Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/0YMNeYRapHrnxhMbTIzeGdjrOWY.roa
File: 0YMNeYRapHrnxhMbTIzeGdjrOWY.roa (raw, json)
Hash identifier: q4B8LL6ls2kdz0h77WGQ/1jlM5SHf32rZzJheGlWOMA=
Subject key identifier: D1:83:0D:79:84:5A:A4:7A:E7:C6:13:1B:4C:8C:DE:19:D8:EB:39:66
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 01856F0B630A3434655715BDC5F4B181D04B
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/0YMNeYRapHrnxhMbTIzeGdjrOWY.roa
Signing time: Sun 01 Jan 2023 20:34:55 +0000
ROA not before: Sun 01 Jan 2023 20:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50443
IP address blocks: 109.236.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:63:0a:34:34:65:57:15:bd:c5:f4:b1:81:d0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 20:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1830d79845aa47ae7c6131b4c8cde19d8eb3966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6a:e3:08:7d:c7:d5:16:25:92:b4:d1:6b:3f:
79:a4:df:30:46:e7:9c:ba:4c:78:d0:4a:79:67:81:
cf:1a:2f:df:b2:ba:01:d4:51:9e:cf:ea:1d:37:a1:
5d:0e:3f:ff:4b:60:83:4c:07:8b:6a:12:9d:93:f1:
57:3f:17:b6:ce:a9:09:2c:29:db:6d:f1:47:76:a6:
bc:04:76:08:37:3f:34:46:9f:d3:21:fe:ea:3f:08:
e6:46:95:83:16:de:4f:78:f8:16:fc:93:98:41:53:
0c:c6:35:5a:83:fe:7f:20:6e:67:b2:54:5f:ac:5c:
4b:2c:d3:a0:d2:55:c0:e6:e2:b8:a6:7e:c8:2f:06:
07:83:c7:5b:d5:b3:05:6e:4c:51:2c:98:d9:20:df:
ec:8e:47:cf:54:72:d3:a7:85:99:17:e2:5d:e9:b4:
b3:e1:98:ea:92:1d:c9:54:fc:c4:0f:84:f7:35:07:
9a:f4:b1:6f:8c:17:a1:b8:16:76:93:1a:62:ef:d6:
69:a8:8f:4f:e2:07:ba:b0:ec:fa:07:89:aa:4d:b3:
9b:6d:55:c8:02:30:6a:88:3c:e3:80:93:99:70:27:
ba:dd:5a:3b:86:e8:c8:7c:ad:9b:78:45:7a:45:3f:
f1:8f:d1:15:9c:4e:2b:de:a9:da:7a:62:93:8b:60:
7e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:83:0D:79:84:5A:A4:7A:E7:C6:13:1B:4C:8C:DE:19:D8:EB:39:66
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/0YMNeYRapHrnxhMbTIzeGdjrOWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.254.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:0d:bc:7a:5d:ea:af:d1:6e:a5:0a:4b:9d:97:35:7b:62:b0:
0f:9f:ec:6d:4e:00:8d:e9:cc:1f:cb:b4:1b:bc:c8:8b:6f:79:
01:d1:9e:30:c6:c9:20:d2:95:a5:29:e9:1f:67:e8:11:12:e7:
08:b4:7d:46:36:94:6b:31:df:ce:c6:5d:77:e9:a6:e9:83:ea:
26:d7:8b:08:31:60:47:e2:3c:23:f2:79:a3:b7:50:8c:b6:c7:
73:74:b0:56:9e:22:58:bc:e6:03:8f:e8:49:5d:22:52:df:91:
f5:65:94:47:63:66:9d:2c:71:b9:fb:b3:68:2e:ab:92:fb:5b:
97:91:c9:8f:b3:ba:ad:59:15:c4:20:21:5e:35:32:57:e9:5c:
2c:aa:ee:f8:0a:36:c6:f0:48:ae:82:2c:03:dd:ba:c8:36:7e:
35:59:1e:30:fb:6d:85:cd:0c:cb:e1:30:d8:7e:f4:70:b4:d0:
07:76:ac:36:81:de:af:9b:83:2e:86:f3:b6:53:e4:7a:da:a5:
f3:2c:6c:d7:23:78:22:57:c3:be:01:95:96:81:f8:0e:e1:ae:
df:16:b1:39:db:d4:c4:21:d5:ee:8a:f9:98:24:54:78:46:3e:
32:ff:67:64:58:b1:e6:d9:65:b6:1e:63:4c:da:86:2d:12:2d:
87:34:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:54 2024 by rpki-client on console-fra.rpki-client.org