Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/5POHWQ178n0MARM2fpiAkfElqD0.roa
File: 5POHWQ178n0MARM2fpiAkfElqD0.roa (raw, json)
Hash identifier: 1dqmz0rL6+FLLZ+Mw8Ohx55WKsvxvegPiH1mQcaJjTI=
Subject key identifier: E4:F3:87:59:0D:7B:F2:7D:0C:01:13:36:7E:98:80:91:F1:25:A8:3D
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0189F8E3D7DCA0B79394E54697358D2E9738
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/5POHWQ178n0MARM2fpiAkfElqD0.roa
Signing time: Tue 15 Aug 2023 11:10:28 +0000
ROA not before: Tue 15 Aug 2023 11:10:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 109.72.117.0/24 maxlen: 24
109.72.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 11:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:e3:d7:dc:a0:b7:93:94:e5:46:97:35:8d:2e:97:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 15 11:10:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4f387590d7bf27d0c0113367e988091f125a83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:15:96:d0:20:f9:8c:cc:36:b1:08:d5:c3:7f:
09:ed:3d:bd:04:da:2e:15:db:9c:2d:eb:b7:eb:bb:
e0:6c:f1:d9:c1:e7:f5:b0:bf:3e:6f:8e:2b:76:c7:
b9:eb:8d:2b:e6:ea:57:ee:8a:a9:f4:3a:18:0e:2d:
77:34:2c:c6:78:47:ee:c0:cc:0d:b8:c0:8f:98:75:
d0:79:9e:52:49:05:c0:9e:f0:11:04:4a:62:71:05:
61:e7:2e:80:35:33:03:68:22:87:c1:a0:23:3a:4c:
83:1b:b4:0d:7f:2d:76:06:9a:d8:b1:4d:81:12:7c:
c5:36:4c:ef:a7:c4:f7:35:2d:05:bf:d0:84:f4:c2:
59:e4:33:c1:3d:00:7c:30:12:f3:49:76:e3:42:c4:
7f:4f:99:2f:b2:8f:06:a3:4c:4e:98:24:bb:f9:07:
5c:b9:3a:74:2f:95:59:5d:0a:89:1d:25:aa:c1:86:
d5:41:14:02:5a:64:73:3c:76:78:e0:a2:d6:97:fe:
15:66:35:b2:b9:de:cb:07:5f:93:c8:da:27:d6:06:
f6:1b:5f:f5:a8:92:e8:44:29:de:ec:07:84:07:0b:
63:c9:56:ae:31:e5:1a:cd:71:b0:f7:ab:aa:07:8b:
d9:91:2d:a9:b3:ed:ca:69:85:dc:0a:9f:5a:38:fc:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F3:87:59:0D:7B:F2:7D:0C:01:13:36:7E:98:80:91:F1:25:A8:3D
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/5POHWQ178n0MARM2fpiAkfElqD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.117.0-109.72.118.255
Signature Algorithm: sha256WithRSAEncryption
88:cd:eb:91:2e:04:78:90:ea:b4:f8:e0:0d:cf:b1:01:d0:80:
46:b6:fd:a2:db:6e:9f:08:6c:f2:48:b6:56:c0:43:36:2f:53:
25:9d:1c:4d:93:a9:96:c0:6b:18:00:97:99:90:b5:a2:3a:65:
38:a3:ee:04:0b:99:20:ea:f5:8d:66:09:1e:a8:20:79:9d:3f:
f6:89:72:aa:32:16:a9:40:b3:1e:9c:e5:81:75:9f:58:37:e6:
49:f3:44:11:11:b0:f7:81:95:c9:69:46:ab:e2:4e:0b:d7:00:
91:71:0c:8e:55:f8:9b:35:dc:8d:0d:0b:8f:1b:8b:c0:e8:4c:
c6:2a:dc:b7:6c:04:cc:1c:c7:d7:66:2d:e7:79:ee:db:40:89:
9a:41:ac:ef:ed:6f:85:62:30:74:cb:0e:ad:a4:0c:47:0b:24:
a9:63:83:60:a6:77:bb:c3:53:74:64:5c:4d:0a:18:a2:c4:ff:
36:6a:ed:29:84:26:d1:3f:8a:55:19:e1:22:4d:a8:a8:8d:66:
74:54:cb:fd:e2:bc:2f:54:33:23:77:16:d5:f4:6a:fd:48:73:
be:06:c3:bc:33:74:00:b5:8f:db:7a:24:9b:1a:b2:7c:9b:fb:
3d:89:80:96:45:3c:c1:ef:ed:37:b3:0e:6f:7f:11:a8:32:1f:
cc:1f:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org