Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/9ZWVSIXnFvtc6o6LHgSvX2Mg7Z4.roa
File: 9ZWVSIXnFvtc6o6LHgSvX2Mg7Z4.roa (raw, json)
Hash identifier: COvY/pTt408QKEfXn33hRmiqV0yHpvK2IuiwG9egIZ8=
Subject key identifier: F5:95:95:48:85:E7:16:FB:5C:EA:8E:8B:1E:04:AF:5F:63:20:ED:9E
Certificate issuer: /CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Certificate serial: 018688F4E0106740F0B4AED9B6CE44767829
Authority key identifier: E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/9ZWVSIXnFvtc6o6LHgSvX2Mg7Z4.roa
Signing time: Sat 25 Feb 2023 14:23:14 +0000
ROA not before: Sat 25 Feb 2023 14:23:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44489
IP address blocks: 109.164.0.0/17 maxlen: 25
109.164.121.0/24 maxlen: 25
185.131.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:88:f4:e0:10:67:40:f0:b4:ae:d9:b6:ce:44:76:78:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Validity
Not Before: Feb 25 14:23:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f595954885e716fb5cea8e8b1e04af5f6320ed9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:88:56:49:68:36:fd:aa:3e:44:59:7f:d1:
03:7f:ee:f5:6f:36:66:a7:d0:11:6a:b9:f1:87:e7:
df:10:5f:f0:4d:9c:76:e9:74:10:f2:04:7b:06:47:
6c:50:13:ff:d3:65:fd:13:81:30:bf:0f:fd:4a:c1:
20:12:4e:14:3a:c4:d7:05:c1:7d:75:86:61:00:ac:
23:1a:cc:1d:c7:13:e2:56:5c:a4:56:e0:bc:63:f2:
f5:dc:0d:03:47:cf:eb:8d:69:28:c0:87:6d:00:b3:
95:9a:15:91:e0:fd:b9:48:a2:d9:14:b4:45:81:8e:
e3:b4:3e:29:01:95:ce:58:1a:1f:e7:a5:0c:a0:b2:
97:b6:bf:32:df:eb:ef:b3:d9:76:79:b2:5f:71:3c:
9b:07:ca:9a:78:a2:52:b7:de:d7:98:39:2e:82:bf:
03:8c:b2:56:34:52:b7:22:6e:f2:2b:d6:eb:11:09:
68:ec:f3:05:8a:53:4d:38:7d:12:72:ba:81:2b:57:
47:ec:df:95:bd:4e:b4:0a:2d:c6:ab:7b:e2:dc:25:
46:7f:61:68:2c:fe:12:00:fa:d7:db:c7:42:41:43:
5e:88:45:b8:8f:a9:08:3f:d9:e7:83:64:42:a2:d3:
ae:dd:c2:02:cb:69:12:f3:c2:14:09:32:c1:b6:17:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:95:95:48:85:E7:16:FB:5C:EA:8E:8B:1E:04:AF:5F:63:20:ED:9E
X509v3 Authority Key Identifier:
keyid:E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/9ZWVSIXnFvtc6o6LHgSvX2Mg7Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.164.0.0/17
185.131.60.0/22
Signature Algorithm: sha256WithRSAEncryption
92:7f:78:1b:0c:85:bd:7f:3a:d9:2a:50:b0:a8:a0:03:1b:2f:
f1:43:76:ff:34:44:03:9b:f6:55:66:ec:24:81:75:8b:5e:ee:
85:d5:7b:69:c6:be:b0:18:f0:ca:4c:05:97:70:ce:53:ae:d7:
77:32:5e:9b:23:bb:80:6a:b3:bc:c6:10:68:81:08:44:5c:be:
36:ab:35:04:73:2e:0d:b6:ab:1b:99:40:16:05:f6:27:da:dd:
1c:94:20:fc:bd:88:c4:d9:66:c9:ed:1e:69:c7:b1:95:c3:90:
8e:2f:0a:5e:c5:f8:ff:35:10:c1:24:4b:87:d9:f1:bc:58:48:
fd:6e:c5:1c:2f:af:9b:21:39:ab:9c:0c:45:72:b6:d6:60:be:
a5:12:92:1e:f5:26:4e:a6:fa:d9:0b:a1:53:04:f2:92:db:24:
66:e5:2b:31:15:d5:da:ce:48:4d:29:47:46:df:0e:59:8e:dc:
d6:ac:69:c8:f1:0b:f3:0b:1c:ac:18:be:d1:07:c4:41:78:87:
09:f5:ce:83:a2:8b:a4:36:e8:31:61:34:f2:40:20:03:63:3e:
0b:fa:71:62:ed:a6:66:06:96:d8:df:73:1e:17:f8:37:67:42:
bb:7d:06:70:da:e9:b2:2c:23:e8:77:b4:16:71:31:63:cc:d1:
d2:60:c1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:29 2023 by rpki-client on console-ams.rpki-client.org