Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/5WzBAJqXizmGuD2JtJGiJz5Migg.roa
File: 5WzBAJqXizmGuD2JtJGiJz5Migg.roa (raw, json)
Hash identifier: fvvgn1cmP2BnsqaxVW4+drTUqenzOlRiRBYjX1Hnd3c=
Subject key identifier: E5:6C:C1:00:9A:97:8B:39:86:B8:3D:89:B4:91:A2:27:3E:4C:8A:08
Certificate issuer: /CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Certificate serial: 0185E49D038CBF3028ECEF3AB80A79698560
Authority key identifier: F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/5WzBAJqXizmGuD2JtJGiJz5Migg.roa
Signing time: Tue 24 Jan 2023 16:29:33 +0000
ROA not before: Tue 24 Jan 2023 16:29:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 109.205.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:9d:03:8c:bf:30:28:ec:ef:3a:b8:0a:79:69:85:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Validity
Not Before: Jan 24 16:29:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e56cc1009a978b3986b83d89b491a2273e4c8a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:21:b5:a2:b8:a0:dc:db:0c:45:d5:c9:bf:14:
65:b8:0f:31:e0:f8:3c:db:6a:fd:bc:cf:d8:bf:b9:
32:30:7f:ef:53:6c:e3:11:5f:33:52:bb:ce:16:f4:
e2:db:81:f6:47:86:8e:00:cb:cc:44:26:50:fa:cf:
44:06:fe:a2:be:8c:c1:b9:36:2a:d0:41:71:14:5d:
4f:8f:71:b2:38:a2:96:96:34:76:0b:d0:91:73:b6:
b1:69:7c:6a:dc:0b:32:58:93:0d:88:18:d0:75:2c:
4c:b9:89:52:9d:c0:3f:c9:9e:53:86:03:05:58:68:
da:43:03:0a:60:f8:15:be:8a:80:3e:28:7b:af:6b:
36:ca:5d:9d:83:68:20:bb:23:32:3c:ce:b2:54:ea:
f0:83:16:44:5d:5d:09:77:e6:5e:94:75:46:34:5f:
f8:68:fd:5c:b8:f3:b5:b4:a4:7b:9b:52:48:dd:90:
a4:50:d1:8a:62:0a:09:3d:a2:58:4b:d2:76:b9:2c:
31:ee:6d:a7:b4:44:94:4f:60:4f:7c:7c:93:15:a7:
89:50:4e:39:c3:66:ab:ce:f1:1c:95:a5:5b:8b:4a:
40:11:e4:1d:09:eb:4b:41:f2:1a:a1:03:29:76:e9:
91:56:a9:bb:06:0b:33:b9:21:14:22:1f:39:ac:ef:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:C1:00:9A:97:8B:39:86:B8:3D:89:B4:91:A2:27:3E:4C:8A:08
X509v3 Authority Key Identifier:
keyid:F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/5WzBAJqXizmGuD2JtJGiJz5Migg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.191.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:de:eb:51:e9:07:ff:48:a0:16:05:45:9f:fe:08:2d:03:6d:
e0:c4:80:04:ca:21:44:bb:9d:2f:7e:99:ca:43:01:f9:1b:d5:
88:1a:98:f6:8a:91:ba:af:27:d6:10:44:d1:a8:a9:dd:39:f2:
73:59:10:6c:46:a5:7d:61:f5:fb:ee:f2:9a:de:a8:ac:e3:ff:
23:5f:ac:b5:90:a4:de:e7:da:5f:68:74:28:b7:77:be:08:e8:
f5:08:db:4e:22:7a:76:88:e2:6f:3a:69:28:da:4b:90:b4:88:
a3:da:d7:54:17:8a:90:5f:dd:f3:d9:c2:2f:e4:7a:1a:ca:c1:
c5:ae:ad:98:08:5b:f0:28:9b:ed:ba:cc:b6:59:0a:9c:65:b7:
20:a8:90:b9:2e:cf:46:13:0c:e9:8f:0b:32:36:6d:f9:3a:74:
84:05:33:b5:f6:fd:a1:87:7c:0c:ec:ce:cf:ae:f6:24:2f:3f:
8f:62:7e:9a:64:cd:48:d9:a2:ed:27:b6:99:cc:1d:87:ba:18:
44:a4:59:11:ba:49:93:74:fc:e2:8e:51:ef:e7:45:eb:0a:e1:
49:a6:a8:4a:0e:9a:2c:7a:91:92:73:2d:3e:39:f7:5b:f1:ed:
44:26:84:bf:0a:da:71:e7:7f:5d:4b:3d:94:0c:e6:48:30:c8:
c8:d9:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:39 2023 by rpki-client on console-ams.rpki-client.org