Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/bREs6hpjb0Y_gUfFAACiMlCA-Lo.roa
File: bREs6hpjb0Y_gUfFAACiMlCA-Lo.roa (raw, json)
Hash identifier: qs8kvbfUa0LfT9nPqa8UE17xA9nt12/FK3T3k/fJl5U=
Subject key identifier: 6D:11:2C:EA:1A:63:6F:46:3F:81:47:C5:00:00:A2:32:50:80:F8:BA
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01920AB6185FC843F1E575B27BB255C92CBD
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/bREs6hpjb0Y_gUfFAACiMlCA-Lo.roa
Signing time: Thu 19 Sep 2024 14:35:58 +0000
ROA not before: Thu 19 Sep 2024 14:35:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 43.240.150.0/24 maxlen: 24
207.244.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 17:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0a:b6:18:5f:c8:43:f1:e5:75:b2:7b:b2:55:c9:2c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 19 14:35:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d112cea1a636f463f8147c50000a2325080f8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:e2:9b:47:28:f1:e0:7d:e1:bb:8e:29:06:
ae:a4:b1:01:c9:f2:9f:fd:21:ac:8c:8d:7d:21:d4:
9f:e1:51:33:c3:98:1c:c9:04:23:1c:e5:f8:75:a0:
f2:48:9d:44:fe:e6:49:7f:d3:71:0d:bf:f6:15:5e:
2e:89:1e:dc:15:fa:93:61:76:ce:98:d6:eb:e1:08:
62:48:48:92:63:44:d8:a2:5e:60:50:dc:e9:ab:51:
a2:ea:fc:dc:3d:de:cb:60:3f:69:db:58:c2:0f:7d:
18:ef:3c:26:dd:31:19:a9:c4:1c:b7:0c:0e:53:0d:
ca:b6:87:12:5e:1f:47:16:1a:af:db:37:af:c8:89:
83:de:73:01:5e:65:65:1a:07:71:d8:f0:99:41:a5:
d0:41:ce:3f:3f:2c:1e:c6:d7:b4:60:33:e9:de:ae:
9e:ff:5a:95:7d:9c:0c:e0:02:54:ce:45:78:0e:39:
1d:ef:2f:92:6a:b5:97:4b:3c:2a:7d:9a:f9:81:00:
9d:ab:44:5c:6b:45:4f:cb:84:fb:13:c6:27:41:d8:
9d:81:5e:83:49:c2:84:a2:c3:a7:7d:83:ef:1f:78:
d5:89:70:0a:b7:27:cb:b6:c5:85:46:f6:a0:f0:cd:
64:64:a2:5c:77:ae:f4:d6:a4:98:c7:c0:ce:c7:c5:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:2C:EA:1A:63:6F:46:3F:81:47:C5:00:00:A2:32:50:80:F8:BA
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/bREs6hpjb0Y_gUfFAACiMlCA-Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.150.0/24
207.244.197.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2f:bd:fc:ba:73:bc:a8:d6:2f:d4:fa:06:c5:d8:85:61:b8:
3a:44:47:33:79:e2:c4:6d:19:21:ce:93:2e:03:9a:a6:22:bb:
e2:cb:79:bd:e7:2d:b1:3b:88:76:30:ec:4e:ab:5b:fd:09:35:
3c:59:70:46:04:d9:c2:22:30:35:4b:53:70:73:bd:64:09:f3:
88:05:75:1a:0e:b3:82:25:bf:d9:16:62:62:61:63:14:39:62:
51:83:e2:4b:ec:57:14:59:96:a3:ea:f1:67:23:a4:be:fb:85:
04:e8:89:9e:75:51:af:90:f5:e7:a9:e0:2c:d3:be:1d:7b:fc:
e8:11:35:38:6c:b2:d1:8d:15:c6:e0:6b:36:7e:d7:a7:a1:4d:
82:28:18:c9:48:c0:91:99:be:bc:83:63:1b:0a:04:20:f0:0e:
c8:44:9d:01:60:8a:56:b7:d6:40:2b:30:ff:4e:28:2f:35:41:
1e:59:17:c5:5a:89:96:56:d3:3f:e4:bf:7b:27:17:60:86:37:
ae:11:0b:aa:12:1f:c7:f8:b9:e3:70:f6:24:c5:f3:5b:73:a7:
cb:4d:27:4f:b1:e3:ae:b2:e8:0c:0c:95:21:eb:5c:1e:de:55:
8e:9f:6a:e2:0f:79:43:fd:47:0a:03:cd:de:aa:0b:f9:e1:89:
11:47:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 21:07:17 2024 by rpki-client on console-ams.rpki-client.org