Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/bpGcgd4wHeq2IhFyWJjqxyWlmiU.roa
File: bpGcgd4wHeq2IhFyWJjqxyWlmiU.roa (raw, json)
Hash identifier: yt+EScr6zlh6wmXkvR2M8gPnr6SygguaH3GrL9dNZts=
Subject key identifier: 6E:91:9C:81:DE:30:1D:EA:B6:22:11:72:58:98:EA:C7:25:A5:9A:25
Certificate issuer: /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial: 019006452A5D80288850DD7F5825B88E10C9
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/bpGcgd4wHeq2IhFyWJjqxyWlmiU.roa
Signing time: Tue 11 Jun 2024 07:48:34 +0000
ROA not before: Tue 11 Jun 2024 07:48:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8829
IP address blocks: 109.204.128.0/19 maxlen: 21
109.204.160.0/20 maxlen: 21
109.204.192.0/18 maxlen: 18
2a00:8780::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 13 Jun 2024 06:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:45:2a:5d:80:28:88:50:dd:7f:58:25:b8:8e:10:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Validity
Not Before: Jun 11 07:48:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e919c81de301deab62211725898eac725a59a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:55:c1:6b:74:e4:31:9e:43:77:52:ab:22:
d5:29:3a:13:8a:39:78:61:e0:15:c0:fe:4c:9c:c6:
f6:66:08:be:32:69:3b:49:32:31:b9:2b:dd:e7:04:
2f:9a:1e:5e:f1:e5:02:8e:2c:dc:99:87:0a:69:4f:
77:ff:f7:1a:6e:09:65:10:b2:ce:e5:a2:2f:77:49:
12:c9:dd:d0:45:78:ef:27:56:4f:87:97:b5:d2:0d:
aa:da:fd:fb:97:ec:4a:0a:b7:53:37:1c:69:ef:65:
db:ac:3e:e7:b6:cc:d9:20:70:e9:4e:32:1b:d4:9f:
a8:37:c8:e1:d6:76:22:a6:14:b5:fa:bd:af:d4:90:
e6:5e:cd:d3:04:9f:bb:c8:81:10:f5:fd:ae:10:5e:
f5:c7:d0:12:c1:4a:18:0b:a6:fc:67:74:4a:90:b8:
f2:95:b1:03:e9:b3:ff:eb:51:4d:5d:8f:53:0e:f9:
56:c7:42:df:51:d9:55:c8:d2:aa:bf:d0:5d:0e:49:
d0:22:87:8e:16:67:ee:18:1f:34:f8:b8:9d:8b:17:
8b:78:dd:03:14:39:67:c1:ad:e3:db:e9:90:f4:28:
df:7f:1f:8d:3c:d7:02:87:b3:fd:af:0c:7d:3a:36:
2b:fd:19:04:11:a3:e5:58:74:a9:60:43:0c:a2:27:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:91:9C:81:DE:30:1D:EA:B6:22:11:72:58:98:EA:C7:25:A5:9A:25
X509v3 Authority Key Identifier:
keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/bpGcgd4wHeq2IhFyWJjqxyWlmiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.204.128.0-109.204.175.255
109.204.192.0/18
IPv6:
2a00:8780::/32
Signature Algorithm: sha256WithRSAEncryption
5e:3e:0b:bc:57:30:ef:83:48:a4:0c:31:58:21:5b:1f:a9:75:
04:54:46:f9:66:24:cc:39:de:08:8d:cd:94:07:2c:7b:ea:c1:
04:c0:db:5b:d7:6f:26:17:68:a3:fa:96:22:e9:21:d1:b6:f0:
25:c0:63:85:11:09:e6:e7:8b:15:4b:00:b6:83:9f:fa:3b:97:
54:ed:6b:c4:b5:ef:78:ec:57:05:27:81:ee:17:54:86:b7:5e:
37:a2:c2:94:17:90:be:bc:61:4f:b1:36:30:5f:b7:50:4d:0c:
97:a2:ae:94:dd:7d:76:6b:db:ca:58:93:53:11:c7:28:44:4c:
6e:11:8a:13:90:ce:22:26:fc:f9:bd:6a:e9:49:85:e9:cf:ff:
f9:ad:b3:65:be:6f:87:13:cd:53:31:bf:86:db:fd:64:be:b7:
c9:09:0e:fe:2e:e7:3b:c4:39:3b:4b:d8:61:78:6c:c1:86:f1:
24:78:5d:c2:d5:b7:32:fd:8a:68:3c:da:d7:40:08:27:37:40:
97:f0:93:ed:f8:d3:9e:de:ae:25:2c:d4:4d:44:a3:bd:23:27:
ab:12:50:1f:78:48:4c:14:0c:2f:bd:92:a4:76:49:7d:76:03:
e7:46:7d:ce:4f:f9:5c:c7:c2:6b:a3:29:12:8a:a1:94:84:96:
2e:56:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 07:03:01 2024 by rpki-client on console-fra.rpki-client.org