Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/vcwCNQKJtIMFyOh-1SsW066EHtQ.roa
File: vcwCNQKJtIMFyOh-1SsW066EHtQ.roa (raw, json)
Hash identifier: 8AKdq/wwkMYYV086TJM4t+GLQptim81ny2IEp51fWWs=
Subject key identifier: BD:CC:02:35:02:89:B4:83:05:C8:E8:7E:D5:2B:16:D3:AE:84:1E:D4
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 018CC6B91C7E33C1F8262D051AA025FC0C24
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/vcwCNQKJtIMFyOh-1SsW066EHtQ.roa
Signing time: Mon 01 Jan 2024 20:31:09 +0000
ROA not before: Mon 01 Jan 2024 20:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51554
IP address blocks: 109.72.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 07:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1c:7e:33:c1:f8:26:2d:05:1a:a0:25:fc:0c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdcc02350289b48305c8e87ed52b16d3ae841ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:2c:6d:fc:2f:43:68:a0:ab:ef:63:f9:29:
c3:f3:72:10:99:5f:4b:82:85:84:7d:3b:03:3b:60:
4c:bc:e6:4b:2d:ac:ff:34:a6:d3:59:dc:3a:5e:96:
91:02:33:f3:f4:7c:6b:fa:08:da:52:07:9f:4a:f1:
c5:db:24:ce:12:b4:8f:3a:02:15:5e:8d:34:59:75:
f3:be:3e:bd:6c:6d:8c:21:e9:5e:4e:10:ee:4f:23:
0d:6a:59:1b:99:b1:1f:b4:3e:6e:73:e9:64:9c:7f:
0d:3a:3d:d7:a3:8a:48:cb:76:16:de:f8:c1:b0:de:
9a:98:7b:e4:2a:83:a7:d7:98:d0:de:a3:d6:26:5e:
ba:22:b1:23:c6:8e:9c:e0:f9:b0:d9:ba:40:78:53:
e3:6b:87:0b:1a:b8:1d:d9:00:4f:3a:b8:13:88:40:
97:a7:ab:ff:b9:82:04:24:5c:b7:b2:cf:4a:ca:23:
24:ee:ce:ff:fc:e2:89:11:14:fe:5c:3c:51:16:a9:
43:37:5d:4c:2e:5e:4d:45:3e:f1:57:c6:c2:ca:39:
7d:89:4e:83:47:6a:fd:55:0e:63:06:ea:e6:45:0f:
d9:62:f2:e7:fb:f9:19:be:0f:c5:54:a5:e8:ad:29:
bd:03:12:48:d6:51:1d:03:ce:d4:b9:d4:4e:9b:91:
c8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CC:02:35:02:89:B4:83:05:C8:E8:7E:D5:2B:16:D3:AE:84:1E:D4
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/vcwCNQKJtIMFyOh-1SsW066EHtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.200.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d7:60:28:c1:38:f8:98:4d:5e:8e:bf:a1:fa:40:d7:67:96:
70:4f:d2:4a:f6:b5:2e:c0:d5:29:2e:ee:04:91:d8:18:d8:18:
d3:1a:13:67:78:f1:39:b7:f2:b1:ef:89:7a:9a:7e:6b:9a:00:
3f:09:a9:13:b6:a5:9a:79:01:98:b9:8d:01:ea:79:43:b1:5d:
a6:5d:45:0f:73:80:b3:df:07:cd:81:fe:59:57:16:a6:03:9d:
03:e0:a8:10:72:d9:20:ad:18:32:e8:f3:d1:e1:4e:89:36:d7:
2a:c4:32:78:21:f8:fd:b6:df:b5:45:77:4a:25:fa:d0:b1:2f:
c5:9d:c6:56:cc:0d:49:68:ad:2f:5c:79:7d:22:39:44:c1:5c:
cb:eb:5c:0d:49:62:27:ea:3e:7d:61:7e:dc:c0:ae:32:25:fa:
ed:03:bb:a8:42:67:df:52:9a:8e:f5:82:81:33:df:b3:00:83:
8a:98:d0:92:d6:8f:8d:8e:dc:0b:b9:c7:e7:b7:6f:ce:00:55:
7b:5e:99:10:15:c2:58:52:17:40:76:85:dc:21:b6:a9:52:27:
2d:fa:38:d6:c0:52:59:a2:47:3b:0a:c5:b0:38:e0:4d:8d:fc:
bc:b2:4d:37:65:44:50:b4:dc:a9:67:44:2b:ea:b0:93:8f:eb:
84:53:57:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:00 2024 by rpki-client on console-ams.rpki-client.org