Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9JDyanibidebkFcHDLrRhdAjmyo.roa
File: 9JDyanibidebkFcHDLrRhdAjmyo.roa (raw, json)
Hash identifier: vGDJCfiN8Kq7/+sfoq2drHdn7qpoDjbkrroPRF/834o=
Subject key identifier: F4:90:F2:6A:78:9B:89:D7:9B:90:57:07:0C:BA:D1:85:D0:23:9B:2A
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0185E85C7F871239406B53FAE2B65D084E21
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9JDyanibidebkFcHDLrRhdAjmyo.roa
Signing time: Wed 25 Jan 2023 09:57:34 +0000
ROA not before: Wed 25 Jan 2023 09:57:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139660
IP address blocks: 109.72.125.0/24 maxlen: 24
109.72.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Feb 2023 17:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:5c:7f:87:12:39:40:6b:53:fa:e2:b6:5d:08:4e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 25 09:57:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f490f26a789b89d79b9057070cbad185d0239b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:33:da:84:63:14:ac:90:ce:39:b5:3e:f6:
cf:91:54:c1:ef:c7:7e:8b:6a:fe:97:01:6f:c8:f0:
ac:50:dc:3c:04:f7:45:17:d1:14:6b:6b:43:b7:14:
33:fc:d1:4e:e6:2e:b1:05:42:30:1f:0f:68:15:c0:
b3:1f:c6:64:38:2a:8f:b9:9d:b7:cf:e5:46:c8:ae:
39:f1:9b:2a:ff:bb:31:40:7f:b8:03:20:3c:e4:1d:
cf:80:a0:f1:d9:db:1b:e0:b6:a0:56:be:af:4b:8e:
62:74:d3:66:86:ab:ba:1e:35:b5:be:82:3a:7b:66:
f4:33:19:98:fe:d1:6a:35:f1:f6:b4:67:73:77:95:
89:78:fd:1c:28:f7:cf:34:d1:6c:cc:eb:b9:bb:de:
dd:86:7b:8b:46:67:cd:dc:a3:46:7e:cf:a1:d3:fd:
c0:fd:c2:12:a1:30:13:d5:56:58:35:32:16:1f:2d:
2e:f9:cd:7c:52:43:41:f2:2b:b5:8e:c1:ec:3f:e5:
1d:65:68:80:44:b7:77:d9:eb:18:77:eb:c6:a1:96:
f1:0a:f6:9e:f8:df:c0:b3:a2:78:02:cc:f8:36:8b:
97:97:bf:5f:d9:6a:2a:b1:ae:c5:c9:41:f6:f0:14:
36:19:85:a1:be:e4:9e:a2:3e:88:d7:c8:9c:05:ad:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:F2:6A:78:9B:89:D7:9B:90:57:07:0C:BA:D1:85:D0:23:9B:2A
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9JDyanibidebkFcHDLrRhdAjmyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.125.0/24
109.72.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:42:7c:da:b9:af:56:fc:6b:05:92:1f:08:35:b2:e4:32:22:
ea:0d:79:30:f0:51:39:08:33:dc:1b:2f:d8:62:4f:65:62:07:
cc:cd:9d:77:d6:b2:54:e0:1c:1a:29:7b:e4:f0:0d:74:b1:5e:
93:8f:29:5a:ea:9f:ea:ac:6a:a5:c0:cd:02:72:42:66:53:3b:
84:62:5e:30:8b:fb:b4:3c:68:74:3d:1d:13:20:f8:ae:d9:86:
d7:a4:4a:ad:10:2b:02:bd:3b:b6:73:20:37:93:a1:4e:d5:21:
97:eb:ae:b6:c1:df:f1:a3:35:02:3a:12:0b:fe:0a:49:59:f8:
e9:33:14:90:dd:d1:12:d2:45:95:bf:dc:3d:d1:aa:f0:3f:b6:
e9:3d:64:c4:b5:02:fa:90:c5:4d:74:0b:84:ca:4a:11:ae:e4:
6b:4c:b7:ba:79:15:ba:2c:00:71:d0:87:81:0e:78:2b:e9:6e:
ee:7b:6b:ab:74:51:01:2d:dd:55:78:df:10:18:4c:fe:d1:34:
1a:9b:22:96:62:a5:6c:93:38:fa:fb:78:a8:cf:39:62:53:cb:
87:e5:65:fb:53:d5:78:ab:0a:3e:d8:8c:3f:dd:b8:18:16:e7:
e5:0d:9d:14:b2:9d:82:55:93:c2:7a:9c:17:3c:a6:5a:af:32:
9e:e4:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org