Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/dlYUjpkQL-bVRCrYEXO0VgmkXTc.roa
File: dlYUjpkQL-bVRCrYEXO0VgmkXTc.roa (raw, json)
Hash identifier: XM1uwyNxX6l1Iqj2PVwUsitwN6sgxShk3XDd9taBLuY=
Subject key identifier: 76:56:14:8E:99:10:2F:E6:D5:44:2A:D8:11:73:B4:56:09:A4:5D:37
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 0185728C8584C13C6892D7FDC41CAFC35ED2
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/dlYUjpkQL-bVRCrYEXO0VgmkXTc.roa
Signing time: Mon 02 Jan 2023 12:54:49 +0000
ROA not before: Mon 02 Jan 2023 12:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8455
IP address blocks: 109.71.50.0/24 maxlen: 24
109.71.49.0/24 maxlen: 24
109.71.48.0/24 maxlen: 24
109.71.51.0/24 maxlen: 24
109.71.53.0/24 maxlen: 24
109.71.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:85:84:c1:3c:68:92:d7:fd:c4:1c:af:c3:5e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Jan 2 12:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7656148e99102fe6d5442ad81173b45609a45d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:37:3c:df:81:06:8c:f7:af:25:5d:ae:c7:
12:73:8b:53:5b:c9:63:93:4d:00:62:86:6f:a2:53:
80:e2:5c:84:aa:5e:94:bd:f9:9b:1f:9f:a6:4a:f6:
4b:46:49:a2:e4:c7:74:3b:ce:11:8e:e0:db:c5:d9:
f6:a9:9d:ef:33:b6:75:de:5e:1a:5d:98:93:e6:14:
53:38:23:14:89:40:44:74:dd:bf:d6:d8:be:e0:52:
dd:13:e3:6b:1b:31:a2:21:a0:6b:92:f4:c5:fc:8e:
a2:34:be:90:2e:11:0e:83:64:91:24:cc:dd:4f:e0:
2c:89:55:cb:d2:db:da:08:25:26:c5:97:de:b9:cf:
fd:a7:5f:08:ef:fa:61:08:75:ad:0c:eb:d7:22:91:
e0:d8:d9:e5:5c:70:72:e2:b3:98:19:cb:50:72:60:
7c:9b:3a:f5:62:d8:2b:0e:81:c9:68:87:63:5d:0b:
66:87:e1:d8:ce:73:8c:cc:53:cc:da:d6:9f:ab:da:
ad:d6:b4:de:29:d3:33:f4:09:97:a3:52:6f:fa:b3:
67:27:b1:f8:e2:b8:c9:d8:56:91:bd:f3:b2:98:1f:
f9:43:68:a4:5a:83:06:12:60:bd:26:b8:49:01:3a:
26:f5:af:5f:bd:e1:37:45:7b:19:c4:cd:c1:22:5f:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:56:14:8E:99:10:2F:E6:D5:44:2A:D8:11:73:B4:56:09:A4:5D:37
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/dlYUjpkQL-bVRCrYEXO0VgmkXTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.48.0-109.71.53.255
Signature Algorithm: sha256WithRSAEncryption
0c:4d:c1:c0:b8:70:69:2d:ee:1f:92:e1:45:01:f0:19:1c:88:
e4:1a:38:ec:34:28:bf:a2:93:52:67:a2:ba:5f:5e:43:d1:e2:
e7:22:f1:c3:d8:36:8b:c2:fc:33:17:a2:48:09:40:84:37:4d:
4a:45:95:2f:52:7d:69:c4:a1:dc:ec:64:1a:75:c6:c4:6c:9e:
88:63:80:f0:bf:1b:f2:cd:71:9f:45:12:17:3f:48:61:cd:e9:
95:03:4f:27:f8:c4:a9:e8:8d:05:58:e9:25:10:e2:71:e4:b0:
41:46:28:00:f8:12:eb:71:e4:03:78:c7:54:13:21:43:9a:39:
1f:c7:4b:d8:15:3e:12:f1:f3:eb:a3:d8:31:33:d1:f2:5f:1e:
1d:b3:23:e9:b9:23:ff:3f:d3:02:86:6d:e4:2e:29:0f:c5:4a:
bf:5c:8c:00:90:da:7e:d7:51:a8:3d:69:1b:f8:bc:88:0a:8f:
aa:4e:6a:ed:bc:ea:38:b1:19:25:46:14:0c:a6:fa:db:cd:21:
e6:9a:d8:f7:98:8e:9f:80:de:a2:93:60:71:95:c5:09:ba:eb:
59:69:4d:19:3b:5b:c0:d2:a7:59:66:87:aa:61:36:dd:3c:c0:
83:a4:e1:4a:c3:0c:01:56:f0:42:58:08:68:7e:bc:1c:c1:5d:
71:5d:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:50 2024 by rpki-client on console-fra.rpki-client.org