Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/CGmZYAxIcthuJ2WbdvsNtfA9meY.roa
File: CGmZYAxIcthuJ2WbdvsNtfA9meY.roa (raw, json)
Hash identifier: TMuo9t+5glRwF9CZUBcE1ZEnQswPr/OiLJWjDXAzBCk=
Subject key identifier: 08:69:99:60:0C:48:72:D8:6E:27:65:9B:76:FB:0D:B5:F0:3D:99:E6
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018C8BCAE275EC924AAF5E843692E3B5BB8B
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/CGmZYAxIcthuJ2WbdvsNtfA9meY.roa
Signing time: Thu 21 Dec 2023 09:52:58 +0000
ROA not before: Thu 21 Dec 2023 09:52:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201575
IP address blocks: 109.72.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:ca:e2:75:ec:92:4a:af:5e:84:36:92:e3:b5:bb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 21 09:52:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=086999600c4872d86e27659b76fb0db5f03d99e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:66:bc:69:c3:7d:f9:cb:e8:53:d4:74:2a:8f:
87:0a:3e:20:49:a7:ea:cf:f1:9c:a3:1a:59:f9:f9:
19:c5:02:85:c4:26:9b:a5:fb:4c:1f:e6:f8:cf:4a:
95:4c:16:30:51:42:8b:06:f7:c6:d9:9c:90:f3:75:
71:82:2c:11:a9:c5:ee:89:2c:e7:a6:be:f9:2d:00:
fe:f9:e0:ab:67:41:63:1a:ae:73:d5:95:4b:08:57:
3f:83:92:cc:64:c5:e8:40:62:4f:36:ca:63:56:23:
00:25:b5:99:da:cf:3a:f5:57:09:e6:eb:0c:a2:48:
e5:bb:d2:d4:e0:71:6b:e9:11:ba:8e:45:2f:0f:4e:
50:b7:8b:bd:12:4a:74:bc:e8:59:7e:75:33:8e:d8:
4f:a7:4f:1f:2d:07:12:fe:6b:97:9e:47:91:15:30:
f1:b0:61:d7:fd:1d:4e:c7:6e:2b:98:59:89:56:ce:
b9:d0:56:d2:08:c5:e0:ea:15:c5:93:f4:36:2e:eb:
49:92:c7:d7:2d:4a:10:ee:4f:5c:a1:4b:3d:47:68:
0c:8f:b3:22:38:c6:74:a8:77:a2:45:09:49:69:79:
89:39:08:1f:01:13:ff:c2:66:ae:af:79:f3:7d:9c:
66:89:88:97:14:fe:34:60:92:72:08:00:2a:e2:4d:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:69:99:60:0C:48:72:D8:6E:27:65:9B:76:FB:0D:B5:F0:3D:99:E6
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/CGmZYAxIcthuJ2WbdvsNtfA9meY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:11:f4:db:16:84:7f:48:d1:e9:bb:e0:38:14:c8:55:d5:cd:
06:44:64:36:0e:7a:54:9a:59:d5:a9:ce:02:75:af:46:df:06:
88:43:6d:37:51:1d:4c:0c:57:7f:bc:a5:aa:2a:ff:3d:de:0a:
be:53:42:29:6b:70:80:f6:d7:61:11:e0:52:9a:a7:33:3c:0c:
e0:ec:c7:0f:43:de:b1:44:72:0b:0a:1a:b6:33:23:44:dc:fb:
78:ff:65:88:1a:75:21:92:4e:bb:f1:09:d8:49:76:53:d1:92:
c0:ea:3b:13:76:96:6f:42:80:a3:06:e2:4c:39:c4:29:f4:af:
41:0c:47:ca:58:c1:8e:44:ab:cc:c6:4e:dd:68:d9:78:92:0c:
05:09:b6:be:3e:cb:7b:18:13:e2:b3:76:f6:8d:c5:1e:5b:bc:
e8:34:8e:40:96:ea:ed:75:ac:99:b4:b6:4c:48:ea:30:53:15:
63:b9:2b:af:27:84:50:6e:ee:2f:ab:72:99:a6:46:cc:a5:af:
9a:f1:ee:a8:1b:c4:68:eb:0c:c3:78:5d:88:c4:4b:03:ce:cb:
8c:e7:b3:7d:9e:c0:ec:fd:2e:d2:c1:10:60:c7:fe:d5:a6:b7:
ff:0b:aa:04:0f:1d:29:f8:a5:47:5e:dc:1d:98:3b:01:cc:66:
ba:2b:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org