Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-2ShlmpO1rGzz7qwtMYCKOSyaA8.roa
File: 1-2ShlmpO1rGzz7qwtMYCKOSyaA8.roa (raw, json)
Hash identifier: yBmXjVXNynM01CxTLkDTyKQ/OyyNzAkoOBRz39pDnjU=
Subject key identifier: FB:64:A1:96:6A:4E:D6:B1:B3:CF:BA:B0:B4:C6:02:28:E4:B2:68:0F
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018CC649C7E12AF8AB7A6B8BB63B17D08757
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-2ShlmpO1rGzz7qwtMYCKOSyaA8.roa
Signing time: Mon 01 Jan 2024 18:29:33 +0000
ROA not before: Mon 01 Jan 2024 18:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34989
IP address blocks: 109.72.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 10:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:c7:e1:2a:f8:ab:7a:6b:8b:b6:3b:17:d0:87:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 18:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb64a1966a4ed6b1b3cfbab0b4c60228e4b2680f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:64:1a:9f:13:1e:c3:99:fd:86:46:64:d0:
e1:98:b4:0b:d8:50:3f:f4:bd:b2:c9:1b:13:37:1d:
24:77:bc:72:43:7b:31:5f:30:54:ed:e5:3c:4d:0a:
42:05:a2:81:5c:cc:74:84:45:e4:09:c2:d4:b7:4d:
02:c5:9c:c0:db:ab:7f:6b:21:eb:2e:69:14:73:2e:
0d:c4:a2:08:42:a9:e8:f2:1b:65:a8:ef:31:15:3a:
ab:4a:72:74:ff:fc:52:c5:43:37:76:b3:04:70:a2:
27:c7:3f:0b:af:e5:d8:50:00:71:f9:d2:30:71:9a:
af:69:2a:8d:92:d8:1b:96:69:89:c1:eb:68:1a:c0:
2c:6d:02:53:57:9d:40:90:fb:a0:a5:66:9b:94:f5:
10:57:49:4d:52:bf:41:e6:21:97:b6:35:05:d7:bf:
2d:a6:70:22:81:14:99:82:4a:9d:77:17:2c:8b:35:
9b:8d:f9:51:a0:40:81:2c:b5:7b:a8:01:0a:2a:0f:
4c:12:90:50:a3:0f:86:f0:5a:3f:e8:a6:9d:f6:eb:
de:b9:8d:71:69:d7:c9:0b:ed:00:15:75:de:a9:3c:
2f:d5:56:93:f2:c8:26:da:96:0c:f0:89:a4:7e:fb:
c0:f5:e0:b9:b1:4f:51:3a:87:12:59:cb:87:8a:4c:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:64:A1:96:6A:4E:D6:B1:B3:CF:BA:B0:B4:C6:02:28:E4:B2:68:0F
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-2ShlmpO1rGzz7qwtMYCKOSyaA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.112.0/24
Signature Algorithm: sha256WithRSAEncryption
21:0b:e6:50:5e:e5:ee:69:88:de:c9:11:de:57:c8:33:08:39:
23:16:22:4f:16:75:aa:4e:ca:65:74:16:81:ea:91:25:ef:4d:
1a:c6:85:2b:d3:ca:54:0f:c4:d9:f6:8a:89:08:63:77:11:cc:
2d:b0:7d:b7:e8:8c:20:24:69:74:47:99:2f:ba:65:3b:5d:72:
59:81:00:6d:55:5b:68:4b:4c:d8:3d:cd:87:3f:15:fe:c5:58:
1b:31:c1:a8:12:60:26:ac:35:2e:aa:2b:17:6d:9a:fa:e0:0f:
25:f4:ec:08:bb:e6:54:49:06:3a:0a:09:c0:08:cb:fd:00:47:
88:07:b9:27:5a:70:a3:c1:31:b1:93:d2:a2:73:4a:e4:cc:0b:
11:67:a2:46:34:bc:1e:a6:37:db:47:b1:07:5d:15:89:76:9e:
6c:a8:56:a5:ca:3b:1a:81:7d:1e:b9:82:73:d2:a3:a1:83:90:
23:19:15:fa:41:51:c5:1c:0f:e1:ed:66:53:0d:aa:43:21:76:
11:25:ab:6b:94:f0:77:60:8f:57:42:35:f4:f5:f9:8d:d3:f2:
45:14:a6:7c:f3:54:f5:2a:67:28:5c:df:75:dd:60:aa:22:56:
67:a6:62:23:2e:fb:a0:14:f7:d4:73:76:f1:eb:22:9c:c8:4c:
f3:d6:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org