Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/8kQOXuDPDWxTiIQBFCY9QrsZh24.roa
File: 8kQOXuDPDWxTiIQBFCY9QrsZh24.roa (raw, json)
Hash identifier: Tby+2RTaKPFx58CwgTZj0fqBrP1+Vu4NCTUJv5rrkCY=
Subject key identifier: F2:44:0E:5E:E0:CF:0D:6C:53:88:84:01:14:26:3D:42:BB:19:87:6E
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018B192856B6B88FD2AC20BCC4A18BA745CB
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/8kQOXuDPDWxTiIQBFCY9QrsZh24.roa
Signing time: Tue 10 Oct 2023 10:35:55 +0000
ROA not before: Tue 10 Oct 2023 10:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 109.72.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 09:13:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:28:56:b6:b8:8f:d2:ac:20:bc:c4:a1:8b:a7:45:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 10 10:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2440e5ee0cf0d6c5388840114263d42bb19876e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:f0:a7:21:1d:55:b2:03:e6:58:c9:c7:3e:
d7:cf:26:19:96:b1:7c:89:23:d6:5e:b3:c8:78:36:
13:85:f5:5f:17:14:83:cd:e5:59:f8:a4:63:12:df:
50:6d:0d:e7:92:f3:13:11:88:7a:bc:d8:ee:68:e1:
48:ec:f3:99:6a:82:c5:78:d0:7f:e8:d2:b7:b7:e1:
b0:f5:45:f2:32:6f:3b:84:3f:91:5d:24:0f:0e:3f:
54:78:ad:b7:60:56:ec:ee:ee:66:a9:15:4a:a9:8d:
1d:1a:e2:1c:29:0a:bc:19:72:48:16:2b:1a:5e:4b:
e3:23:4b:06:7e:2c:1f:6c:df:9e:82:79:42:5c:87:
af:4e:79:cb:2a:50:62:11:65:51:46:a2:1c:5b:8e:
cc:19:38:50:3d:b7:d2:59:89:7b:98:e0:c5:87:34:
b2:b6:e3:f4:f0:77:cc:85:65:86:d6:fd:66:9b:0d:
99:56:7d:cf:3c:e4:34:5c:16:9e:e1:62:40:65:57:
0e:21:f5:f1:98:01:11:c7:15:b5:de:83:32:4d:5b:
e4:bf:34:6c:25:b3:94:d0:ff:08:f9:fa:9e:a9:ec:
d5:17:64:7d:33:69:be:4d:9b:57:ef:65:4f:a2:10:
86:d4:52:b5:50:c8:32:2b:cf:29:9f:71:b8:97:07:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:0E:5E:E0:CF:0D:6C:53:88:84:01:14:26:3D:42:BB:19:87:6E
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/8kQOXuDPDWxTiIQBFCY9QrsZh24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.112.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c9:6b:0c:69:ee:db:ee:90:c1:2c:02:49:8e:61:3a:82:6e:
d3:ec:71:05:c5:41:ef:4e:d3:9c:53:d0:7f:e0:b9:f1:5a:e7:
e5:a7:a5:63:96:21:f7:e1:8e:ea:95:6c:13:97:1c:ef:4c:95:
81:a9:0e:1b:4e:5d:e6:05:0e:e3:a7:a9:53:d5:ed:e2:c0:c5:
aa:ae:69:e0:ea:4b:a6:d8:28:d9:f7:02:f1:24:66:f0:d3:f3:
6b:a7:e8:70:be:1b:d0:0c:32:21:65:c6:57:8f:d5:eb:55:f0:
93:44:68:dc:8b:b0:4b:cd:36:b0:69:39:f4:9b:d7:62:58:0d:
3a:03:b5:74:79:bc:77:73:ee:a3:16:cf:9d:18:89:30:e6:da:
a5:e6:e2:97:5f:f8:0e:2a:df:2d:b7:f8:9a:80:39:81:59:f2:
bf:b9:50:44:f7:50:73:6b:3a:55:1e:4b:f6:e7:85:18:85:85:
c8:bd:b2:72:3b:dc:83:8d:c0:ea:20:32:ac:57:2e:ba:c0:52:
07:44:c7:82:ed:43:54:9d:6c:d1:aa:5b:1c:1b:32:fb:72:c7:
ed:ce:9e:65:fe:b9:1b:8c:d2:3b:67:3d:41:0d:ed:80:ff:25:
ca:b3:22:dc:97:b3:a9:03:c0:14:81:3e:05:52:37:7c:1c:04:
36:a3:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org