Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/mg7nIQgMU2Or14tzuTK_LJZ7cu0.roa
File: mg7nIQgMU2Or14tzuTK_LJZ7cu0.roa (raw, json)
Hash identifier: Lq97gYZVUVYJNsoCGptpJyhmWyLUNMFIipRGkx+AuFE=
Subject key identifier: 9A:0E:E7:21:08:0C:53:63:AB:D7:8B:73:B9:32:BF:2C:96:7B:72:ED
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186DAE74209A0F9CE397B71263828A655D6
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/mg7nIQgMU2Or14tzuTK_LJZ7cu0.roa
Signing time: Mon 13 Mar 2023 12:17:14 +0000
ROA not before: Mon 13 Mar 2023 12:17:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 109.205.212.0/24 maxlen: 24
5.10.248.0/22 maxlen: 22
188.64.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:e7:42:09:a0:f9:ce:39:7b:71:26:38:28:a6:55:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 13 12:17:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a0ee721080c5363abd78b73b932bf2c967b72ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f1:85:90:00:a3:70:92:56:4b:30:e5:05:3d:
57:90:79:31:77:d7:a6:ae:14:27:36:a1:a6:06:44:
65:2b:9d:d5:c0:1e:05:fb:9a:45:c7:50:29:ce:d2:
48:a2:b2:e1:94:63:f6:12:f1:06:58:3a:24:ca:bb:
08:3c:a2:1d:3f:fd:c2:9c:38:d8:81:2a:d2:b9:96:
43:47:1c:e3:bb:2a:43:81:d5:9d:60:68:f2:f6:b6:
b1:95:1e:d7:d7:1b:ce:cf:a5:fc:40:f2:ec:a6:de:
c3:3e:d0:f5:be:fa:a0:b6:5c:5c:9b:3a:04:7e:d4:
ed:97:5d:9b:0c:0b:af:be:83:44:f3:fe:37:06:81:
8a:49:4e:3d:86:f3:7b:b8:80:6d:65:8b:42:e2:c0:
54:5d:3d:22:6a:9b:af:28:20:ef:38:d4:a3:0d:81:
7a:98:7f:cc:5c:69:fe:05:d8:21:15:fa:24:89:26:
a7:ce:2e:2d:bc:74:d3:97:ef:b7:c0:ea:f7:b1:f3:
28:51:a2:a5:69:54:53:18:0f:d0:c1:2a:9c:2d:9c:
47:cc:03:3d:36:21:3d:99:93:dd:bd:c2:b6:8b:b6:
84:ac:f4:3f:f3:a7:83:de:7e:3a:ec:2d:15:dd:1c:
a0:4f:f5:b3:d1:dc:e9:82:12:16:86:c8:1c:fd:f6:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0E:E7:21:08:0C:53:63:AB:D7:8B:73:B9:32:BF:2C:96:7B:72:ED
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/mg7nIQgMU2Or14tzuTK_LJZ7cu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.248.0/22
109.205.212.0/24
188.64.12.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:f1:89:17:d7:01:47:af:ce:5a:66:1d:46:e4:7d:77:d1:28:
d6:36:39:57:f4:86:e3:53:c0:24:5d:14:91:1f:83:be:e6:a9:
b1:3a:62:a7:1b:0c:b7:f6:06:56:a1:fb:1d:3c:19:44:f4:53:
a9:80:fa:25:3f:9b:32:4f:3d:46:30:28:78:0a:77:7c:52:28:
34:d4:54:e1:81:03:97:e6:bb:d1:51:b3:6f:bb:ad:5e:1c:55:
9a:db:53:0b:d5:ea:a1:bf:b9:ac:fe:8f:64:c4:f4:f4:b0:05:
5f:f3:1c:5f:40:65:73:a7:af:f5:57:3f:54:75:e0:bf:72:19:
0e:9f:47:0e:8b:50:dd:83:bb:64:ca:9f:e9:d4:d4:1d:50:8d:
ba:3c:5f:5c:cb:83:ec:e9:fd:85:cb:2e:f0:93:fd:27:ce:0a:
42:42:60:97:d8:e6:4e:ca:a7:81:72:20:98:c8:c0:c6:f2:d5:
19:01:f5:cf:c6:0d:4d:80:18:dd:2d:0e:43:2d:f4:b2:db:8f:
35:5d:9b:28:c9:99:89:4f:cd:a3:6c:ec:f8:9c:ff:9b:e3:33:
9d:97:ce:c1:ae:b5:a3:c3:ce:13:d7:84:88:fa:c1:c1:cb:d0:
20:4c:89:c6:1a:88:55:af:57:51:1f:db:91:a0:35:2c:6f:2d:
73:05:ab:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:51 2023 by rpki-client on console-ams.rpki-client.org