Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/4Ro2AYMmU_qUYGCFjO_eHsFbyAU.roa
File: 4Ro2AYMmU_qUYGCFjO_eHsFbyAU.roa (raw, json)
Hash identifier: d3mE7PaREkglmZmO6fAMhhYf+3IMWzYs0uLfDAxQ93A=
Subject key identifier: E1:1A:36:01:83:26:53:FA:94:60:60:85:8C:EF:DE:1E:C1:5B:C8:05
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018AAE2E15ED00A7A575039BAA8F38108C32
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/4Ro2AYMmU_qUYGCFjO_eHsFbyAU.roa
Signing time: Tue 19 Sep 2023 16:02:50 +0000
ROA not before: Tue 19 Sep 2023 16:02:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400810
IP address blocks: 109.72.114.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:2e:15:ed:00:a7:a5:75:03:9b:aa:8f:38:10:8c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Sep 19 16:02:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e11a3601832653fa946060858cefde1ec15bc805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:07:0f:c3:ad:5d:f9:14:b5:14:93:a3:29:a6:
53:20:ed:98:78:90:0d:85:23:74:b5:7c:f0:c6:03:
f1:03:d4:3d:0c:69:10:4c:b9:4f:0e:61:5a:37:f5:
b2:3b:01:c9:2a:fe:83:5e:f5:a4:6d:28:b7:b0:1e:
b5:6d:64:9c:5b:0d:a0:f9:11:a8:e7:77:e1:2e:b1:
15:31:2a:aa:19:5c:45:14:1b:f0:72:3c:17:ff:e6:
86:e5:6e:d1:6c:f3:1a:e8:60:6f:9e:d5:d4:a4:d1:
ab:83:f6:30:26:bd:01:95:a4:ec:12:43:41:28:61:
b7:d2:4b:f2:62:9e:8d:71:f3:2a:6b:c9:fd:38:16:
fa:31:85:26:88:9f:7b:af:a0:fd:d4:55:8a:23:31:
29:be:12:17:45:5b:35:83:c2:3c:0c:cc:ac:65:e7:
fd:eb:c3:3e:60:3a:7b:2d:7f:95:09:26:d1:e4:71:
d8:7c:3a:f1:b8:fe:2d:6a:89:f4:99:80:04:5d:07:
85:d3:f4:5b:ea:1b:55:e2:43:04:35:3d:a1:23:09:
de:88:2a:4b:bf:6c:df:77:3f:a7:69:93:ad:64:ff:
97:64:81:9d:0e:97:b9:ab:ff:e5:24:53:72:66:a5:
03:c5:6e:99:ad:f3:c3:88:dc:6d:df:f9:f4:d6:91:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1A:36:01:83:26:53:FA:94:60:60:85:8C:EF:DE:1E:C1:5B:C8:05
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/4Ro2AYMmU_qUYGCFjO_eHsFbyAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.114.0/23
Signature Algorithm: sha256WithRSAEncryption
18:f9:ba:4c:e5:a1:92:f7:47:d4:f4:32:aa:40:0e:40:f7:92:
71:4d:37:04:04:12:70:7a:9e:ce:70:df:aa:1f:da:33:b4:a4:
24:8c:1d:14:0b:a1:41:37:07:26:5f:86:37:69:89:05:52:ff:
59:cd:07:1a:ac:0f:c0:5d:bc:58:fc:7e:2c:03:3d:fd:42:a5:
47:a6:7e:d4:b2:d6:84:94:86:b5:a1:81:bc:8f:e3:9f:43:c9:
bb:87:2b:e4:82:3a:44:26:bc:ce:d7:3b:0d:09:2e:24:eb:72:
f0:3e:cc:18:f6:ca:17:05:25:43:b7:2b:ae:f5:58:d7:30:f4:
5f:35:fc:13:0f:6f:99:87:2c:b3:5b:f3:f3:22:ac:59:22:89:
79:1c:36:c6:eb:65:e2:c2:b4:72:fb:53:5d:1a:9f:4a:b4:7c:
61:ec:f5:0e:7d:63:11:c6:c7:c6:02:08:f0:b5:17:cb:d9:67:
ce:85:42:a5:52:41:e0:fe:92:9d:d3:59:50:e1:67:fc:a0:31:
c4:c2:2d:49:8d:3f:96:6e:aa:b9:d7:98:64:57:27:7f:13:c3:
bb:21:d5:29:79:ad:bf:41:57:41:aa:bd:b6:98:41:03:a9:d8:
f5:9b:9e:8c:f7:66:88:e9:41:53:99:90:06:13:8f:df:9a:62:
14:a5:f2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org