Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/1-yCUfTGHohaaaeT0SbVNOagF7js.roa
File: 1-yCUfTGHohaaaeT0SbVNOagF7js.roa (raw, json)
Hash identifier: lMk9+nwhA4Zx6Q5Htfswmsm7o4opO5pJQfJsn1G0M/4=
Subject key identifier: FB:20:94:7D:31:87:A2:16:9A:69:E4:F4:49:B5:4D:39:A8:05:EE:3B
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01856B532DA6B2021AD631189430A3D4318B
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/1-yCUfTGHohaaaeT0SbVNOagF7js.roa
Signing time: Sun 01 Jan 2023 03:14:50 +0000
ROA not before: Sun 01 Jan 2023 03:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 109.160.38.0/24 maxlen: 24
109.160.37.0/24 maxlen: 24
109.160.36.0/24 maxlen: 24
109.160.41.0/24 maxlen: 24
109.160.40.0/24 maxlen: 24
109.160.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:2d:a6:b2:02:1a:d6:31:18:94:30:a3:d4:31:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 1 03:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb20947d3187a2169a69e4f449b54d39a805ee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ba:74:cd:c4:24:6d:7b:9d:8b:58:46:1d:8e:
78:d8:d9:02:72:94:ed:ca:b1:54:1c:99:51:aa:2b:
a6:c9:2f:e7:37:08:b5:b5:0c:b7:54:93:63:f4:ee:
b1:08:46:50:65:a9:6f:f6:17:34:e5:40:9c:9e:1e:
71:3e:4b:d0:74:c7:ed:0a:b5:2c:ae:7a:a2:4a:de:
c0:f1:02:df:65:71:cb:8a:2b:6d:8e:46:db:21:6c:
71:a7:33:b5:69:64:47:ef:89:59:ca:f2:cf:a2:d9:
13:da:f9:33:68:9a:73:2e:84:77:bf:fa:3b:6d:36:
a8:ad:bc:e0:2c:98:7f:af:aa:85:29:1c:5b:87:02:
9b:7a:01:f8:4d:cc:73:5a:09:d7:3d:41:35:55:4c:
26:d9:ae:e5:b8:8b:cc:5f:5c:3a:8e:22:63:30:d5:
d6:ec:ce:e7:a1:e6:62:7f:d8:a2:4b:72:a3:4f:4c:
56:7b:26:e9:b9:1e:1c:a3:b5:7c:be:ae:90:e9:37:
6c:67:f8:ac:18:09:45:24:04:ff:b6:91:69:2c:b9:
11:9a:e9:8f:13:8d:1f:89:57:3d:9b:cf:38:46:ec:
d8:20:3f:c7:9e:00:28:1a:0b:a0:3b:25:3a:dd:ff:
72:aa:a1:35:d8:bc:3b:f5:f3:d2:e9:ee:66:ca:ae:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:94:7D:31:87:A2:16:9A:69:E4:F4:49:B5:4D:39:A8:05:EE:3B
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/1-yCUfTGHohaaaeT0SbVNOagF7js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.36.0-109.160.41.255
Signature Algorithm: sha256WithRSAEncryption
50:33:94:97:85:74:ba:0d:32:05:7a:26:ed:69:ac:62:42:17:
3d:71:4e:50:e6:5d:68:67:2b:34:2a:ae:55:f3:47:9a:58:30:
5b:5c:e0:30:6b:c9:ec:d4:9f:2c:07:0a:af:22:cd:2e:27:3c:
07:df:c2:43:a2:e5:e4:82:ee:6a:2b:b8:24:38:7d:fa:22:85:
36:2b:ca:16:24:2d:36:0e:0f:09:ce:3e:46:25:76:2c:e6:b2:
3d:e2:61:72:60:83:67:5c:89:db:c7:6d:f0:47:88:8a:9c:9b:
ba:5f:3e:2e:e2:77:8d:50:9f:6a:f6:96:64:07:1d:b5:5e:0c:
4f:f4:4a:92:9c:f7:28:d6:b4:41:94:ca:f0:a0:4d:c6:38:84:
f1:f2:c2:28:6c:a4:c2:e2:bc:e0:8b:1f:e2:9e:1b:f2:48:df:
dd:ad:4d:da:ae:07:e3:c8:8e:70:e2:20:24:ac:b1:51:14:eb:
61:a3:2b:3e:8e:19:3c:1a:3f:fe:24:e5:11:af:97:2b:4f:da:
e5:52:f3:01:c5:1d:e7:9b:22:57:a1:6b:37:27:a2:bb:e9:02:
20:69:29:4a:70:e8:71:93:4a:a2:bb:13:0f:1b:ba:7d:7e:bf:
bd:25:1e:95:d9:8b:8d:f4:8b:30:ef:61:11:54:dd:4b:9d:e7:
82:da:99:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 13:48:41 2023 by rpki-client on console-fra.rpki-client.org