Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/ixTAPvAZnYEme8L90SQT7MH5Kz8.roa
File: ixTAPvAZnYEme8L90SQT7MH5Kz8.roa (raw, json)
Hash identifier: M0awuYSttZPBSrXJaNCPHQywen72W0fSjH7MkDNc4sM=
Subject key identifier: 8B:14:C0:3E:F0:19:9D:81:26:7B:C2:FD:D1:24:13:EC:C1:F9:2B:3F
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 018A16F931F11F4D84138C3CC89800E72A8B
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/ixTAPvAZnYEme8L90SQT7MH5Kz8.roa
Signing time: Mon 21 Aug 2023 07:22:24 +0000
ROA not before: Mon 21 Aug 2023 07:22:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197899
IP address blocks: 109.68.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:16:f9:31:f1:1f:4d:84:13:8c:3c:c8:98:00:e7:2a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Aug 21 07:22:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b14c03ef0199d81267bc2fdd12413ecc1f92b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:95:8b:43:2f:35:49:a5:3c:23:a5:6a:f6:
9b:6a:07:7b:aa:58:ca:cf:c3:49:cd:a8:24:0d:72:
30:31:0a:fb:7d:0a:7d:7c:dc:87:7a:ab:0b:1a:10:
4f:3a:c4:24:81:ab:a9:ae:dc:3b:83:98:45:cb:6d:
81:3b:80:76:90:2e:a5:b1:87:56:31:29:76:14:3c:
96:e7:e3:fc:b1:c6:49:5b:6f:2b:b0:e0:53:df:db:
b4:52:63:a8:29:fa:1f:9d:1a:27:e9:d5:9f:c7:8b:
62:c8:51:db:79:db:ab:9d:f3:1f:41:f1:de:48:cc:
f9:ed:9f:95:76:5b:82:d6:c3:d7:40:1b:0f:b2:a1:
7a:3e:a0:43:5d:da:08:23:c1:21:a6:b5:d5:0f:0e:
0d:ec:dc:92:93:e6:d3:06:b9:35:5a:5a:ab:36:f9:
66:7e:97:5a:76:6b:fb:b9:75:d7:50:ce:82:fe:36:
01:fe:40:45:1d:03:50:da:11:24:c8:6e:39:72:c8:
0a:06:2c:16:e1:fd:fd:f7:03:16:0c:d4:61:07:5b:
8f:e3:1b:f0:6d:f2:95:c3:9b:5a:5d:93:73:a9:d2:
42:6f:29:88:de:38:ae:42:87:de:34:ae:cd:4d:85:
bf:2c:ae:e5:6a:f8:17:9d:56:23:d4:d3:52:0b:3b:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:14:C0:3E:F0:19:9D:81:26:7B:C2:FD:D1:24:13:EC:C1:F9:2B:3F
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/ixTAPvAZnYEme8L90SQT7MH5Kz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.146.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f8:fe:d2:a5:77:bd:88:8a:88:c0:22:05:3e:18:72:7e:16:
e5:9a:d8:e3:dc:d6:3a:d0:b2:36:15:5d:8e:b4:97:84:9b:e5:
fa:98:97:0f:3d:be:be:09:36:20:a0:50:b5:11:3f:da:b1:4d:
49:d5:04:ec:6b:80:37:06:9b:59:23:1e:c5:9a:f6:9e:56:73:
11:a6:4e:c9:f8:84:6c:11:dd:c4:82:a3:bf:3b:1b:1b:31:74:
70:71:36:e3:99:4c:ec:c6:88:65:9b:e6:e0:cd:5a:02:75:4a:
74:f7:14:79:e1:5a:90:d2:01:76:55:31:34:60:49:d2:42:98:
7d:cd:23:a2:1f:a1:9f:e5:48:a5:34:6a:1c:b8:54:09:36:07:
20:e9:d1:44:6b:6e:ce:f5:87:a4:be:c9:17:c8:5d:3f:72:86:
f3:5e:59:b6:01:ae:8a:8a:5d:82:73:74:5b:cb:6e:d0:80:0a:
b1:c3:94:0e:de:86:62:88:d4:60:a1:21:95:58:c4:a4:8f:bd:
55:5a:65:91:a0:ef:10:c6:c4:af:44:1c:a2:a5:9f:1f:4e:f2:
88:0a:c8:3e:06:d1:50:5b:59:f3:b6:36:17:2b:74:34:51:84:
f2:f2:1a:85:e2:ce:78:f0:a0:06:99:79:01:84:bb:8b:74:f0:
af:8d:1b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:49 2024 by rpki-client on console-ams.rpki-client.org