Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/JqAEy5yp-cXggmqw_sp-w5oFtX4.roa
File: JqAEy5yp-cXggmqw_sp-w5oFtX4.roa (raw, json)
Hash identifier: YJnAvWYEDopINVjzTy3s3y/fkOkqYvz5FbUjx6eKPDk=
Subject key identifier: 26:A0:04:CB:9C:A9:F9:C5:E0:82:6A:B0:FE:CA:7E:C3:9A:05:B5:7E
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01856B53282711BF26291878BF6D614B68FD
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/JqAEy5yp-cXggmqw_sp-w5oFtX4.roa
Signing time: Sun 01 Jan 2023 03:14:49 +0000
ROA not before: Sun 01 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49040
IP address blocks: 109.160.56.0/24 maxlen: 24
109.160.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:28:27:11:bf:26:29:18:78:bf:6d:61:4b:68:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 1 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26a004cb9ca9f9c5e0826ab0feca7ec39a05b57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:85:58:bc:8f:58:4b:66:18:85:22:f0:cf:
41:92:1b:32:a3:22:e6:c4:95:28:b6:ae:70:3f:b7:
43:91:15:48:c3:cd:1d:ee:ae:fe:b7:4d:6f:16:4e:
80:60:1e:0a:80:b1:39:0a:52:69:d5:26:53:d7:68:
67:8b:01:a8:6b:7a:26:e7:e4:d0:68:f4:10:52:48:
4b:6a:1a:d4:e0:d9:99:3d:cd:79:73:13:82:6b:03:
24:d2:14:28:5d:7f:65:0e:5c:ff:6f:7e:1f:eb:79:
67:96:1f:6a:20:2f:8c:cb:19:73:98:b8:66:8b:cf:
42:8c:9d:5b:35:cd:b3:a6:3a:35:a0:b4:d4:c3:22:
cb:e2:e4:6c:67:f7:cf:43:2a:e0:3e:7c:98:b6:59:
17:71:ef:f5:7d:fe:48:1d:89:c4:dd:b1:4a:1e:28:
bc:8b:0e:ae:97:0e:94:48:b5:49:ae:1d:9f:04:af:
40:53:8a:bb:75:ec:6b:d2:23:8e:50:13:ff:f7:72:
3a:61:50:71:58:71:1e:d9:af:b2:46:b7:23:3f:b2:
8c:78:31:74:79:e9:5c:71:d1:38:61:a4:48:99:2c:
7a:1e:c5:f4:2c:ee:a9:a9:b1:e0:c5:e7:f9:80:98:
18:2d:88:c6:f8:77:86:1c:95:01:3d:c8:b8:09:91:
4d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A0:04:CB:9C:A9:F9:C5:E0:82:6A:B0:FE:CA:7E:C3:9A:05:B5:7E
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/JqAEy5yp-cXggmqw_sp-w5oFtX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.56.0/24
109.160.59.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:dc:5d:b5:54:c2:65:5d:87:56:dc:6d:b1:41:b8:a1:d4:3f:
17:41:5c:69:c3:fe:c8:52:38:5d:46:90:51:43:8a:ee:ae:3c:
e9:d1:90:5a:9a:b6:2d:6e:d4:d0:b2:f5:52:23:b4:81:4e:18:
19:fd:25:a9:4a:51:96:48:37:e2:c5:fe:eb:5b:4a:34:ef:6c:
4a:88:46:a0:51:a8:47:6b:f4:88:10:e8:44:fd:49:fc:91:e5:
08:5e:18:cc:ce:7a:ba:dd:18:08:9a:ba:5b:f9:6c:a0:7a:d4:
ab:18:88:fb:1c:5a:53:f0:c2:31:e4:15:84:9a:95:85:2c:7e:
56:f3:33:46:61:46:ed:1d:40:e8:27:54:f3:05:d4:7c:18:a9:
6a:65:c0:ad:65:97:68:05:53:e2:a8:79:7d:30:e7:54:47:41:
da:68:98:e9:85:27:fe:c1:c7:74:9e:3c:cc:f9:df:9e:69:32:
6a:11:09:09:3a:6d:f6:7e:f2:8a:06:d2:dd:66:e5:6b:7e:46:
18:26:b5:1b:cf:be:55:99:4d:d6:67:68:70:7e:41:b1:62:84:
a8:ff:2f:9c:dc:ae:4d:43:e0:e1:96:90:b4:e4:74:56:e7:1c:
ce:03:e1:04:f1:01:4d:29:9f:f0:14:5c:f6:02:1d:44:6d:db:
21:e4:60:7f
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 28 10:49:56 2023 by rpki-client on console-fra.rpki-client.org