Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/QkMP67EsEFKggNbk75SK-9m4TwY.roa
File: QkMP67EsEFKggNbk75SK-9m4TwY.roa (raw, json)
Hash identifier: tY5mCbN0OahKG+WWc11nU9JfZiJd1yGgOMhbomJ70qg=
Subject key identifier: 42:43:0F:EB:B1:2C:10:52:A0:80:D6:E4:EF:94:8A:FB:D9:B8:4F:06
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0185706727B929800894798E711E65886D2C
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/QkMP67EsEFKggNbk75SK-9m4TwY.roa
Signing time: Mon 02 Jan 2023 02:54:46 +0000
ROA not before: Mon 02 Jan 2023 02:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 109.72.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Dec 2023 15:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:27:b9:29:80:08:94:79:8e:71:1e:65:88:6d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 2 02:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42430febb12c1052a080d6e4ef948afbd9b84f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9a:24:8a:2a:8c:8e:c8:b8:d4:5a:36:fd:1e:
6b:a6:0b:6b:e9:e3:9c:af:cf:89:23:ce:a6:d9:a9:
2f:ef:68:37:2f:76:40:6a:39:15:fd:e8:ed:12:18:
29:19:d6:6c:9e:95:18:7b:39:10:e3:ea:ea:a0:80:
a4:c4:73:f4:ee:f9:77:18:22:9c:0a:72:58:b8:5e:
59:88:f9:19:ec:9d:ff:9b:3e:08:fa:a2:ed:09:f9:
e0:d6:7a:86:74:8a:29:e7:27:25:41:3f:7d:c8:84:
3e:4a:d9:f7:d4:92:28:37:94:8f:a8:29:dd:bc:41:
f3:0a:ff:c6:e6:7d:d0:be:92:0e:88:20:11:c9:e6:
9a:d0:2d:b2:ba:c6:9a:a9:ea:02:f9:2f:b0:f0:23:
72:fd:65:c6:48:fe:c8:98:28:e4:df:d4:a3:bf:ed:
eb:55:75:ba:da:e2:7f:7c:1f:65:9f:cf:95:71:01:
3b:b4:26:2e:84:69:d7:e2:80:5a:bc:c4:c4:95:b0:
74:e5:45:d9:de:96:e7:1d:b6:c7:92:0f:de:22:9e:
b3:ed:73:69:25:bc:99:f2:ff:eb:cd:a2:ab:92:ef:
53:f6:d9:00:e8:47:84:ee:6f:2c:d2:72:ad:8c:46:
11:68:8b:3a:67:a1:f2:ce:56:96:fb:54:66:00:9d:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:43:0F:EB:B1:2C:10:52:A0:80:D6:E4:EF:94:8A:FB:D9:B8:4F:06
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/QkMP67EsEFKggNbk75SK-9m4TwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:1a:34:7e:b2:b0:b3:87:e1:55:47:61:cd:25:e2:ee:f5:ac:
e4:33:fc:42:46:c1:f4:aa:dc:1a:bf:36:66:a6:09:d7:e3:3d:
8b:cb:0e:dc:51:67:dc:0c:01:b5:95:b3:8c:9a:83:30:8a:0b:
62:6c:b5:d4:74:87:41:31:0e:60:f6:8f:ec:f6:10:f9:ee:01:
ac:50:02:ce:92:8e:37:4c:94:1e:eb:6f:dd:ad:37:a8:d8:29:
e1:8f:13:21:5f:61:f5:86:bc:a2:30:ee:2a:28:84:9d:d7:e8:
87:4f:43:46:11:9d:1e:2e:d3:64:e1:97:ea:1c:3d:58:2e:3d:
5d:1a:de:0f:ce:0f:f4:a5:3b:4d:8f:94:25:93:9f:7f:fd:95:
8f:5c:f6:03:23:d4:64:8c:1d:d0:15:64:ee:c9:bb:ab:cb:00:
39:34:51:aa:dc:58:44:de:9c:58:fe:70:dc:9d:09:d3:64:d9:
77:11:7b:68:35:74:30:84:fa:21:d6:05:02:b3:ed:59:75:c5:
43:7e:0d:f2:17:fa:32:43:e6:25:d5:45:34:8e:bf:24:4e:bd:
db:8a:09:70:b5:9a:01:76:d6:65:9e:83:2e:08:5b:9a:66:d7:
8d:59:5b:6d:18:fd:ea:ab:69:c5:e3:d1:1a:00:6f:90:eb:42:
d4:6b:e0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org