Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/LweB0F8uF376xbm7q_UnZjGdpCE.roa
File: LweB0F8uF376xbm7q_UnZjGdpCE.roa (raw, json)
Hash identifier: LnWMn6M8mT0cb6jhUgYFZFDM1Q3ZxQH7mrFE0G032OQ=
Subject key identifier: 2F:07:81:D0:5F:2E:17:7E:FA:C5:B9:BB:AB:F5:27:66:31:9D:A4:21
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0186C86E8BC71BFF7EFB0823441AEF407F8D
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/LweB0F8uF376xbm7q_UnZjGdpCE.roa
Signing time: Thu 09 Mar 2023 22:12:13 +0000
ROA not before: Thu 09 Mar 2023 22:12:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 109.72.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Mar 2023 16:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c8:6e:8b:c7:1b:ff:7e:fb:08:23:44:1a:ef:40:7f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Mar 9 22:12:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f0781d05f2e177efac5b9bbabf52766319da421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:93:87:46:5f:32:4f:3d:ff:f4:b9:c0:a8:fa:
4a:02:b1:8a:41:99:39:10:c4:3c:ae:a2:b5:60:b3:
01:fb:c8:bb:a6:f8:4f:a7:eb:1b:36:7c:a6:e7:e9:
65:e3:40:74:6b:6f:56:1c:20:f5:c7:f0:aa:9f:32:
66:7e:26:84:f8:0a:07:10:45:6a:b4:be:8b:dc:76:
41:0c:52:a5:c8:48:d9:34:2b:59:c9:cc:eb:27:4f:
ad:7b:62:64:8c:f8:c9:e8:65:57:f1:c8:4b:8b:a2:
16:e6:99:de:89:ba:1c:e5:d2:03:ff:72:de:0d:f9:
c4:30:7b:df:ef:83:27:47:92:ac:4c:f9:fd:6d:14:
27:2d:dd:30:d4:9b:73:26:12:e0:1c:3c:74:55:78:
68:38:f3:1e:18:5a:32:6a:02:04:d1:2b:a4:65:fd:
b5:55:55:68:8a:19:f6:17:29:d5:fc:9f:4b:5b:4e:
38:a4:11:e7:37:52:22:86:be:2c:d8:48:70:6c:ac:
ef:61:ed:0a:12:2d:ea:17:38:44:c0:6d:e1:45:75:
83:97:94:36:1e:8c:ca:3f:7b:83:eb:47:7e:08:92:
a3:b1:9e:c9:19:74:3c:40:c6:dc:f2:87:d9:8c:88:
4c:aa:ce:44:1f:c6:92:92:8a:f7:c1:52:76:65:8f:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:07:81:D0:5F:2E:17:7E:FA:C5:B9:BB:AB:F5:27:66:31:9D:A4:21
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/LweB0F8uF376xbm7q_UnZjGdpCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.125.0/24
Signature Algorithm: sha256WithRSAEncryption
39:27:0e:b5:90:c7:bf:39:9d:ca:ab:96:43:af:83:3c:dc:95:
4a:70:65:87:b9:83:82:c0:f5:a5:10:b6:80:a5:81:85:e3:ca:
6d:62:68:ff:6e:10:25:9c:5e:1c:66:40:ae:51:65:e4:f4:f2:
ae:f7:23:28:3c:d5:6d:e1:8f:a7:1b:3f:91:86:07:41:87:e6:
92:3f:92:18:fc:e9:52:4d:5d:1e:9a:0e:2e:21:1a:e6:7d:ef:
21:e1:b7:d8:63:dc:10:8a:59:05:b9:de:36:e6:36:dd:78:b9:
61:69:9b:af:ce:a2:82:6d:71:d1:f6:96:28:a7:b1:32:66:eb:
e8:b2:9a:fe:80:20:80:f7:ab:6d:ef:83:59:1e:0e:65:d0:c4:
3c:e0:66:df:26:33:ff:1c:8b:e9:6e:ce:54:39:4a:f3:ed:27:
f4:a5:12:6f:51:e1:4c:52:04:1c:8d:0b:0a:9d:c5:13:4b:36:
b5:76:66:f4:34:39:1c:05:37:63:6f:79:9e:03:2e:52:79:4a:
5e:57:fb:23:d9:5e:89:bb:2a:14:46:97:14:0c:b8:12:22:1e:
de:7a:e2:15:1e:71:8e:be:36:c2:56:30:7b:ac:c2:ce:a9:90:
e7:b7:aa:75:31:0c:d8:2a:13:68:83:cf:e8:1f:5e:24:d4:97:
04:74:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org