blocks: 109.122.192.0/24 maxlen: 24
109.122.193.0/24 maxlen: 24
109.122.205.0/24 maxlen: 24
109.122.201.0/24 maxlen: 24
109.122.213.0/24 maxlen: 24
109.122.207.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
109.122.215.0/24 maxlen: 24
109.122.217.0/24 maxlen: 24
109.122.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:8c:0b:3e:c5:4d:23:9b:f3:8b:09:bb:0e:fc:d6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Dec 15 08:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74e97e87859382c798c0c674f2684f76fc34c6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:d0:f1:79:72:2d:3b:32:ea:b7:d9:61:78:
1f:fd:2b:0b:ab:b9:30:bd:2f:7c:eb:2e:4a:0b:25:
0e:55:69:48:0c:72:78:bb:d2:cb:9d:d8:19:e4:32:
c1:3b:c6:b1:e3:28:de:17:80:33:88:49:ed:04:7f:
95:4b:dc:a0:ce:b8:4c:3f:87:c8:a5:eb:33:84:7d:
80:1a:74:dc:a9:d1:9d:cd:95:98:a3:a9:66:1e:58:
35:93:c2:ef:7e:3a:4d:fa:ae:b8:9e:34:66:bb:95:
22:ec:c2:14:1b:0b:5e:68:56:7e:0c:1a:16:1e:36:
59:4a:ac:e3:df:90:89:6a:d0:36:14:ed:32:94:07:
c6:71:41:89:99:51:81:66:ad:67:9a:5d:48:f5:6b:
3a:d6:d8:78:b0:f3:c0:1b:56:7c:14:31:8d:56:f1:
7c:8e:52:20:45:06:f5:bc:ee:1f:2b:00:4a:e6:1c:
ee:cc:d5:f6:74:61:fb:c5:4e:1e:7f:aa:af:7f:a8:
e0:bd:49:d5:ec:60:f3:d1:b6:42:02:c5:44:54:ab:
e6:cf:b4:94:02:6a:11:15:bf:98:fd:b4:14:08:01:
c5:67:d0:ee:2b:7d:4d:40:bb:50:ce:75:da:86:fa:
56:d8:a6:e1:53:11:71:d5:4b:17:61:88:97:4d:6a:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E9:7E:87:85:93:82:C7:98:C0:C6:74:F2:68:4F:76:FC:34:C6:C7
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/dOl-h4WTgseYwMZ08mhPdvw0xsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0/23
109.122.201.0/24
109.122.205.0/24
109.122.207.0/24
109.122.210.0/24
109.122.213.0/24
109.122.215.0/24
109.122.217.0/24
109.122.220.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e6:f3:ee:b8:bc:9b:99:fc:41:3a:56:d4:47:8f:2b:1a:33:
b3:65:d3:bb:a3:bc:84:33:c0:b9:72:38:d8:ff:2d:a1:c9:5a:
9d:a7:b5:45:45:31:51:b2:93:3b:c5:99:3c:fb:e8:a2:b8:26:
87:48:8b:12:1a:d0:c6:92:b7:c1:aa:da:0a:f9:94:76:9e:62:
22:50:e3:fb:53:fb:f6:d9:1d:1a:d4:8f:d4:88:74:77:71:c7:
5b:be:7f:c4:4b:9f:fd:d7:94:42:65:8c:5e:c5:11:d7:0b:0a:
79:fe:bc:9d:9b:25:f1:2e:ac:6c:02:82:de:5b:42:27:e4:2d:
8d:03:72:99:34:34:4c:a4:6a:c6:f5:12:15:5f:ad:b2:e1:df:
32:b4:e8:81:70:61:a3:68:59:63:aa:45:3b:94:74:14:f9:37:
a8:11:83:a4:2f:92:88:05:9f:2c:4e:58:42:88:30:6f:a6:d9:
6e:0b:7d:cd:e3:4b:42:7d:86:38:ec:8d:97:5d:3d:70:fa:77:
f2:64:a0:4f:15:f8:ac:cf:82:79:b7:32:be:a8:21:a0:b2:dd:
00:bb:1f:f0:de:bc:ca:70:d6:37:d8:ef:e6:4c:2b:a5:b7:93:
c3:61:8f:33:05:5a:f3:94:c4:5a:e6:a6:d5:e3:6a:45:4e:d1:
38:d5:c5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:53 2024 by rpki-client on console-ams.rpki-client.org