Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/PwgZtcJ_-3zaS0AdH-8Ey3GRAyc.roa
File: PwgZtcJ_-3zaS0AdH-8Ey3GRAyc.roa (raw, json)
Hash identifier: XFL51YJFOCOVwubz5vqMLnBsuL+3kms+eDRKPWkDNpM=
Subject key identifier: 3F:08:19:B5:C2:7F:FB:7C:DA:4B:40:1D:1F:EF:04:CB:71:91:03:27
Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial: 018678F11DCD01908A06FCB031995C425F1D
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/PwgZtcJ_-3zaS0AdH-8Ey3GRAyc.roa
Signing time: Wed 22 Feb 2023 11:45:13 +0000
ROA not before: Wed 22 Feb 2023 11:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200630
IP address blocks: 109.69.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:f1:1d:cd:01:90:8a:06:fc:b0:31:99:5c:42:5f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Validity
Not Before: Feb 22 11:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f0819b5c27ffb7cda4b401d1fef04cb71910327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:66:91:06:fb:5f:db:f7:0b:e8:cc:bc:f2:
3d:32:fb:6c:bc:79:91:89:f2:3e:65:b4:a3:63:57:
e2:90:2e:48:f4:3c:7b:98:f7:dd:83:5b:b2:5f:f0:
eb:41:b3:5e:9a:a9:c4:c8:bf:8e:34:97:7f:f8:42:
9c:0c:5d:96:ca:f1:94:18:e2:83:a6:76:29:ff:6d:
56:e1:04:77:5f:9d:c8:f0:21:bb:e0:42:66:de:39:
43:2b:7f:de:2a:96:d1:53:a1:a7:db:44:36:b2:37:
88:4e:0d:60:26:c1:99:3d:31:af:8b:36:9c:6f:ca:
4c:ec:3a:7b:62:e6:c8:fd:f8:a6:fa:e1:f2:80:21:
39:7e:11:95:db:66:61:44:a4:b8:b6:1c:16:94:f0:
9f:c4:94:8f:ee:05:0a:04:0a:ec:f7:b9:6e:bc:04:
a0:df:37:b7:2e:2e:12:c8:36:5a:d0:41:b9:4b:6d:
68:bb:57:7d:49:70:45:d6:62:c2:44:60:4e:30:f6:
66:bc:ac:10:e0:c3:03:56:a9:fc:b1:46:31:0a:90:
59:55:3c:01:d9:1c:95:49:24:6c:60:b5:f5:72:2b:
74:1e:1f:11:09:72:ee:4c:1a:ba:c1:9d:6b:22:4e:
46:93:7b:45:ff:12:6b:93:2d:f3:3c:b1:b9:a7:00:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:08:19:B5:C2:7F:FB:7C:DA:4B:40:1D:1F:EF:04:CB:71:91:03:27
X509v3 Authority Key Identifier:
keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/PwgZtcJ_-3zaS0AdH-8Ey3GRAyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.36.0/22
Signature Algorithm: sha256WithRSAEncryption
22:0e:b9:d0:3f:21:dc:ca:fa:a1:6c:0b:d2:36:ff:7d:0a:05:
70:3f:a6:79:52:98:f8:77:87:21:23:41:48:8f:d5:5f:40:41:
0e:31:8a:68:78:3e:32:45:3b:58:c6:21:6c:af:32:9e:62:24:
d6:47:37:c1:bd:04:87:4b:bb:3f:74:bd:b0:9b:09:74:93:b6:
61:81:a4:9a:76:22:9e:25:27:1a:c0:b0:a8:b2:1c:59:4d:cd:
9a:04:3e:ba:6f:ee:02:3f:b1:01:1c:a1:a3:83:ea:3e:35:33:
32:de:d5:77:0c:5e:d0:5c:9e:24:5c:a4:65:7d:7a:bf:44:40:
72:4b:64:0a:25:81:e5:58:c6:b7:b2:dd:2b:55:79:1c:38:c0:
0c:58:27:86:8c:71:87:34:d2:aa:cd:fb:7b:16:a2:32:0b:ef:
57:0d:8f:cd:cf:96:cd:d2:ad:d5:6d:c1:c0:df:ad:64:ae:47:
8e:79:bf:ec:4b:8b:67:38:9f:65:3e:c8:ba:ec:0b:5d:e5:2f:
2c:51:bb:32:b4:32:c3:df:bd:8a:09:13:c4:5f:32:ff:ae:e3:
b6:92:22:c9:2d:e9:69:54:18:bd:ee:53:57:46:bc:10:17:8f:
84:8b:1f:ec:bd:c3:e1:11:58:40:8e:e7:c3:81:48:da:02:77:
25:28:20:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:28 2024 by rpki-client on console-fra.rpki-client.org