Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/P2BFeIMhAV7q5MD9abp2dseHEOc.roa
File: P2BFeIMhAV7q5MD9abp2dseHEOc.roa (raw, json)
Hash identifier: c8BflBVCKGQyZkOH2ilQV5gWmgM2ZnUOY0obZyKGwRc=
Subject key identifier: 3F:60:45:78:83:21:01:5E:EA:E4:C0:FD:69:BA:76:76:C7:87:10:E7
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018595EAF98FA5E4F2282CFD42E7DC27AF2F
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/P2BFeIMhAV7q5MD9abp2dseHEOc.roa
Signing time: Mon 09 Jan 2023 09:44:42 +0000
ROA not before: Mon 09 Jan 2023 09:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 109.72.112.0/24 maxlen: 24
109.72.115.0/24 maxlen: 24
109.72.116.0/24 maxlen: 24
109.72.113.0/24 maxlen: 24
109.72.114.0/24 maxlen: 24
109.72.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Feb 2023 09:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:ea:f9:8f:a5:e4:f2:28:2c:fd:42:e7:dc:27:af:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 9 09:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f6045788321015eeae4c0fd69ba7676c78710e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b2:1e:b6:50:9a:75:8a:9c:af:83:90:a4:4f:
eb:fb:9f:ac:20:85:a2:f8:91:a9:07:fa:d4:20:45:
88:b8:b3:74:7c:18:fe:60:c7:cf:31:56:40:50:30:
57:24:be:8b:84:f5:2a:df:17:94:71:0c:f6:fe:79:
88:07:2f:51:e9:78:36:f2:53:d9:85:14:09:25:23:
41:b8:35:92:58:78:3a:bd:2f:24:c6:f3:2a:b0:8b:
85:98:0a:26:e6:86:d9:c2:54:a9:80:5e:6c:93:89:
35:fe:a6:50:00:b1:7d:ed:27:b2:53:1b:09:60:aa:
12:c0:9f:1a:32:ff:94:c5:65:dc:81:56:07:e9:6d:
63:f4:9d:1e:81:cc:11:2f:49:c6:7e:c7:0f:d6:34:
7f:b7:5c:b9:14:4a:54:2e:62:39:d7:fc:e2:94:db:
7a:1d:26:fd:19:2d:88:41:bc:4b:74:73:31:1e:e2:
77:ee:31:f5:80:b3:02:33:02:e9:49:1f:e5:8c:90:
0a:a2:a0:86:37:78:24:49:33:c9:00:37:45:2f:c4:
87:b5:c7:00:c7:f1:08:93:e6:76:1f:54:60:65:f7:
ba:31:df:26:25:42:b0:58:87:a9:8e:5c:f3:3d:15:
f8:4c:9f:ef:0f:b0:b4:8c:da:4d:19:13:6c:68:a4:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:60:45:78:83:21:01:5E:EA:E4:C0:FD:69:BA:76:76:C7:87:10:E7
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/P2BFeIMhAV7q5MD9abp2dseHEOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.112.0-109.72.116.255
109.72.121.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e7:7f:da:14:c3:09:59:49:01:3b:62:6f:2c:3e:87:d7:7c:
84:6f:c7:59:29:8d:a1:9c:65:e9:6e:ec:5c:16:00:ee:d0:a7:
2a:81:7a:f6:46:54:57:6b:c8:26:2f:13:7c:7f:e8:11:ec:fd:
0a:17:62:0e:21:1e:83:40:35:2c:89:72:de:e1:09:2d:ad:53:
db:bc:a1:87:5d:3e:34:4f:b7:ae:7d:72:95:31:d7:b3:e8:f7:
4f:70:db:ba:3c:e3:6b:b8:97:2c:f6:7f:19:fd:cd:d6:3c:21:
a7:e2:ac:a6:e7:f2:53:bc:98:3a:0a:14:a3:7a:70:a2:18:c3:
f7:92:e7:05:58:5e:49:21:a9:c6:9e:c0:f0:04:4e:2a:a5:d3:
7e:56:d1:65:c0:58:0d:30:d8:86:78:e8:35:42:d9:ce:57:12:
08:ea:46:0f:7d:19:02:a7:3b:bc:c7:e1:da:97:aa:24:ed:a9:
54:5d:36:8b:20:1d:a6:d9:0e:6e:6c:68:c4:e3:b5:40:95:bd:
ea:a7:79:bf:01:43:5e:d3:be:36:ac:24:cd:62:f9:4e:4f:94:
df:a5:71:b7:3f:12:9b:33:97:65:49:d4:f3:16:85:fa:56:57:
9d:55:3e:2a:40:14:7f:d5:14:f2:b9:62:ef:4d:3d:5b:3d:f9:
3c:a5:bd:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org