Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/RiQHN9h7jMaAaVxtB2KuyYq_fR4.roa
File: RiQHN9h7jMaAaVxtB2KuyYq_fR4.roa (raw, json)
Hash identifier: 1ZZhrR8a8NcxTlc2bqhSEJN6vjlmBtKbM6gZg4jsTMc=
Subject key identifier: 46:24:07:37:D8:7B:8C:C6:80:69:5C:6D:07:62:AE:C9:8A:BF:7D:1E
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 018A8E7904588971B73E39A34F2D8E3F1521
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/RiQHN9h7jMaAaVxtB2KuyYq_fR4.roa
Signing time: Wed 13 Sep 2023 12:16:50 +0000
ROA not before: Wed 13 Sep 2023 12:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50607
IP address blocks: 109.207.105.0/24 maxlen: 24
176.126.56.0/22 maxlen: 22
91.198.97.0/24 maxlen: 24
2001:67c:778::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:79:04:58:89:71:b7:3e:39:a3:4f:2d:8e:3f:15:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Sep 13 12:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46240737d87b8cc680695c6d0762aec98abf7d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:69:2c:7d:cb:cf:bd:d0:a8:d5:e7:8b:fe:a3:
dc:f6:1b:bd:23:1f:f8:6b:56:68:92:d5:68:20:48:
a0:93:69:cc:b2:86:59:e6:84:7b:dd:45:32:44:f0:
a7:3d:b3:bd:95:80:b0:6a:ea:55:ae:ef:c7:a5:a2:
78:3e:70:b9:d4:0c:5b:63:37:af:e1:87:e0:c2:31:
9a:b9:b8:97:3a:52:74:6b:58:9c:53:e8:ed:0e:8c:
2f:9a:d9:4e:44:f1:1f:45:8d:a8:4e:92:55:5c:5b:
44:be:3f:62:e7:45:83:30:6e:1b:3c:57:ae:b8:af:
ae:e3:cd:1c:46:b1:a7:47:24:34:a3:c1:a0:ce:ed:
12:28:e4:1e:d9:9c:e4:4a:4b:3a:3c:d7:8b:04:5c:
6e:29:73:93:ec:ab:f5:ef:99:d8:bf:66:7e:bd:d0:
49:d8:90:3c:d6:79:e5:90:e1:78:6e:78:1a:a2:36:
7a:34:e6:e6:25:0b:60:95:0c:bb:ff:15:5f:7c:d7:
79:83:26:06:63:92:c0:1c:43:e7:60:16:85:36:5b:
ea:62:60:a1:e4:52:49:1a:4b:0e:71:d3:37:a6:23:
90:8c:18:8d:8e:f3:0e:90:99:42:07:d7:0f:0b:e2:
2c:56:2a:cb:92:4c:f2:38:c6:a8:ed:65:10:fa:8a:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:24:07:37:D8:7B:8C:C6:80:69:5C:6D:07:62:AE:C9:8A:BF:7D:1E
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/RiQHN9h7jMaAaVxtB2KuyYq_fR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.97.0/24
109.207.105.0/24
176.126.56.0/22
IPv6:
2001:67c:778::/48
Signature Algorithm: sha256WithRSAEncryption
88:bb:01:d7:f1:0c:f6:4b:04:3e:ad:16:b4:98:75:2f:65:e7:
e1:04:7c:6f:be:5c:10:25:23:26:44:bf:b6:62:4c:ce:f6:c8:
b8:42:a0:6a:59:ef:b2:65:91:91:01:a3:0c:97:4c:ed:7a:b5:
2c:99:7b:c9:9a:84:dc:3e:a3:5c:2b:57:10:3e:16:90:2b:8c:
f8:43:86:36:52:1f:96:9b:b9:91:e4:b4:12:c9:47:ff:06:b9:
23:2c:01:90:38:a1:49:8e:80:59:2e:b3:d9:0c:81:66:b3:07:
49:c3:93:7e:65:0c:12:ab:a6:b1:fa:cf:8d:b9:e2:a8:ca:85:
95:27:f3:42:6f:e9:85:65:89:fd:5c:38:ed:ab:a5:69:a1:e1:
60:17:74:25:88:db:89:b3:8d:dc:17:ff:e3:ad:5a:d4:65:e2:
d6:05:95:df:57:bc:c4:80:be:23:ce:c7:96:8d:ae:c6:85:4c:
b3:7e:e6:17:25:3d:e5:5a:50:05:c1:5a:e8:65:f8:d1:75:80:
8c:bb:74:61:ef:b3:50:e4:ba:c9:91:77:3c:a9:0c:ea:bd:2b:
37:c2:70:d0:6e:2d:55:7d:0f:84:2d:2f:21:29:a7:e2:1b:ec:
17:fa:e8:1b:60:5c:fa:e7:ff:2f:32:c9:76:d9:6f:6b:6c:39:
35:ec:d3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 11:59:48 2023 by rpki-client on console-ams.rpki-client.org