Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/44LIpg9R8PlSGCURLrN_8DQAPs8.roa
File: 44LIpg9R8PlSGCURLrN_8DQAPs8.roa (raw, json)
Hash identifier: tJTQFAXpSy+lpFi/kPbPhd+ZjpP+s7fSRm5r+hRJ4uk=
Subject key identifier: E3:82:C8:A6:0F:51:F0:F9:52:18:25:11:2E:B3:7F:F0:34:00:3E:CF
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018B3884C1F1FAB97AD931F5101861A74091
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/44LIpg9R8PlSGCURLrN_8DQAPs8.roa
Signing time: Mon 16 Oct 2023 12:45:06 +0000
ROA not before: Mon 16 Oct 2023 12:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 109.72.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:84:c1:f1:fa:b9:7a:d9:31:f5:10:18:61:a7:40:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 16 12:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e382c8a60f51f0f9521825112eb37ff034003ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:46:ad:4d:78:1b:6d:dd:59:70:3d:32:f6:c1:
3a:db:34:15:b3:d0:da:47:fe:ae:b5:eb:90:6a:e1:
3c:c9:42:9a:d7:7d:c4:3f:ad:1b:3d:af:a3:a2:a3:
59:d1:7a:a2:06:97:cc:a8:07:3b:2e:93:95:aa:04:
d8:fe:15:41:93:66:7e:95:ba:32:ff:64:f4:8c:c1:
4b:48:d6:bc:98:18:f0:e7:f4:af:2d:aa:72:60:62:
16:ca:1a:12:3b:35:b4:0d:69:a4:06:81:1f:10:16:
c2:f5:c9:2a:a7:d7:e1:6f:94:14:e8:e7:ac:3b:1a:
b5:3f:7d:08:02:7e:32:2b:f0:a2:9d:f2:00:d2:b9:
30:66:a8:f4:fc:a2:a8:e5:89:a8:84:65:64:2e:05:
16:2c:fb:dd:86:e9:08:69:39:b6:24:d3:9e:1e:9c:
08:2e:53:2f:be:98:67:84:fc:da:86:6f:7e:40:5b:
95:e2:d1:f4:1d:e8:d8:b1:5a:23:9a:5c:c4:7f:84:
a2:7b:0a:06:6e:2f:35:d8:c2:ac:70:5b:dd:ba:9e:
63:be:ef:1a:cc:61:af:21:b3:59:7c:09:9a:e3:7a:
7d:e5:d9:fc:fe:f5:3d:75:a0:7a:dc:8c:ad:b9:b6:
91:f6:b3:5e:29:fb:b8:d5:7f:33:a8:36:ec:23:9a:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:C8:A6:0F:51:F0:F9:52:18:25:11:2E:B3:7F:F0:34:00:3E:CF
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/44LIpg9R8PlSGCURLrN_8DQAPs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:80:2c:cb:86:52:17:d6:48:84:e3:eb:a8:2d:29:8f:44:04:
c2:d4:5a:39:e6:44:96:98:96:f3:6c:57:fd:b5:2b:1e:58:d1:
fc:6f:47:6f:71:2e:89:d2:5c:1d:57:b2:e3:46:6c:e2:b1:d7:
3e:ff:fc:6f:f6:a8:cb:ef:26:03:ad:a9:32:d0:c6:4e:f2:61:
15:8d:54:4b:b1:41:0b:c5:b4:51:d5:ee:07:4f:61:a9:d0:2e:
43:96:3d:ee:4d:9c:cd:bc:32:2a:9e:c0:97:a4:33:39:fc:48:
bb:c3:51:89:4c:68:45:06:e5:c5:9f:2d:84:a7:c9:d4:13:c6:
12:9a:fc:03:a3:d1:f8:fc:85:ac:71:7d:69:c9:47:41:65:3f:
c6:66:9d:21:34:05:5b:cb:10:8f:3b:bf:1d:0e:7f:46:51:ef:
cd:a3:2d:dd:e1:c8:23:96:f1:cf:a1:aa:6e:9b:8d:6f:86:43:
7a:a8:d1:51:b2:fe:49:52:cc:b4:38:71:22:ba:6b:f5:42:d4:
8f:b9:83:30:63:04:4d:7b:67:22:39:67:f1:be:89:83:93:78:
2f:48:d9:77:45:8b:78:d8:06:79:b4:a7:b8:9d:70:51:31:82:
7a:a0:59:c2:6b:44:10:62:35:d3:8f:50:46:ac:54:cb:32:28:
a3:03:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org