Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/A82FSq-pOWQzAiKn4gvWwBpwsRw.roa
File: A82FSq-pOWQzAiKn4gvWwBpwsRw.roa (raw, json)
Hash identifier: vU7nIcYB/8ohiLnsmdj8XxkSje5XNFy6464jTWj5/0I=
Subject key identifier: 03:CD:85:4A:AF:A9:39:64:33:02:22:A7:E2:0B:D6:C0:1A:70:B1:1C
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019022BDAE1F25F997C7DCCF7FED06D62477
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/A82FSq-pOWQzAiKn4gvWwBpwsRw.roa
Signing time: Sun 16 Jun 2024 20:29:34 +0000
ROA not before: Sun 16 Jun 2024 20:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 109.205.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 09:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:22:bd:ae:1f:25:f9:97:c7:dc:cf:7f:ed:06:d6:24:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Jun 16 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03cd854aafa93964330222a7e20bd6c01a70b11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:3a:e9:f7:6e:ce:dd:39:a2:15:fc:57:39:
f5:63:86:e3:94:73:40:ea:20:c5:16:ec:4e:59:2a:
cf:62:01:62:9e:70:ad:30:00:12:0c:1b:36:80:92:
c3:39:fe:49:f8:e1:e9:63:aa:b8:cf:43:39:de:34:
fd:47:e4:2a:eb:9b:82:90:62:83:70:60:3a:61:94:
c0:f5:72:0c:85:80:4a:b0:a1:4f:ce:86:4b:3c:bf:
71:cf:09:f5:e8:bd:6c:be:2c:34:63:b2:68:6a:88:
6e:1c:c1:86:cf:78:1e:5b:54:e3:65:68:33:ea:f0:
25:42:68:61:c0:c9:4b:4c:87:5f:c6:55:4b:22:2e:
de:5e:33:51:dd:a6:58:b5:62:6f:ba:c2:6b:a0:1a:
15:2e:aa:db:11:01:e9:31:78:4c:ec:62:86:e6:55:
75:48:08:e3:6c:48:c2:85:60:f6:3a:43:8a:80:c7:
2d:d5:91:ef:78:57:cc:be:c5:74:94:af:30:9b:83:
db:fe:92:a2:64:cc:87:4b:1b:67:70:5d:4b:a3:18:
29:0f:44:1e:5a:6e:c5:35:2e:95:bd:ad:e5:75:39:
cd:ca:cb:07:6e:de:04:7a:4b:e2:37:14:f7:22:18:
5e:0d:11:b2:a2:f9:ea:e2:8e:84:b8:6e:a1:e3:78:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CD:85:4A:AF:A9:39:64:33:02:22:A7:E2:0B:D6:C0:1A:70:B1:1C
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/A82FSq-pOWQzAiKn4gvWwBpwsRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.8.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d7:1c:f8:d1:3a:15:4f:8e:4f:d5:c1:e9:2b:f1:74:cd:a5:
a9:1e:a2:7f:22:6c:f8:16:22:0c:e7:76:4d:0f:50:7c:17:30:
61:70:27:fe:4c:80:8e:ee:f2:aa:d7:a3:c9:32:44:17:53:c4:
ef:3a:f4:0b:2b:fd:4c:99:b3:3b:2a:24:15:4f:83:20:37:2f:
52:9f:81:b3:67:f3:a1:47:d1:91:16:56:62:37:94:ac:ab:d3:
21:55:3a:07:42:b1:f2:4a:b2:52:6b:f5:44:3f:21:1b:21:af:
d6:a8:fa:7d:0c:4a:66:fa:e0:5c:9d:f4:ba:10:fd:29:9d:3b:
90:c0:23:89:b5:4b:33:a4:05:32:86:7e:11:67:8b:bc:fe:e2:
d6:96:e8:b9:ec:fb:30:36:7b:21:72:73:a9:d0:d4:50:4b:0a:
df:d1:c7:57:3a:c5:0a:39:9f:c3:cc:e2:da:36:a4:38:b0:88:
97:7d:6e:87:c8:69:7c:6c:4e:b7:eb:2d:43:7a:ad:0d:d7:0f:
7e:b6:b1:e6:fc:bc:e9:87:d7:f3:2b:be:1b:cf:28:f3:e4:41:
e6:d5:be:51:c2:6a:a8:e3:93:3f:c7:93:8c:62:32:76:51:0a:
51:01:da:05:94:bf:ba:45:56:50:bf:6a:cf:93:2f:b6:55:38:
09:ff:32:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 13:09:04 2024 by rpki-client on console-ams.rpki-client.org