Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/F5hleASihmG85EGARO2efDBqr5I.roa
File: F5hleASihmG85EGARO2efDBqr5I.roa (raw, json)
Hash identifier: 9bWIxH0CTHsWijI+iHTXvq8v7c0gpW4vtXpgrjrhN60=
Subject key identifier: 17:98:65:78:04:A2:86:61:BC:E4:41:80:44:ED:9E:7C:30:6A:AF:92
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 01856E2F9F30ABEE91136030FD5EC78DD333
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/F5hleASihmG85EGARO2efDBqr5I.roa
Signing time: Sun 01 Jan 2023 16:34:52 +0000
ROA not before: Sun 01 Jan 2023 16:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58192
IP address blocks: 109.122.251.0/24 maxlen: 24
109.122.250.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:9f:30:ab:ee:91:13:60:30:fd:5e:c7:8d:d3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 16:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1798657804a28661bce4418044ed9e7c306aaf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:55:d7:c1:92:1c:63:e3:40:9f:08:b0:33:58:
9c:02:27:94:32:fa:ff:fe:7d:84:c6:f0:a8:06:7a:
41:a4:32:12:98:23:fc:74:58:8f:8a:05:fb:76:32:
19:66:7d:b2:78:9c:38:bb:f0:fd:af:72:74:b7:71:
5c:16:f7:25:9c:f9:ef:5d:db:61:7d:ab:2c:3d:85:
20:07:7e:15:63:b8:87:71:1f:44:51:f3:78:d2:21:
36:6f:82:32:97:eb:72:be:86:73:fe:af:97:7b:8c:
2f:fd:30:84:18:fc:d3:df:92:7f:84:08:35:99:63:
a3:33:c3:b8:b9:fc:f1:d5:ba:7a:c2:12:7b:45:0e:
44:a4:34:02:48:ab:0d:36:f4:8e:08:5e:b9:fb:bd:
ed:2f:92:b3:3b:08:ad:31:f3:77:ae:e1:f6:ed:1b:
41:4a:55:24:21:aa:c2:82:52:19:0f:0b:4e:80:a7:
22:55:29:ae:9f:55:d6:05:50:dc:dd:25:87:81:5d:
b3:9b:4b:81:ed:5e:08:bf:7d:5f:f1:d3:d6:40:2c:
ba:5f:b4:4c:6c:6d:ea:5a:11:e6:e8:d3:7a:bc:54:
2d:6d:3d:29:23:c6:8f:de:61:0f:66:1a:a8:25:e8:
14:02:28:bb:85:3d:b1:77:52:40:86:44:e7:6c:ed:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:98:65:78:04:A2:86:61:BC:E4:41:80:44:ED:9E:7C:30:6A:AF:92
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/F5hleASihmG85EGARO2efDBqr5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:22:39:e8:55:91:9b:16:19:9f:9d:7e:f7:b0:d7:f2:71:5d:
99:01:4a:a3:32:88:ed:79:36:b7:8e:f7:c2:ed:33:da:46:ed:
23:e5:ea:c6:6b:8a:ed:cc:e9:7c:29:ab:b9:1b:7f:4b:cb:86:
fc:9b:98:3a:e3:8f:96:be:6c:70:d2:88:60:62:ed:66:1b:32:
6d:00:26:03:b8:0d:bf:4b:60:34:b1:f1:ed:06:33:92:d6:b4:
6c:8e:c9:2a:d3:f8:0d:99:be:bd:a6:46:87:43:ee:f0:81:76:
51:46:a7:ef:04:70:01:4c:74:89:31:a3:6a:41:c7:0c:19:a4:
ce:ce:fa:79:d2:e8:ce:d7:b7:63:15:35:f9:54:0f:65:7f:ef:
f1:cd:c8:33:26:1c:ef:95:d7:d5:5e:1f:4f:2b:b9:ef:0d:f0:
f4:33:2d:a6:b2:c7:6d:6a:4b:d6:74:17:f6:f9:d9:1b:d1:01:
29:30:08:ca:53:76:bc:49:df:64:4c:99:91:3c:e1:64:7a:9a:
44:16:85:ad:d0:b5:31:b5:1f:8d:6e:8e:3e:aa:b0:15:ea:07:
3e:8a:96:a1:96:d3:15:38:74:72:51:a5:cd:0d:6c:cb:b1:da:
4a:81:ab:a7:a3:ac:02:7d:a8:b2:3b:32:70:7f:2f:14:57:34:
e7:7d:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:50 2023 by rpki-client on console-fra.rpki-client.org