Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/K6L9m7k14eBFeDOP8XX73yQMuWk.roa
File: K6L9m7k14eBFeDOP8XX73yQMuWk.roa (raw, json)
Hash identifier: 2tsAOykiYnX/pra1BZzVwSUEmVzEhvuz9YyskMLBa20=
Subject key identifier: 2B:A2:FD:9B:B9:35:E1:E0:45:78:33:8F:F1:75:FB:DF:24:0C:B9:69
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0185C09307A76A39A3C7BE67B1B5C360727E
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/K6L9m7k14eBFeDOP8XX73yQMuWk.roa
Signing time: Tue 17 Jan 2023 16:32:19 +0000
ROA not before: Tue 17 Jan 2023 16:32:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 109.72.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jan 2023 08:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c0:93:07:a7:6a:39:a3:c7:be:67:b1:b5:c3:60:72:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 17 16:32:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ba2fd9bb935e1e04578338ff175fbdf240cb969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:65:70:82:12:49:ce:e1:0d:09:d2:81:31:f0:
77:09:ab:64:20:35:c8:21:f6:a9:94:4e:c2:05:4a:
26:6f:57:c2:e8:25:a2:d1:0b:b8:fe:72:1f:7a:07:
26:7d:2e:89:b8:d3:b0:ef:8b:aa:e5:45:fb:4e:1c:
54:d6:df:0d:28:63:f9:d3:0c:9e:05:97:4d:78:a1:
b2:82:69:a5:24:b6:81:d9:fa:dc:04:a5:04:b9:78:
eb:52:ff:33:7f:61:07:4c:18:43:1f:b7:67:21:7d:
82:a4:e0:1b:93:33:64:59:c9:b0:11:65:d8:3f:a4:
38:70:b5:a5:ad:97:f2:c6:75:9d:39:2a:4d:a3:d3:
84:2c:04:f3:ac:cb:76:1e:c6:61:53:15:7c:d5:6f:
77:88:d4:f0:a5:0d:bb:b5:77:71:4d:8d:fa:f5:b1:
4e:02:2d:fa:e2:3d:e7:25:21:2d:d6:55:8e:0e:83:
d8:2c:b7:0a:64:0b:52:b6:4f:74:96:05:36:bd:ba:
b8:13:7f:11:b0:a6:d5:55:37:f4:5b:6f:98:e7:3c:
34:ce:6d:ff:43:f7:a1:89:82:bb:ec:1f:e2:c1:52:
40:7a:05:5c:b6:18:0c:58:ec:13:60:1e:71:2f:f4:
8d:e9:04:24:f6:0c:77:a0:8c:1f:c3:a5:25:58:56:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A2:FD:9B:B9:35:E1:E0:45:78:33:8F:F1:75:FB:DF:24:0C:B9:69
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/K6L9m7k14eBFeDOP8XX73yQMuWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:5c:0d:05:91:08:be:bb:1e:e7:46:f5:c6:ae:11:c5:4b:91:
b7:11:97:18:a3:05:15:7f:c3:21:53:f0:1a:c3:d7:64:ec:68:
4f:f6:be:2d:d9:e9:64:fd:99:86:e2:e2:0d:e6:d5:8d:94:f4:
62:11:01:7a:9e:a3:33:03:13:15:21:d7:3f:5e:45:2a:3d:19:
69:d3:cf:a7:35:39:f1:47:07:cf:d1:ed:a4:52:fb:18:51:e8:
cf:bb:a6:7e:58:b7:48:b2:1b:79:a0:02:28:f1:93:3c:51:b5:
28:7d:01:0a:3a:89:3c:9a:85:f9:e8:32:36:82:fe:82:13:24:
4f:4f:5f:67:7a:1c:0d:50:34:70:94:d9:ea:67:0c:bc:de:e2:
47:64:52:79:96:2c:ca:36:4d:9d:01:36:57:e1:a3:5c:bf:ab:
12:f6:45:3d:b2:2b:b4:3c:06:d6:94:86:3d:a9:cf:fc:38:e5:
27:af:ce:21:34:0e:5d:09:0a:39:24:d0:60:c4:39:ee:6d:0f:
f4:6d:ee:84:b0:6d:b6:09:eb:de:be:52:b9:68:5a:17:12:a6:
bf:73:5e:dc:45:c5:2f:0d:f0:20:a3:09:9b:a3:63:86:0b:f8:
4b:f6:d9:33:96:d1:aa:14:b1:49:72:79:5c:82:86:a4:ea:05:
11:34:03:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org