Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/C4S2Ip4UxsU2j7dVb2ynTK1rzKs.roa
File: C4S2Ip4UxsU2j7dVb2ynTK1rzKs.roa (raw, json)
Hash identifier: ioI2Vupt2NclF9WqAgLmu1pPQje2gfJj4kM60tcQzS0=
Subject key identifier: 0B:84:B6:22:9E:14:C6:C5:36:8F:B7:55:6F:6C:A7:4C:AD:6B:CC:AB
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 0185703968229DBE03CF87B3A2E408C4D0BA
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/C4S2Ip4UxsU2j7dVb2ynTK1rzKs.roa
Signing time: Mon 02 Jan 2023 02:04:48 +0000
ROA not before: Mon 02 Jan 2023 02:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34078
IP address blocks: 109.95.68.0/24 maxlen: 24
109.95.67.0/24 maxlen: 24
109.95.66.0/24 maxlen: 24
109.95.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:68:22:9d:be:03:cf:87:b3:a2:e4:08:c4:d0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jan 2 02:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b84b6229e14c6c5368fb7556f6ca74cad6bccab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2b:bb:3a:6a:c8:70:d5:a9:4b:e8:a7:e2:fd:
3d:fe:d3:cf:fc:83:ab:86:4e:e3:99:a0:1a:6b:4d:
67:3e:76:8c:4e:57:6d:3a:54:e1:56:c6:f3:ca:e5:
d5:dc:4d:43:de:52:b6:bf:f8:d2:8d:b7:e2:42:e7:
fb:0b:49:c0:ca:63:96:87:a5:d8:56:95:e0:69:dd:
f5:26:78:e9:90:ec:72:fc:98:33:22:8e:bb:27:d8:
27:94:bc:7e:50:6f:f4:17:88:c9:02:b7:fc:e0:27:
2e:20:44:62:fa:a6:b1:93:95:3c:93:c9:9d:04:90:
a7:72:2b:0a:c3:e4:3f:05:d9:01:6d:34:21:d0:c4:
60:b5:9a:a6:54:2c:1c:ff:4c:1a:86:74:b2:e1:ee:
06:05:cc:f8:1e:d2:1e:41:5d:dc:d9:d0:e9:7d:b3:
42:b6:ae:e1:61:89:e1:6a:96:d0:2f:bb:c3:91:32:
25:e6:00:7b:dd:12:2b:e4:4a:8b:f2:39:4d:b9:c3:
b0:77:86:38:cb:ed:a7:37:85:98:97:96:a0:97:61:
f5:6d:12:92:1f:99:3b:66:e0:20:0b:01:fe:ad:80:
87:7b:db:df:17:76:83:83:22:1a:3e:0a:89:bc:81:
4d:5f:d9:22:2f:a7:30:d5:dc:76:76:3b:07:a7:f8:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:84:B6:22:9E:14:C6:C5:36:8F:B7:55:6F:6C:A7:4C:AD:6B:CC:AB
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/C4S2Ip4UxsU2j7dVb2ynTK1rzKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.65.0-109.95.68.255
Signature Algorithm: sha256WithRSAEncryption
6a:22:8d:84:c8:33:c6:67:a2:ae:dd:74:49:ba:90:4b:fb:6c:
82:1f:82:03:02:56:06:83:b0:97:a0:2b:15:98:65:1f:43:db:
4b:ef:4a:07:96:72:f3:31:a3:ff:ad:1c:80:87:d0:ae:38:e7:
0c:d2:0e:02:08:bb:57:0e:0e:30:68:2f:78:7b:94:bc:5a:fd:
b1:7f:55:62:f3:c9:7f:ad:21:73:ef:b1:36:92:0a:51:dd:95:
e1:a7:fc:38:5e:9c:68:f3:0b:a3:75:d8:5d:cd:0c:e9:2a:b0:
c9:e5:9b:35:c8:12:8a:19:4b:f6:1e:40:7a:eb:3c:5b:14:84:
4a:2c:66:69:d7:82:8f:85:09:10:67:8a:91:e3:84:86:b7:32:
36:b4:96:23:6c:aa:bb:3d:a3:0a:72:72:b8:6a:bb:fe:d1:77:
85:84:13:56:73:be:01:74:49:47:59:49:cd:fc:8e:c6:81:eb:
b1:aa:7b:e5:02:d5:12:99:fd:dc:b4:e2:a9:20:22:24:14:0b:
3b:30:5b:88:72:bb:bf:74:43:8d:36:93:51:a6:1c:63:02:51:
ea:ec:d8:8b:8e:bb:22:50:a8:6d:71:ce:44:dd:1c:6d:f8:ad:
02:36:9b:0b:6e:4a:9c:5a:7b:0b:9f:17:75:33:00:85:5f:83:
9c:87:ab:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:33 2024 by rpki-client on console-ams.rpki-client.org