Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/2FOsp9tRjkKbkhkBXnpdf4ZvXEY.roa
File: 2FOsp9tRjkKbkhkBXnpdf4ZvXEY.roa (raw, json)
Hash identifier: tIzVVx1yNJiXnQyDOViG4gksR+Bq6tqio1/a4Z4vL+Q=
Subject key identifier: D8:53:AC:A7:DB:51:8E:42:9B:92:19:01:5E:7A:5D:7F:86:6F:5C:46
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01856D94138D01BD58419BB746A97DC2A3EF
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/2FOsp9tRjkKbkhkBXnpdf4ZvXEY.roa
Signing time: Sun 01 Jan 2023 13:44:58 +0000
ROA not before: Sun 01 Jan 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57428
IP address blocks: 164.215.101.0/24 maxlen: 24
109.205.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:13:8d:01:bd:58:41:9b:b7:46:a9:7d:c2:a3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d853aca7db518e429b9219015e7a5d7f866f5c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9a:c5:f5:7b:d1:d5:63:96:af:17:d9:05:7b:
6a:05:b4:8b:0b:bf:33:7b:74:89:93:63:74:c0:b5:
b9:f5:54:b2:47:58:be:c2:75:33:14:7e:4e:de:f5:
d3:2b:23:d2:b2:6f:95:4e:fd:f0:22:6f:e8:1d:4b:
13:96:01:28:f1:0f:28:8f:46:07:2a:16:70:0b:16:
57:12:9f:44:23:e0:16:14:f6:9f:38:fe:b8:8e:73:
db:d3:c3:10:92:3b:bc:e9:29:13:ab:a4:be:14:34:
5b:8b:c5:92:ea:2b:35:37:09:41:7d:f5:b2:52:d5:
67:93:d0:b8:2c:18:16:4b:6c:83:b3:fa:5a:cd:e3:
93:79:3c:24:3b:f8:d7:9f:01:74:55:9f:5f:c1:17:
6d:22:27:f0:9d:29:e6:34:a5:59:63:39:31:c3:c5:
f8:1b:9e:3b:94:93:76:bf:c4:a2:e5:0d:be:a2:d8:
4c:9b:58:48:ee:6d:28:13:a4:fb:1d:61:e6:1c:53:
6c:14:27:27:83:f8:85:54:35:9a:58:28:77:2b:79:
2c:6e:06:9a:ed:2b:c4:a8:5a:0b:16:5b:1f:91:6c:
c8:57:cc:5d:86:94:ff:2a:f3:24:30:54:49:41:6f:
51:81:22:b2:65:dc:4e:ad:f5:8e:73:c0:46:17:2f:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:53:AC:A7:DB:51:8E:42:9B:92:19:01:5E:7A:5D:7F:86:6F:5C:46
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/2FOsp9tRjkKbkhkBXnpdf4ZvXEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.215.0/24
164.215.101.0/24
Signature Algorithm: sha256WithRSAEncryption
06:eb:2a:a3:5c:9c:ae:86:49:a0:30:b5:a1:a6:4f:9d:2e:49:
c6:89:56:cc:c2:f9:7b:22:e1:15:e4:5e:a8:f2:72:a1:82:06:
17:41:0e:62:12:18:85:cf:29:90:7e:69:f2:be:d8:b6:7c:18:
3e:bf:c6:17:e1:40:b3:b1:6d:26:8c:43:41:19:a0:87:0e:a5:
91:48:63:7d:f4:45:9e:fe:07:62:05:f3:f6:89:1a:ee:7f:53:
60:c1:98:28:4a:5c:de:7e:68:6e:2a:eb:a5:0b:22:39:f4:b2:
a0:57:26:3c:79:ad:e3:de:03:3d:d2:a1:ea:c3:a5:02:20:45:
c8:c4:9b:39:fa:ee:cc:b1:5b:c8:d8:1c:3f:28:d6:cc:af:59:
f0:77:37:a9:f3:e1:a1:07:b3:e1:a6:12:7f:63:3d:61:72:41:
94:0b:d1:e7:45:d6:e6:83:34:ec:25:d5:50:f7:8a:21:90:6c:
35:a0:0f:0a:9c:1e:8a:c8:38:9d:f0:ce:82:41:e3:b7:6e:0f:
98:0c:2f:73:d5:8e:e9:20:63:48:7d:a1:43:58:56:8b:8f:3f:
02:e4:b1:3b:1d:5a:47:5e:73:5f:ed:6c:c2:bd:65:2d:cb:26:
1d:eb:a8:3b:ed:16:8f:d8:da:72:44:22:23:e4:8d:d7:8b:4e:
50:f8:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 17:17:36 2023 by rpki-client on console-fra.rpki-client.org