Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rlY0kzpxc0yc7KvWmPfGQ6lHq5s.roa
File: rlY0kzpxc0yc7KvWmPfGQ6lHq5s.roa (raw, json)
Hash identifier: 97l+nr0LNunltOvwquDjbHptMjanmp2F0WyMASVV4u8=
Subject key identifier: AE:56:34:93:3A:71:73:4C:9C:EC:AB:D6:98:F7:C6:43:A9:47:AB:9B
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188066813585088874DBED867E542AAD875
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rlY0kzpxc0yc7KvWmPfGQ6lHq5s.roa
Signing time: Wed 10 May 2023 16:04:23 +0000
ROA not before: Wed 10 May 2023 16:04:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 109.72.112.0/24 maxlen: 24
109.72.113.0/24 maxlen: 24
109.72.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 18:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:68:13:58:50:88:87:4d:be:d8:67:e5:42:aa:d8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 10 16:04:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae5634933a71734c9cecabd698f7c643a947ab9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:10:a8:c7:92:88:cd:fa:6b:39:de:33:4f:
55:35:c7:ca:4b:88:27:43:5d:d1:94:c2:fa:21:73:
8a:47:b9:fd:f7:7b:77:da:60:4d:83:05:f9:62:de:
bd:84:20:d3:ca:75:a2:e6:cf:5e:e0:df:75:2c:47:
2c:dc:2e:5b:65:fb:8b:51:88:8e:ec:ab:c3:1a:99:
62:b8:d1:21:1a:91:32:43:3c:47:21:f9:70:29:d5:
6f:67:40:2e:ff:1f:36:a0:ed:2f:79:00:0e:6f:f0:
29:46:ab:82:42:0b:4b:81:e7:2b:3f:41:93:fc:25:
e3:61:34:7f:c2:ec:ea:36:d6:76:a3:a4:09:b8:5c:
d7:14:79:47:cd:ae:4e:b5:0f:b4:0a:67:c5:ef:9b:
8d:a9:66:cb:86:37:ad:9e:e8:7b:6b:0e:7f:4f:84:
e1:fe:2f:43:c6:6b:d8:7c:76:2a:66:d0:a8:e1:c1:
bb:d9:71:2a:6d:10:80:a9:6b:32:1d:0e:a1:c0:3f:
9f:3c:96:33:52:86:10:f4:9d:65:89:6f:7f:b8:f8:
a5:2c:d8:27:c0:2e:e4:9e:81:a6:01:07:08:45:08:
a8:5c:87:5a:2c:00:27:4c:c7:b1:8b:07:64:29:e4:
84:83:2f:dc:b9:54:26:7a:8e:dd:9c:2a:3a:5d:16:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:56:34:93:3A:71:73:4C:9C:EC:AB:D6:98:F7:C6:43:A9:47:AB:9B
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rlY0kzpxc0yc7KvWmPfGQ6lHq5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.112.0/23
109.72.126.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:89:3a:c8:31:5a:7b:95:fe:1d:b2:98:1e:c7:37:2c:22:d8:
32:78:f9:d7:8d:53:05:61:bd:12:72:e8:46:8b:04:ae:0f:e1:
96:55:74:2f:b3:fb:b5:97:6a:02:f2:7a:b9:10:e2:fe:bc:a2:
38:d4:7f:56:ec:44:11:7a:47:b7:35:cf:0c:bc:ff:2b:dc:f0:
74:ac:85:48:06:c3:0a:13:bb:fb:84:3f:cc:05:67:05:7d:33:
c5:c8:37:a8:46:61:c2:37:c5:11:6c:81:4e:dc:55:f7:41:d5:
5c:cf:f2:f2:60:af:58:cf:7c:22:ba:e9:0b:45:c9:fd:8e:5d:
90:8a:85:94:22:d9:04:80:40:6a:65:bc:78:4c:52:43:e4:be:
50:8b:3d:dc:39:5a:7a:2f:cb:bb:60:73:ab:57:21:79:62:1e:
71:00:16:5a:b6:d6:35:fe:4a:20:b4:85:6c:cd:f0:86:a5:77:
74:04:eb:dc:bf:e9:01:3f:94:9c:5c:6b:ec:f3:d5:60:63:8f:
1d:b3:a6:d8:40:d1:fa:41:7d:01:30:ee:86:41:73:d1:0d:cc:
73:c6:c7:af:5e:4e:54:86:db:10:8c:ec:65:9c:e8:10:93:e9:
33:39:6d:99:8a:f6:ac:f5:8f:51:e9:bd:8e:92:20:ae:f5:04:
05:83:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org