Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/RRX4iswWCDTbFZupK0m6Ss18qUc.roa
File: RRX4iswWCDTbFZupK0m6Ss18qUc.roa (raw, json)
Hash identifier: JhofcEZYmeiWKK/mqTZ1rdYaNsGP5eKZ8tOVZGDD1Ks=
Subject key identifier: 45:15:F8:8A:CC:16:08:34:DB:15:9B:A9:2B:49:BA:4A:CD:7C:A9:47
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 01856E2F99AFFC47FD78CADCE0BDFEC454B8
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/RRX4iswWCDTbFZupK0m6Ss18qUc.roa
Signing time: Sun 01 Jan 2023 16:34:51 +0000
ROA not before: Sun 01 Jan 2023 16:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43395
IP address blocks: 109.122.240.0/23 maxlen: 23
109.122.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:99:af:fc:47:fd:78:ca:dc:e0:bd:fe:c4:54:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 16:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4515f88acc160834db159ba92b49ba4acd7ca947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:75:a9:6c:72:e7:d7:34:4e:10:0b:39:57:be:
ad:b4:95:b5:cd:48:55:b7:4a:2a:7d:ab:a2:c1:4e:
d9:91:06:41:c9:44:8c:2e:58:02:4f:5a:48:c1:65:
1e:8f:8f:31:df:99:3d:a6:24:b6:29:92:e6:28:ad:
17:db:bf:a2:84:6c:74:cb:c6:77:7b:b3:ea:67:3e:
59:c3:d1:b1:66:59:c2:df:1d:d7:df:4c:74:35:32:
86:a8:53:08:13:19:cb:23:a0:34:47:04:3c:28:5e:
db:f9:d5:42:e5:76:6e:0d:98:83:f5:da:3b:68:45:
3b:8d:b2:d7:13:73:88:d2:7d:98:2e:f3:d8:7d:3e:
6b:00:d0:12:60:cf:54:ac:84:70:58:52:f6:15:51:
e9:a4:7c:40:05:0c:48:c9:2e:6e:0f:63:94:85:30:
06:dc:76:b5:84:db:5a:b6:90:4d:be:15:ae:5c:f9:
e7:ce:d2:48:32:5d:28:8f:bb:cc:6d:e8:90:88:40:
8c:d2:40:bd:82:6d:c4:34:aa:29:ca:70:b7:29:53:
24:f2:78:80:e4:51:c5:39:33:7d:d8:03:ea:bd:73:
65:c7:b9:d0:a8:b7:b3:b5:2c:04:27:1f:97:29:65:
ec:0d:19:c8:fd:bb:7f:4d:54:87:14:53:e1:f9:f5:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:15:F8:8A:CC:16:08:34:DB:15:9B:A9:2B:49:BA:4A:CD:7C:A9:47
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/RRX4iswWCDTbFZupK0m6Ss18qUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.240.0-109.122.242.255
Signature Algorithm: sha256WithRSAEncryption
3b:8c:cb:8c:67:8c:87:79:98:4a:18:3d:d4:14:f9:08:d6:dc:
23:2c:98:15:ff:97:08:a3:6c:b8:95:17:a0:64:1d:46:d4:6c:
67:de:90:98:bb:ec:e8:09:28:00:da:f9:4e:84:01:b8:a1:b0:
4d:31:e7:47:88:1b:f6:06:3a:ec:92:41:e3:a3:7d:3a:5a:a3:
b5:07:94:0c:0c:bd:eb:21:f2:14:0b:3f:58:8d:64:b5:d4:11:
6c:e0:df:1c:03:5d:ee:7b:9f:01:0b:74:b1:17:d8:3c:b3:9e:
36:75:eb:4c:fb:ff:f9:e8:ae:8c:29:3d:f4:0f:3c:cb:7e:da:
03:17:ea:8b:8b:63:be:02:25:67:43:64:ba:af:df:88:b0:70:
0e:5f:06:c2:1f:5b:01:6d:52:40:a7:57:47:48:cf:d7:63:5f:
c8:64:41:66:60:89:7a:47:7e:d3:2a:29:30:e5:45:52:ab:73:
a7:b1:15:e2:c9:c2:12:37:80:7a:1b:3c:99:74:21:d9:53:b4:
e2:3f:bc:07:1a:50:d9:8f:98:7d:b9:d3:ce:92:fe:ca:ff:a9:
7e:7c:91:82:76:e2:2c:17:7e:5a:5f:70:cb:9f:54:3e:8d:f0:
d0:f2:4e:31:53:0c:fa:ac:27:1b:76:b8:05:b4:88:c8:cd:3e:
69:1a:17:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:02 2024 by rpki-client on console-ams.rpki-client.org