Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/aTayhq9UhleGHNFZxMV1_-tj0Gk.roa
File: aTayhq9UhleGHNFZxMV1_-tj0Gk.roa (raw, json)
Hash identifier: pxHUoixsleHRYZGhKQ2isZsjlFKZ6RMg1D67oH+W6us=
Subject key identifier: 69:36:B2:86:AF:54:86:57:86:1C:D1:59:C4:C5:75:FF:EB:63:D0:69
Certificate issuer: /CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Certificate serial: 01868B110AB9F278338B93740F07F4B8521C
Authority key identifier: E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/aTayhq9UhleGHNFZxMV1_-tj0Gk.roa
Signing time: Sun 26 Feb 2023 00:13:14 +0000
ROA not before: Sun 26 Feb 2023 00:13:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44489
IP address blocks: 109.164.0.0/17 maxlen: 25
109.164.121.0/24 maxlen: 25
185.131.60.0/22 maxlen: 24
2a03:3a01::/32 maxlen: 56
2a03:3a00::/32 maxlen: 56
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8b:11:0a:b9:f2:78:33:8b:93:74:0f:07:f4:b8:52:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Validity
Not Before: Feb 26 00:13:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6936b286af548657861cd159c4c575ffeb63d069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:10:ca:65:32:63:be:dd:b8:78:fb:9b:75:
d3:a4:7f:89:9d:58:0e:25:dd:84:ed:8f:26:2e:d6:
26:f2:e6:60:3c:8c:e0:3e:e2:a6:52:40:b7:79:9d:
6b:23:a6:11:83:94:47:da:86:62:44:3d:e8:57:d8:
e5:8f:eb:c3:98:90:03:a9:8f:e1:23:f9:b6:9c:b9:
77:67:7d:a9:dd:be:7c:ab:c2:ed:55:35:b9:3c:92:
58:78:91:61:03:6c:af:be:fe:95:e5:a9:7b:74:03:
04:0f:6e:d4:13:59:f5:3a:13:95:80:78:bb:07:c2:
eb:d5:23:42:5d:fc:9f:b1:4d:bd:d2:da:e7:7f:65:
5f:1a:1b:de:5a:bb:73:e5:4e:cd:f0:23:90:86:31:
a2:80:4d:1d:e9:36:3e:6d:7f:10:05:0c:b1:80:a2:
74:b4:ec:d4:55:19:c9:28:2e:43:b3:13:07:0a:63:
60:91:4f:c2:51:e7:b3:49:18:35:2c:50:58:db:db:
bc:16:33:5e:bf:d6:09:82:20:0d:cf:e8:b8:7a:0f:
db:b7:4f:89:e8:14:ef:71:b6:84:0d:53:a9:f8:0d:
98:57:10:1e:e4:13:43:b2:9a:17:73:f6:d6:58:a8:
3c:d2:0a:0a:07:53:ba:ba:68:83:7b:ce:6c:45:78:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:B2:86:AF:54:86:57:86:1C:D1:59:C4:C5:75:FF:EB:63:D0:69
X509v3 Authority Key Identifier:
keyid:E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/aTayhq9UhleGHNFZxMV1_-tj0Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.164.0.0/17
185.131.60.0/22
IPv6:
2a03:3a00::/31
Signature Algorithm: sha256WithRSAEncryption
3f:9f:bc:27:c5:f5:57:da:84:b7:06:4d:29:41:46:8c:e0:c0:
73:65:26:80:a0:16:4e:cc:cd:e0:35:d8:09:b1:58:c5:3a:f2:
49:79:d1:64:47:6a:04:ec:b7:0c:40:86:3b:ce:14:9a:85:ec:
c0:55:51:50:4e:4a:9e:98:1a:2b:07:c8:49:dc:9b:c9:98:f4:
59:1a:95:f6:9f:1c:ca:e2:93:30:cf:e6:51:68:b8:cd:1b:a3:
14:a8:14:3d:f1:95:ef:f8:b5:12:c9:86:20:2c:e5:48:52:4a:
14:33:65:f3:0a:24:4f:63:fa:cf:84:c6:e2:59:02:1b:03:bf:
4e:ae:cd:b6:08:fd:24:88:b4:ec:f9:b0:36:da:1a:e2:6d:8f:
fe:a3:e5:bd:1b:14:19:18:68:25:a3:85:38:40:c7:cc:93:d6:
4c:e7:2b:24:3c:1b:97:85:e0:f1:e8:13:79:63:fb:a8:7c:60:
42:3e:37:95:7b:f8:0a:0b:43:8e:1a:15:60:2f:58:13:dd:fc:
59:ab:d9:ec:4b:32:86:87:86:e6:a6:d1:f5:e9:d6:d4:aa:35:
ec:a1:cd:e2:69:e5:10:62:21:b2:3b:44:e8:4b:73:2d:60:aa:
06:4e:03:b0:ae:50:cc:be:dc:76:5b:18:f2:69:76:e7:09:67:
24:73:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:50 2023 by rpki-client on console-fra.rpki-client.org