Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/P2wdPat9xLztk1sSFdGDUIorzdM.roa
File: P2wdPat9xLztk1sSFdGDUIorzdM.roa (raw, json)
Hash identifier: WC7f1p3FUt/6BYjTpY/DGHcCFQ2Yx+a3EEKLeatYupc=
Subject key identifier: 3F:6C:1D:3D:AB:7D:C4:BC:ED:93:5B:12:15:D1:83:50:8A:2B:CD:D3
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 01856E0B130890375C6934A6977A41071D89
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/P2wdPat9xLztk1sSFdGDUIorzdM.roa
Signing time: Sun 01 Jan 2023 15:54:57 +0000
ROA not before: Sun 01 Jan 2023 15:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 109.166.38.0/24 maxlen: 24
109.166.37.0/24 maxlen: 24
109.166.36.0/24 maxlen: 24
151.248.68.0/24 maxlen: 24
151.248.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:13:08:90:37:5c:69:34:a6:97:7a:41:07:1d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f6c1d3dab7dc4bced935b1215d183508a2bcdd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e8:68:dd:23:b4:45:36:92:16:62:1c:60:bf:
0f:e4:52:53:a1:9d:33:be:c5:4d:1e:f6:86:c0:bf:
03:d9:d4:b8:9b:a9:10:dc:8e:6b:49:1f:09:ec:9d:
f2:d9:6f:d5:3b:84:7a:51:af:21:31:e3:30:4c:d1:
61:6d:20:f1:80:ae:bb:98:eb:d9:2d:11:73:3e:71:
6c:29:0d:66:55:c5:1e:ec:f9:df:3e:1b:db:e5:ae:
a3:72:17:ae:d1:34:09:81:cf:f5:b1:c9:c5:a4:69:
2a:ef:be:d9:06:95:37:f8:35:b5:d7:22:b1:b7:37:
cb:b8:47:00:65:52:a3:78:cb:93:a1:ff:91:93:de:
9c:af:a2:cc:dc:91:f3:c3:1c:fc:c8:d9:05:fa:17:
f8:30:a9:fe:72:40:5d:8d:ac:99:06:2d:02:36:4a:
25:5d:3c:bc:3e:6a:58:87:d0:45:26:60:31:bf:64:
93:b4:a6:72:8d:2f:f6:15:0d:87:b3:38:15:e7:d7:
2e:00:51:74:ab:18:68:0c:20:23:9a:7e:2e:1a:89:
41:1d:22:e7:5f:23:bd:fd:0c:1f:06:0f:c4:d0:a8:
92:7a:c0:ed:65:3d:8c:69:8a:3c:19:42:87:4f:a9:
7c:98:3e:40:4c:19:04:e9:60:a5:77:43:e8:86:af:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6C:1D:3D:AB:7D:C4:BC:ED:93:5B:12:15:D1:83:50:8A:2B:CD:D3
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/P2wdPat9xLztk1sSFdGDUIorzdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.166.36.0-109.166.38.255
151.248.68.0/23
Signature Algorithm: sha256WithRSAEncryption
62:9c:ec:21:b3:a0:e6:ec:24:6b:bd:9c:7f:b2:a9:16:3b:75:
ba:82:7d:3e:6f:6a:2c:3f:c2:05:46:be:7c:fe:f9:65:8d:33:
1d:45:9b:6d:8c:fe:48:79:02:15:97:1c:22:f6:54:3d:9d:a3:
90:9a:2e:74:1d:56:2f:74:31:4e:50:34:a6:b7:1e:78:e7:27:
f3:67:5f:96:95:8e:cd:62:ce:a8:e7:16:e4:23:10:7d:2f:cc:
df:98:71:ae:2d:24:99:4a:04:c6:cc:9f:e8:09:f6:96:d0:bf:
b8:69:8a:65:62:5e:aa:9c:3f:3b:29:fa:ad:65:00:b4:c6:ec:
2a:b6:29:59:94:3a:b7:aa:ad:56:a9:d7:f7:59:b8:8a:0d:f5:
f5:f3:97:51:1f:b5:71:87:79:6f:b9:f2:66:c2:66:af:bb:02:
99:89:cf:fe:0c:3a:50:51:65:d9:db:3e:cc:3f:ca:de:b5:17:
2d:f5:5f:2a:c5:a7:0a:7c:43:64:78:f8:e0:8d:70:e2:d0:7b:
0e:d1:26:86:fb:9b:32:83:7b:25:ce:29:be:66:09:19:f6:3c:
49:aa:ec:7d:6b:4b:23:01:da:e2:1a:18:36:bb:aa:cf:3a:95:
11:19:b8:84:e6:ca:c8:4d:3b:3d:2b:6f:86:0b:8a:e1:f4:af:
44:a9:65:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 28 14:57:29 2023 by rpki-client on console-fra.rpki-client.org