Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/cZmX-9_Fm317ua4HHTSAhVeLj_0.roa
File: cZmX-9_Fm317ua4HHTSAhVeLj_0.roa (raw, json)
Hash identifier: elOEAVFLFahwQw1XsoduyP8pId5RTb0PGl9jVeuqL4k=
Subject key identifier: 71:99:97:FB:DF:C5:9B:7D:7B:B9:AE:07:1D:34:80:85:57:8B:8F:FD
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 018CCA2BE5DCD5FAA64342349465BC43A864
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/cZmX-9_Fm317ua4HHTSAhVeLj_0.roa
Signing time: Tue 02 Jan 2024 12:35:23 +0000
ROA not before: Tue 02 Jan 2024 12:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 109.234.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e5:dc:d5:fa:a6:43:42:34:94:65:bc:43:a8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Jan 2 12:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=719997fbdfc59b7d7bb9ae071d348085578b8ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:96:30:09:43:17:3a:3d:33:0f:a3:60:a7:
72:6d:59:80:24:5e:5d:90:02:09:56:fb:87:86:ce:
8e:31:a3:1a:da:60:d9:5a:ac:eb:08:62:d4:60:89:
bd:9d:5b:73:c1:a1:92:0e:1e:f0:49:58:5c:c8:02:
3f:67:2b:4f:aa:7b:8c:b0:9d:52:91:3c:88:55:c1:
3d:72:8a:ed:37:d6:73:1a:c8:71:50:2b:60:cd:db:
53:d2:d9:db:c9:eb:f5:16:50:2e:a5:48:83:09:f2:
89:30:3f:dc:c7:7d:63:d1:b7:8b:f7:1f:e7:05:31:
70:48:dc:f0:5a:da:1e:34:5e:35:8c:17:ff:5c:fd:
a0:0c:07:9f:26:1d:8f:b8:33:8a:89:0b:58:9c:df:
c9:19:58:7f:83:dc:16:d7:d7:1c:0d:53:0a:4c:f7:
4f:40:75:5d:3b:fd:c6:9b:49:6d:19:8d:c8:8d:bc:
d6:91:fa:2f:49:d6:1a:46:9e:e7:e5:64:d5:17:ca:
fa:5c:e4:46:4e:c3:2a:26:8d:08:0e:e3:c6:be:ee:
d6:da:67:ef:90:f4:4d:4a:c5:60:3d:ce:e7:f8:20:
ee:92:d3:c2:5e:d9:aa:d4:34:de:cf:be:9e:2f:0d:
1e:cf:02:ec:65:33:5e:15:72:0a:52:06:b8:6c:40:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:99:97:FB:DF:C5:9B:7D:7B:B9:AE:07:1D:34:80:85:57:8B:8F:FD
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/cZmX-9_Fm317ua4HHTSAhVeLj_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.72.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5e:13:eb:89:46:06:00:87:32:b3:8b:f7:5f:1a:22:13:93:
a1:95:fb:76:24:47:21:52:4b:20:d8:0e:15:85:fc:88:66:9f:
e2:4a:00:17:87:f5:34:73:40:a4:4a:28:02:b6:8c:5c:00:ae:
9d:f5:9c:f4:e8:cc:a6:f9:b5:f4:6f:b8:25:28:77:ef:a0:53:
8e:4d:a3:c0:05:b5:80:e8:10:ae:b0:ca:d0:c2:ed:45:54:f2:
be:02:d6:d0:73:35:49:56:4c:5a:9e:7b:dd:1c:74:37:89:8b:
5c:6f:0d:88:33:64:04:a1:ab:72:b6:c9:ac:08:52:81:21:0a:
ea:ed:4b:ed:82:41:be:7b:d7:f5:9c:f4:cf:f3:b9:a6:74:10:
9a:94:a2:5c:73:14:44:38:0b:f9:38:46:39:72:8e:13:de:4c:
e9:c0:e7:a7:bf:db:26:fd:78:14:17:c7:dd:fe:8a:63:bd:b5:
92:39:53:0d:e9:52:17:74:f0:ad:41:ac:3c:e9:5f:f7:67:85:
71:a3:39:9e:3a:9c:30:bf:a8:c8:31:c8:30:18:13:d6:cf:42:
8b:d5:b5:36:51:5d:3c:5d:ec:5d:a5:2b:9d:e3:a2:27:1e:60:
02:db:e9:5d:ab:94:51:7a:65:cb:33:2f:27:31:25:29:da:9d:
09:11:00:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:42 2025 by rpki-client