Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/mvOXkC2N3VFzu5N0We4FUcu9p6s.roa
File: mvOXkC2N3VFzu5N0We4FUcu9p6s.roa (raw, json)
Hash identifier: HQ9jsoQFeAEQXlRfuVqmD1TWPHroWhMMqCR8YqNlMro=
Subject key identifier: 9A:F3:97:90:2D:8D:DD:51:73:BB:93:74:59:EE:05:51:CB:BD:A7:AB
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01856B5323B310D5B4923A28377BA97A7567
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/mvOXkC2N3VFzu5N0We4FUcu9p6s.roa
Signing time: Sun 01 Jan 2023 03:14:48 +0000
ROA not before: Sun 01 Jan 2023 03:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 109.160.32.0/22 maxlen: 22
109.160.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:23:b3:10:d5:b4:92:3a:28:37:7b:a9:7a:75:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 1 03:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9af397902d8ddd5173bb937459ee0551cbbda7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:6a:0e:99:f5:91:53:8f:6f:dc:ec:50:3b:
cd:f2:37:af:e9:9e:9e:f8:b8:65:4c:99:65:f0:aa:
06:fd:8e:e5:5f:7c:14:c7:75:e0:f9:aa:4a:00:61:
20:9c:8f:a1:43:98:d2:2e:74:84:1c:22:6b:c8:70:
0a:dd:36:0c:cf:5d:29:58:de:2c:7c:2f:63:1e:28:
a5:85:d0:b0:66:d5:31:a7:bf:c9:92:3a:5d:17:a5:
2b:64:be:c4:94:15:3f:55:38:77:85:b0:9c:82:3d:
10:e2:09:1a:ba:25:36:bd:85:de:cd:b8:b3:3d:9f:
06:e1:85:0a:0b:76:77:a7:fb:0a:c5:3e:cd:8d:a1:
d0:71:61:ee:9b:ac:eb:27:a1:d6:60:57:89:87:8a:
2d:3d:c2:6b:85:f4:3c:57:58:e0:42:2d:27:57:fd:
0e:8a:95:27:79:7a:ac:5d:c1:3a:6d:5b:fe:59:6d:
57:d6:dd:c9:06:82:ba:73:e5:39:ce:c1:10:86:17:
09:3e:a3:10:4a:fa:5b:1c:2c:e7:f9:38:4d:73:d8:
23:31:6f:a4:79:6e:fb:29:19:f6:77:85:9c:a9:59:
00:bc:83:1e:de:b8:9a:b1:f3:41:4d:6c:85:15:c8:
16:50:6f:61:4d:4b:ab:00:a9:28:02:4b:5e:27:22:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F3:97:90:2D:8D:DD:51:73:BB:93:74:59:EE:05:51:CB:BD:A7:AB
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/mvOXkC2N3VFzu5N0We4FUcu9p6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.32.0/22
109.160.40.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a7:00:51:59:a9:9f:1e:c5:d3:d0:fd:48:61:98:b7:ec:f7:
a9:8a:2d:59:31:2a:a8:dc:ab:c8:c0:1d:f7:54:be:16:aa:c8:
0a:94:1f:ed:58:a8:5b:cb:6c:9a:67:b1:e5:ca:af:1a:14:ed:
6e:71:aa:39:21:45:41:14:3a:b2:08:45:9c:cd:75:d8:68:62:
96:8d:2c:a9:70:26:8e:ce:0c:57:0c:17:35:c7:2f:b5:26:a0:
45:f3:4a:ad:62:cc:d3:f9:ac:51:bd:5c:d5:f4:65:dd:df:05:
60:f5:5f:55:a1:33:1e:39:ba:b6:86:f6:e4:1d:65:08:84:28:
ac:c3:61:d8:55:72:c3:98:f9:3a:74:e7:65:68:b0:8e:ac:1a:
2b:3d:ac:bf:24:c7:f9:ce:11:e0:ab:2e:0a:8c:70:22:48:08:
f3:6f:c2:7e:1e:37:99:f5:43:84:94:4d:73:19:58:14:4f:c6:
cf:d3:b6:d4:f2:79:a9:d4:11:da:5f:3f:6f:52:ce:63:f8:a0:
d4:e5:cc:c3:d5:cd:ec:91:3a:19:70:bd:3d:74:85:f4:61:ed:
41:03:b8:6c:ad:2b:29:04:98:98:f9:cd:46:3b:f8:81:3a:09:
f8:08:92:aa:c7:4f:d2:c5:6b:22:b2:35:6c:c6:01:65:f8:ce:
e4:91:86:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:32 2023 by rpki-client on console-ams.rpki-client.org