Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/7JoxH1xPakZBiz-qkCpT5-SIMSg.roa
File: 7JoxH1xPakZBiz-qkCpT5-SIMSg.roa (raw, json)
Hash identifier: uzdNSM5PBHsgE5K08idPzUssusA90OWw/Kf55e6HfIU=
Subject key identifier: EC:9A:31:1F:5C:4F:6A:46:41:8B:3F:AA:90:2A:53:E7:E4:88:31:28
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 018571B0F10CF82F9E0A2FF16946AD8845C0
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/7JoxH1xPakZBiz-qkCpT5-SIMSg.roa
Signing time: Mon 02 Jan 2023 08:54:59 +0000
ROA not before: Mon 02 Jan 2023 08:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39821
IP address blocks: 109.233.240.0/21 maxlen: 21
89.107.120.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:f1:0c:f8:2f:9e:0a:2f:f1:69:46:ad:88:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Jan 2 08:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec9a311f5c4f6a46418b3faa902a53e7e4883128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:23:0d:fa:93:01:d9:3f:22:a3:d5:87:2f:a5:
32:bd:79:a8:a3:e8:9b:d6:c8:49:16:ef:dc:61:99:
85:17:27:87:b0:9f:68:00:7b:a3:10:be:76:67:a5:
06:cc:93:4b:15:e7:78:28:37:67:04:38:96:51:d4:
58:f2:36:12:56:cf:6d:85:a3:ee:9c:7f:96:8e:42:
12:8c:48:16:79:4a:b9:e8:e9:20:96:1d:2b:9d:2f:
02:bc:83:7a:c0:a0:bb:e7:dc:fc:35:52:ed:3b:5d:
94:6e:42:f4:67:c6:e2:b6:29:62:46:e2:a5:94:87:
cf:e8:fd:e7:80:51:0e:bc:01:03:87:50:1d:00:b1:
19:4b:4c:c5:13:f4:8a:6b:91:09:4d:f2:27:ac:34:
89:51:c9:3e:3a:67:54:46:ef:f9:6f:8a:23:5f:3f:
71:60:b6:56:40:9f:f9:98:51:58:92:b4:03:d5:11:
0a:a9:75:b4:c2:41:06:d3:27:f3:3c:04:f3:83:0c:
87:a9:bf:a7:36:02:c8:30:bc:7c:02:7d:87:58:cb:
b6:16:c4:98:ec:2c:26:54:a1:99:6c:0e:fb:31:6e:
57:61:34:65:d1:9a:26:58:db:62:2b:2d:b3:9c:fe:
f9:e5:3c:b7:3f:e2:f8:24:46:d0:4f:96:fe:0c:89:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9A:31:1F:5C:4F:6A:46:41:8B:3F:AA:90:2A:53:E7:E4:88:31:28
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/7JoxH1xPakZBiz-qkCpT5-SIMSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.120.0/21
109.233.240.0/21
Signature Algorithm: sha256WithRSAEncryption
84:10:8d:80:98:94:98:ba:30:01:3e:eb:d3:db:8d:67:6d:8e:
92:78:a3:fe:9e:91:a9:c4:dc:4f:47:02:b8:d0:e1:56:c2:1b:
fe:9f:4f:b9:a0:1f:d2:08:b1:9f:32:f6:ae:5c:88:f9:26:d5:
e8:dc:0c:2f:f0:8a:4f:74:2b:e7:19:6c:b2:1e:d8:b2:97:47:
cf:53:ca:97:3b:76:df:93:80:13:51:75:f2:f9:18:e5:41:1b:
42:88:46:91:c7:ce:c2:9f:9f:e8:4b:5c:f7:9a:7d:f8:d8:97:
10:c0:7d:8b:fb:8d:4e:2e:7c:82:01:3a:1f:38:6f:1b:0d:7e:
3d:1c:d8:3f:c1:3a:19:ca:7b:0f:4a:66:2c:6e:a2:de:62:f0:
8e:2a:1f:db:94:2e:b8:65:b4:dd:0f:d1:65:14:85:3c:06:69:
dc:e1:c0:ee:47:a3:cf:c1:53:37:cc:3d:6f:fe:24:ec:ac:9a:
0a:26:b0:30:aa:c9:e6:47:cd:e5:9a:6d:4e:4c:76:8b:3d:38:
19:0a:46:72:88:69:fb:6d:7e:52:ac:00:7d:ce:28:0f:77:10:
46:e9:12:7d:8d:5b:d6:6d:cc:72:66:74:1e:68:94:51:88:6f:
54:16:d6:d2:22:38:5c:35:8d:18:e3:99:7c:4d:fd:94:d2:c0:
f2:66:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:18 2024 by rpki-client on console-ams.rpki-client.org