Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/vwfxhJRRV_g8Ngr0E9c-VJBJsM0.roa
File: vwfxhJRRV_g8Ngr0E9c-VJBJsM0.roa (raw, json)
Hash identifier: /ZvlHD2gmwE5WCxYNb0qljwxjT4Qh+etk6vRQafr8P0=
Subject key identifier: BF:07:F1:84:94:51:57:F8:3C:36:0A:F4:13:D7:3E:54:90:49:B0:CD
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 01856F14AFF93951F98945813C43B1F0C8CD
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/vwfxhJRRV_g8Ngr0E9c-VJBJsM0.roa
Signing time: Sun 01 Jan 2023 20:45:04 +0000
ROA not before: Sun 01 Jan 2023 20:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206448
IP address blocks: 192.109.243.0/24 maxlen: 24
192.109.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:af:f9:39:51:f9:89:45:81:3c:43:b1:f0:c8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 1 20:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf07f184945157f83c360af413d73e549049b0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:3f:50:f1:6d:7f:21:1d:ee:0f:ee:b2:00:
5b:76:94:da:37:5b:a3:3d:2d:f1:b7:ce:cb:44:f0:
d5:d2:30:fb:da:36:03:34:ca:b3:c1:84:4d:47:33:
3d:af:8f:99:4e:25:4c:47:a8:6b:04:c5:e6:aa:8b:
0a:72:0b:75:42:2c:bf:9d:24:0e:57:6f:24:6c:57:
62:26:2a:5e:d2:30:07:a5:e5:ba:ed:78:51:c7:db:
ec:bc:9d:a0:0b:cc:fb:ae:4d:28:0c:06:26:b9:58:
bd:95:d7:40:c0:af:7e:e5:51:cc:d3:55:c6:40:4f:
a8:53:a2:62:22:55:b4:c9:0b:10:f3:26:0a:9d:64:
1d:22:f4:f8:01:26:be:49:0b:f1:c7:44:8a:5d:0d:
84:44:d1:c6:fd:df:07:7a:e5:06:5c:83:5b:64:ea:
31:04:19:57:54:2a:f0:0c:3f:e3:73:3b:e0:f2:00:
12:69:86:50:28:b3:ef:3a:7f:f6:ce:c1:7d:77:a5:
cd:fc:06:dc:d8:19:c5:3b:90:0a:96:91:b2:d7:2b:
ee:3d:a9:56:54:52:6b:67:6a:88:da:52:6b:d8:d1:
3d:89:f9:75:bd:94:d4:b3:1d:3d:73:02:dc:30:fa:
5d:06:51:3b:ed:43:b7:0a:99:b8:9e:b6:e2:02:19:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:F1:84:94:51:57:F8:3C:36:0A:F4:13:D7:3E:54:90:49:B0:CD
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/vwfxhJRRV_g8Ngr0E9c-VJBJsM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.243.0/24
192.109.250.0/24
Signature Algorithm: sha256WithRSAEncryption
30:6b:43:ac:8e:13:5b:de:66:02:7b:9a:f3:64:ef:a0:eb:30:
62:39:5d:13:10:f9:4a:c7:62:78:45:31:9f:4d:87:3e:33:4a:
5d:e7:be:b5:a9:f0:f6:f0:f6:fa:f8:b6:89:0f:29:a2:13:ec:
01:4a:75:10:f2:af:31:5d:6c:cd:51:42:86:79:a6:5a:af:13:
4c:bd:af:70:e7:83:a7:a5:c8:b7:44:ce:5f:89:64:cd:d4:11:
24:f0:a5:cc:57:18:85:a3:a8:f5:46:83:d0:fd:f5:a4:20:45:
88:19:6e:7b:14:8f:04:7f:a0:a8:84:a6:5b:5d:d8:78:74:ff:
92:2b:82:ad:d7:63:18:6b:aa:46:41:1e:a7:c1:8e:27:5a:2c:
44:d3:8d:eb:8c:d5:bc:76:55:2f:98:d0:9f:a2:88:53:31:f4:
5c:78:59:86:e1:2a:00:91:46:83:7e:c2:48:64:96:d7:02:b1:
80:00:30:42:ca:8f:7d:67:a0:e2:fc:00:b4:6d:61:e4:cd:15:
1d:2f:62:74:03:a6:9e:d5:8f:af:57:c2:23:db:d2:52:b1:69:
0f:86:55:c6:9c:71:e2:57:90:88:f0:75:ec:16:a0:f1:36:aa:
55:87:17:4d:86:e8:59:1d:1b:12:f6:a8:86:86:81:ce:24:c6:
32:8a:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:03:09 2024 by rpki-client on console-ams.rpki-client.org