Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2d6507-14e0-40c9-a1f6-1ca02baed329/1/ChPmwk3vcFTGBmoHMe5MDkMzE8E.roa
File: ChPmwk3vcFTGBmoHMe5MDkMzE8E.roa (raw, json)
Hash identifier: wvn70mvcURGh6saN/DEpu/MRME9hNnfryxql6ugYBC8=
Subject key identifier: 0A:13:E6:C2:4D:EF:70:54:C6:06:6A:07:31:EE:4C:0E:43:33:13:C1
Certificate issuer: /CN=2f9f571a7cd67139a0d6a61b95f4c2baaaf509e5
Certificate serial: 01857130A6DEF5AD383381854711F54D881B
Authority key identifier: 2F:9F:57:1A:7C:D6:71:39:A0:D6:A6:1B:95:F4:C2:BA:AA:F5:09:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L59XGnzWcTmg1qYblfTCuqr1CeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2d6507-14e0-40c9-a1f6-1ca02baed329/1/ChPmwk3vcFTGBmoHMe5MDkMzE8E.roa
Signing time: Mon 02 Jan 2023 06:34:51 +0000
ROA not before: Mon 02 Jan 2023 06:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 109.205.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a6:de:f5:ad:38:33:81:85:47:11:f5:4d:88:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f9f571a7cd67139a0d6a61b95f4c2baaaf509e5
Validity
Not Before: Jan 2 06:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a13e6c24def7054c6066a0731ee4c0e433313c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:01:e0:b5:84:9a:6a:af:e5:2a:b4:1b:b7:
07:e6:d6:df:5e:2e:db:6b:eb:fd:ad:2d:28:1b:7e:
b5:9d:63:02:cf:ae:02:f4:24:1d:29:14:ef:dc:77:
97:31:40:7f:88:50:19:52:62:a1:ad:6b:e8:4f:94:
52:31:0c:d7:de:8a:cf:24:ee:69:55:9a:51:10:4a:
88:4d:c9:0f:a6:9c:4c:13:fa:a0:b4:c0:2a:5b:10:
19:74:ad:c6:5e:d7:7b:88:9e:b5:f7:2c:fa:b7:02:
12:13:2d:28:02:31:70:9f:b3:a4:94:e9:65:58:40:
00:f6:2c:ea:4c:eb:bf:15:f6:10:33:90:8c:1e:17:
3f:b9:bf:31:d3:43:4f:ff:4e:39:a7:39:94:d4:77:
31:5b:38:4c:87:a2:a8:f2:e2:94:35:2d:07:42:4d:
e7:11:fd:e9:82:08:d7:c1:0c:7c:dd:a0:53:74:b5:
13:99:20:43:2f:cd:a3:ce:0e:1e:d2:ca:eb:00:71:
00:db:ae:28:f1:97:79:da:44:f3:8e:82:96:9c:70:
11:f7:80:7f:26:d9:54:90:0f:fc:d6:0c:0f:76:0e:
42:c3:d4:7f:b9:dc:66:32:b7:42:00:37:45:6d:2e:
69:7d:70:f4:b0:00:f7:6a:53:c0:f7:5e:6e:fe:51:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:13:E6:C2:4D:EF:70:54:C6:06:6A:07:31:EE:4C:0E:43:33:13:C1
X509v3 Authority Key Identifier:
keyid:2F:9F:57:1A:7C:D6:71:39:A0:D6:A6:1B:95:F4:C2:BA:AA:F5:09:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L59XGnzWcTmg1qYblfTCuqr1CeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2d6507-14e0-40c9-a1f6-1ca02baed329/1/ChPmwk3vcFTGBmoHMe5MDkMzE8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2d6507-14e0-40c9-a1f6-1ca02baed329/1/L59XGnzWcTmg1qYblfTCuqr1CeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2a:6f:e8:ca:44:4e:52:d0:60:d6:fa:84:32:60:26:15:a9:
15:1b:ae:62:4a:52:d6:01:27:13:60:c4:05:1e:bb:8c:2b:57:
0a:41:b4:40:06:c0:c8:41:e8:c3:3a:5f:5d:e2:bb:b1:53:1d:
19:75:d7:9f:bc:2d:4f:55:05:e8:8b:61:e2:3b:61:1d:4d:0d:
6b:cf:f0:0c:8c:88:7b:c7:08:33:e0:69:db:f7:d1:60:08:d1:
25:2a:ed:78:68:e6:87:ba:3d:aa:bc:19:81:04:3e:37:f8:7c:
69:9f:2b:df:fb:96:08:ee:80:6e:84:7c:98:b0:ed:71:77:3f:
26:87:29:2d:97:88:bf:20:11:fa:b2:fa:64:65:c8:30:22:dc:
ef:a5:94:18:b1:a7:25:0a:cf:74:38:e6:c1:40:15:19:96:74:
d4:31:dd:65:63:b9:43:9d:63:65:51:dc:24:a3:55:13:f2:b8:
a4:8b:49:62:c5:e9:e4:7f:40:20:51:aa:1f:cf:e8:6b:11:0e:
14:4b:d1:46:d2:07:28:e5:63:7d:a4:22:f9:ff:76:16:4b:89:
8c:25:f1:4f:a8:e9:35:29:44:4f:e7:3c:c2:fc:2f:c3:31:16:
64:31:37:98:d5:92:b3:58:97:cf:67:5a:fa:db:31:09:75:84:
d7:20:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:16 2023 by rpki-client on console-fra.rpki-client.org