Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9-gJUne0ENY68oWbi_sHh04gDiw.roa
File: 9-gJUne0ENY68oWbi_sHh04gDiw.roa (raw, json)
Hash identifier: Al+Aw52u16OiUH9RDdg8d4Ga56WdTxHnfYrHqdffuHk=
Subject key identifier: F7:E8:09:52:77:B4:10:D6:3A:F2:85:9B:8B:FB:07:87:4E:20:0E:2C
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0185706729A1EF3E32407BE1BD4A70E3AA33
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9-gJUne0ENY68oWbi_sHh04gDiw.roa
Signing time: Mon 02 Jan 2023 02:54:47 +0000
ROA not before: Mon 02 Jan 2023 02:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50354
IP address blocks: 109.72.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 08 Jan 2023 20:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:29:a1:ef:3e:32:40:7b:e1:bd:4a:70:e3:aa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 2 02:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7e8095277b410d63af2859b8bfb07874e200e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dc:2f:66:02:11:68:d1:f0:5c:ce:0e:fd:8d:
5c:69:f2:eb:2b:f6:c2:94:49:b8:a0:df:84:78:91:
e3:e6:98:c9:be:19:59:b7:5c:46:a5:fc:f0:c0:5c:
9b:4b:3f:f7:20:d8:2c:d8:5a:d9:c5:c0:5d:b4:8e:
c6:52:54:99:83:81:2e:94:2c:82:dc:20:9f:26:c7:
71:54:c6:fd:f1:80:da:14:86:12:e7:eb:da:93:a2:
79:53:db:c2:bc:63:69:42:76:7a:b0:5a:39:37:d0:
c1:d0:b6:7e:ef:4d:64:94:b4:10:92:37:52:61:b4:
63:96:21:15:c2:db:1d:81:89:82:0a:f5:3f:f6:6c:
fc:71:08:a4:f1:17:5b:4b:99:1a:96:61:08:82:2f:
90:e2:88:8b:84:c7:c5:a1:46:0e:61:1e:8a:c8:d4:
fe:e8:51:a7:0c:30:d0:c5:7d:08:bd:92:c4:cb:fa:
0a:5f:7c:12:a3:f8:44:50:28:be:99:42:87:65:f8:
e1:96:ed:17:39:e1:8f:89:3b:74:f2:6a:e3:26:aa:
0f:5f:60:b0:b6:a6:c1:18:77:9d:e4:6f:32:d8:24:
56:e5:d6:f2:fc:ae:82:7e:25:12:22:8f:1d:f0:6c:
36:f0:c8:06:ad:77:f0:14:3a:63:fa:3e:f2:23:90:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E8:09:52:77:B4:10:D6:3A:F2:85:9B:8B:FB:07:87:4E:20:0E:2C
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9-gJUne0ENY68oWbi_sHh04gDiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.112.0/21
Signature Algorithm: sha256WithRSAEncryption
60:a7:78:cc:85:d2:4a:53:41:14:b4:de:c1:49:eb:f8:29:78:
a1:a3:78:34:5c:48:3a:18:61:32:47:b0:21:f4:f6:fd:30:81:
8b:12:01:8f:09:db:bd:aa:d2:71:f9:60:4f:86:5b:94:8f:4a:
d1:9d:d8:5b:89:19:ba:23:18:7f:1e:03:8e:03:83:f8:a1:e8:
4f:54:22:4b:eb:ec:f7:71:26:1d:66:83:c2:c6:09:d9:1f:ea:
69:6f:46:59:12:a8:79:a1:9c:ac:56:2c:5c:ec:da:3e:58:2a:
86:f1:0b:1e:92:c2:ce:d9:69:91:7c:9b:03:8e:72:b3:11:42:
3f:9d:d9:05:1b:ec:ed:15:1a:60:b5:99:10:6f:be:95:81:5e:
71:2a:51:ce:b8:8e:56:55:81:a4:a0:63:1f:a2:25:8c:5e:76:
de:17:65:d9:67:a6:48:1a:9c:70:37:c6:42:58:c7:59:a6:33:
c1:56:fe:76:05:c6:46:4a:39:aa:7e:42:50:8b:4b:18:fc:bf:
78:72:6a:eb:04:db:5c:b2:c1:0b:e9:ea:c1:10:82:e0:f1:35:
29:e9:66:f8:e1:56:c5:b3:a4:91:d3:95:79:03:f7:e6:7e:c6:
71:31:d4:93:72:45:39:4d:07:c4:74:de:ec:e9:f0:83:b6:e0:
77:14:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org