Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/wf1jwK1jy3thM2_YBT46qtK9OpM.roa
File: wf1jwK1jy3thM2_YBT46qtK9OpM.roa (raw, json)
Hash identifier: 5xfW9x0/y0OyxvNkYVUs2tsfQhtS+r6TPHRPeGqfqmA=
Subject key identifier: C1:FD:63:C0:AD:63:CB:7B:61:33:6F:D8:05:3E:3A:AA:D2:BD:3A:93
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 0185715E694CCDD20203A4A4F90306AF93DD
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/wf1jwK1jy3thM2_YBT46qtK9OpM.roa
Signing time: Mon 02 Jan 2023 07:24:50 +0000
ROA not before: Mon 02 Jan 2023 07:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31287
IP address blocks: 109.121.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:69:4c:cd:d2:02:03:a4:a4:f9:03:06:af:93:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 07:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1fd63c0ad63cb7b61336fd8053e3aaad2bd3a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:87:e1:53:9e:27:8f:87:f1:39:55:b4:75:51:
eb:22:99:cd:4a:ef:a8:06:ff:b2:08:12:25:1d:ad:
ae:44:c0:38:68:2b:1f:df:86:76:92:87:e2:0d:ed:
c3:1e:65:81:42:e5:60:2a:87:b4:b6:a6:1b:59:19:
32:f4:4e:13:c4:83:d7:25:52:31:98:ae:75:30:98:
6a:c7:2b:f8:08:04:ce:dc:a4:71:37:75:81:18:ce:
78:ab:d7:e9:9c:cf:95:b0:63:48:2d:9c:f5:85:0e:
40:62:99:28:54:28:00:1d:ab:32:8d:87:d2:11:8b:
aa:38:10:74:5f:6e:43:3f:5f:2c:10:38:01:a0:05:
53:6d:dd:84:9a:32:a3:5e:f7:3b:29:34:80:f0:f1:
cf:bf:60:26:af:c1:47:27:ce:6e:70:9a:ee:a1:90:
b9:05:73:64:da:46:7b:46:e3:df:f4:04:ea:8d:16:
3e:1d:e2:ef:37:7e:af:1c:a8:29:39:39:aa:a8:de:
d3:41:d2:e4:8a:ec:80:7a:07:56:f1:88:00:9d:02:
c4:6b:73:e1:0f:91:62:a9:44:b2:ae:fc:ac:db:8e:
84:36:28:0a:6c:e9:c6:fa:79:82:dc:8b:c3:b2:d8:
72:ff:c4:1a:a4:df:34:e5:22:0b:09:47:35:d4:b5:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:63:C0:AD:63:CB:7B:61:33:6F:D8:05:3E:3A:AA:D2:BD:3A:93
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/wf1jwK1jy3thM2_YBT46qtK9OpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.153.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b3:5a:4f:8d:98:7e:ec:bd:a4:52:67:43:3e:00:c6:0b:cd:
88:db:66:ef:bc:18:4a:93:e0:9d:41:d6:74:7f:5b:37:9a:b4:
f0:83:9f:43:c2:48:5d:d6:66:94:16:7e:2e:f3:bf:83:63:f8:
73:6b:c5:a1:cd:48:76:85:44:8d:01:6b:f2:ba:62:d0:a7:2a:
8d:e8:ad:42:70:28:c3:06:fe:d9:8d:20:eb:de:f3:f6:3a:d0:
9b:58:08:eb:34:00:23:14:a2:74:d5:48:8e:ed:8f:b6:57:9b:
84:da:8f:1c:7e:00:01:ff:ae:58:ae:d8:e2:39:51:5f:2e:91:
b1:e2:be:77:28:bb:89:d0:d8:91:8b:38:57:31:a7:00:f5:aa:
5f:1f:97:58:00:74:5f:76:11:82:45:45:29:21:a7:06:a1:85:
6d:ef:ba:b8:f3:53:7b:96:01:06:8f:3c:fd:f5:45:0a:36:57:
23:20:b0:ac:17:0c:ab:a8:4b:f8:b9:08:d0:06:24:63:23:fd:
a4:a4:66:59:33:20:5d:fa:33:b6:da:5d:01:26:8c:6e:55:2f:
9a:b3:bd:74:17:fb:23:7e:73:f7:13:01:6f:58:0b:53:54:39:
cd:57:96:3d:1f:a7:56:bd:5d:17:b7:9d:c6:02:39:f0:2a:50:
af:c5:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:15 2024 by rpki-client on console-ams.rpki-client.org