Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/cRydDk-RTFgPpiiPHIpe4IeFSjQ.roa
File: cRydDk-RTFgPpiiPHIpe4IeFSjQ.roa (raw, json)
Hash identifier: 8Bcx36AI50RBtM1rAgJ0hrvtZ/wUTwZyB4+HT4+IQ7o=
Subject key identifier: 71:1C:9D:0E:4F:91:4C:58:0F:A6:28:8F:1C:8A:5E:E0:87:85:4A:34
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01857067237A88CD4EAE925827A646DCEE91
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/cRydDk-RTFgPpiiPHIpe4IeFSjQ.roa
Signing time: Mon 02 Jan 2023 02:54:45 +0000
ROA not before: Mon 02 Jan 2023 02:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203684
IP address blocks: 109.232.4.0/24 maxlen: 24
109.232.0.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:23:7a:88:cd:4e:ae:92:58:27:a6:46:dc:ee:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 2 02:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=711c9d0e4f914c580fa6288f1c8a5ee087854a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:80:65:39:6e:45:41:96:7d:5c:62:e6:c4:
61:e2:00:06:db:5a:e4:d2:be:5e:c6:2b:df:a3:ce:
24:b7:b9:ed:75:27:2f:24:3f:28:ff:7c:b6:52:4e:
c0:aa:69:76:b0:0b:78:cd:8e:6a:64:19:17:66:96:
cc:e6:e4:81:d4:41:bb:93:0c:ab:2f:d7:58:90:51:
e5:7a:f4:57:b9:38:5a:58:eb:22:da:9c:5d:88:76:
80:8d:34:50:77:50:0d:6d:1a:60:4b:91:24:08:17:
cd:7b:b3:a6:81:7a:ce:9a:41:29:1a:7e:6b:b9:e9:
7b:80:76:86:7b:a4:37:30:e0:cc:15:06:f7:44:b0:
f9:7e:0c:47:9c:1b:40:f9:39:af:a8:3d:12:a0:6a:
f8:8b:b1:6d:77:e9:e8:10:8c:9a:f8:37:fc:98:9b:
37:df:6f:df:ab:2b:4c:3b:35:db:26:02:55:15:0c:
12:8d:17:a4:54:df:f8:86:86:36:82:1c:bb:01:2b:
ec:47:1c:18:99:7d:4c:3d:21:81:8f:c8:c7:f6:d2:
08:ef:2a:00:e9:10:4a:51:e2:25:96:04:d2:e7:f3:
79:79:b6:e8:fd:66:04:65:a0:b8:ff:17:a6:5f:5d:
a5:f1:8b:bf:50:5a:b7:e2:6c:87:74:a3:17:1c:8a:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:9D:0E:4F:91:4C:58:0F:A6:28:8F:1C:8A:5E:E0:87:85:4A:34
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/cRydDk-RTFgPpiiPHIpe4IeFSjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.0.0-109.232.4.255
Signature Algorithm: sha256WithRSAEncryption
bd:7f:35:69:9e:af:ab:30:05:51:6f:7c:93:82:31:ad:92:be:
c1:45:9c:d6:34:50:10:cc:01:56:03:9e:cc:b3:7e:8d:8d:65:
a7:d7:2e:84:58:48:9f:cc:58:5c:cd:f7:ea:60:8f:a7:ce:34:
3b:07:ce:da:36:fa:15:ac:4b:4c:29:13:a2:20:d7:ed:dc:ce:
81:cc:5c:2d:55:6b:5b:90:6e:e6:b2:83:2e:c1:0c:bd:bd:33:
50:94:fc:4d:fd:3f:b0:a7:81:f0:4b:1e:2e:a8:36:79:20:39:
3e:8b:ec:97:b3:57:bb:27:94:04:64:33:05:2a:a3:f0:a2:7d:
e8:93:24:19:a7:a2:99:ca:d2:ba:fc:d2:3d:e9:3d:31:0e:fb:
83:95:5d:b7:cc:93:54:e7:97:c2:de:d9:ec:4f:b2:bb:14:0c:
df:dd:d9:77:16:1f:f4:35:8a:42:38:c5:d6:99:4f:2d:46:48:
35:d2:1c:00:46:d2:f3:dc:9b:36:c4:b1:9a:e4:17:d1:4e:d6:
57:92:80:24:39:a8:c4:e0:2f:43:cd:49:d4:49:fb:a5:60:f2:
a4:c8:79:c0:27:97:72:6b:7c:e0:a5:e4:c7:51:26:8b:00:e4:
1c:9b:5b:1f:0a:2d:3a:69:d5:d0:1d:e4:dd:23:46:05:a3:b9:
34:be:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:00 2024 by rpki-client on console-ams.rpki-client.org