Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/wW5hha2Eb3rWP8a1ZXnUFVzglps.roa
File: wW5hha2Eb3rWP8a1ZXnUFVzglps.roa (raw, json)
Hash identifier: Hj4PxIPxa7dPX5PLG+QExV3sU1PdWfC35R7JcMTqf1g=
Subject key identifier: C1:6E:61:85:AD:84:6F:7A:D6:3F:C6:B5:65:79:D4:15:5C:E0:96:9B
Certificate issuer: /CN=16779914bbc57b5eb908027a9d68b31017db8a0c
Certificate serial: 018573039CD1376ED15CCCA924B8AB85DE9A
Authority key identifier: 16:77:99:14:BB:C5:7B:5E:B9:08:02:7A:9D:68:B3:10:17:DB:8A:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneZFLvFe165CAJ6nWizEBfbigw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/wW5hha2Eb3rWP8a1ZXnUFVzglps.roa
Signing time: Mon 02 Jan 2023 15:04:54 +0000
ROA not before: Mon 02 Jan 2023 15:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59253
IP address blocks: 109.205.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:9c:d1:37:6e:d1:5c:cc:a9:24:b8:ab:85:de:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16779914bbc57b5eb908027a9d68b31017db8a0c
Validity
Not Before: Jan 2 15:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c16e6185ad846f7ad63fc6b56579d4155ce0969b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:bf:6e:92:cf:dd:45:d4:a2:42:3d:87:d3:
6f:e9:f6:da:73:35:a2:fe:67:2f:4e:0f:5d:9b:01:
a1:3e:43:7d:31:23:ff:89:c2:0b:9e:be:49:b8:fd:
8a:66:c4:81:e5:b9:a7:e7:68:ed:ef:be:4f:e4:7c:
cf:20:cc:ee:47:e7:b5:f3:60:f0:f4:94:39:d0:32:
5d:db:7c:4b:5c:6d:6d:04:a1:f8:f9:6c:a8:2a:1c:
bb:9f:0a:a3:11:ce:e8:38:45:6e:e3:02:11:45:4a:
f5:bc:42:9b:f4:41:d4:6e:fb:fa:8a:b3:16:62:75:
cc:22:de:25:a3:87:7a:32:b8:b1:9f:93:d5:a4:d7:
97:33:63:6d:75:ff:40:75:ff:27:3d:5c:1c:7e:da:
41:7f:f4:6f:be:9f:cc:00:29:70:3b:13:7e:26:2d:
90:a4:2c:4d:fb:85:91:43:38:31:32:73:b5:e9:77:
4a:55:8f:1d:6c:5b:a4:4d:3a:12:22:82:93:6c:ca:
9a:32:de:9a:eb:88:ca:f5:c4:c0:66:b3:fc:00:8a:
05:64:28:5f:4b:59:ea:1e:46:af:44:c7:4f:96:40:
74:ef:3e:d5:fa:e8:6d:76:96:a9:fa:1a:1a:91:c6:
04:4e:47:89:9b:dd:81:2b:f4:c8:f4:b0:b5:bd:1f:
75:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6E:61:85:AD:84:6F:7A:D6:3F:C6:B5:65:79:D4:15:5C:E0:96:9B
X509v3 Authority Key Identifier:
keyid:16:77:99:14:BB:C5:7B:5E:B9:08:02:7A:9D:68:B3:10:17:DB:8A:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneZFLvFe165CAJ6nWizEBfbigw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/wW5hha2Eb3rWP8a1ZXnUFVzglps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/FneZFLvFe165CAJ6nWizEBfbigw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.190.0/24
Signature Algorithm: sha256WithRSAEncryption
30:4d:12:bc:93:d5:49:cf:a1:4b:e7:df:de:20:0a:f8:be:e5:
48:1d:b3:8c:0a:eb:40:ef:ad:70:08:a9:9e:20:d3:73:f7:3d:
7c:9b:bf:ce:77:6a:5f:9e:59:5d:10:a3:ca:8c:d8:7d:06:18:
98:1d:0d:0b:58:a3:e8:3a:7c:52:bf:7a:75:6d:ef:57:8e:3a:
6e:f8:03:8d:fa:54:ed:98:45:94:09:51:f9:06:09:75:66:ac:
ba:56:72:ef:47:31:86:c1:9b:61:11:54:e8:7c:6a:47:96:28:
c3:32:05:88:fd:d3:a2:15:20:3a:c6:65:af:cc:85:4e:6d:1d:
84:42:c5:b9:d2:be:e2:40:4b:b0:2c:8e:e7:d7:e3:4a:bd:9f:
d6:ae:88:5c:39:b3:1e:dd:09:3f:e5:b4:e8:3c:ea:d1:f0:fb:
2b:9b:a1:b8:24:93:ac:e9:f9:68:b1:7a:c8:d8:7c:fb:3f:f9:
61:6e:c2:08:ab:f1:dd:d1:a0:fa:e6:2d:0d:a0:d3:61:b9:83:
55:21:0b:d1:33:f4:78:7c:cc:90:c0:a3:ba:46:af:82:39:e9:
6a:0d:0a:e8:33:f9:3b:d9:d2:3e:5d:7d:f4:09:8c:52:b3:26:
b7:f2:c0:da:db:ca:cd:1f:d3:99:f4:ed:ec:d3:e2:ca:22:e9:
2b:26:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:08 2023 by rpki-client on console-fra.rpki-client.org