Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/BCuS7tKydV2dOgqDS-_hXZgzRIM.roa
File: BCuS7tKydV2dOgqDS-_hXZgzRIM.roa (raw, json)
Hash identifier: VUyvU8xJm1wfoH3N0AZqvqu9I2rzruksikX9w6M/rUs=
Subject key identifier: 04:2B:92:EE:D2:B2:75:5D:9D:3A:0A:83:4B:EF:E1:5D:98:33:44:83
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 0192994ECF5D7709D02C2940CB4966917ED5
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/BCuS7tKydV2dOgqDS-_hXZgzRIM.roa
Signing time: Thu 17 Oct 2024 07:08:51 +0000
ROA not before: Thu 17 Oct 2024 07:08:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214036
IP address blocks: 109.235.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 16:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:4e:cf:5d:77:09:d0:2c:29:40:cb:49:66:91:7e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Oct 17 07:08:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=042b92eed2b2755d9d3a0a834befe15d98334483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:c4:f0:b0:7f:ed:10:2d:b2:c7:63:be:5d:
77:9a:c7:89:e7:84:be:89:38:c5:bb:89:8b:1e:2d:
6e:34:59:df:b1:68:8c:c2:e1:83:fb:85:ed:41:1d:
93:f4:da:ab:95:eb:a4:16:2d:3e:20:83:04:b3:60:
28:37:5a:3d:a0:26:56:e8:63:23:f3:29:26:b6:ca:
b3:1d:d4:62:e3:24:54:d7:a3:31:39:e5:6c:0e:bc:
b1:d9:0c:01:0f:4a:e4:fe:24:d3:04:b0:e9:81:9a:
42:bc:d4:91:e7:58:5e:a1:4c:59:b4:89:31:12:d6:
e8:77:9d:43:04:99:4d:9c:d6:f8:40:92:27:84:2b:
2e:86:66:58:b3:70:9b:3f:40:6f:fd:a5:ce:d7:a9:
6b:45:71:37:1e:ac:77:ce:19:d0:df:c8:de:69:92:
80:cc:d1:be:1e:ba:db:77:2a:02:2d:87:69:88:00:
fa:9a:fe:43:66:af:de:03:14:79:4d:85:b7:9d:d0:
09:d6:2e:3f:2e:ce:ff:40:ff:b7:7d:4b:7c:bc:67:
2e:11:da:99:39:e4:d2:06:9b:5f:3b:9b:27:82:46:
59:8c:dc:61:74:15:35:92:c9:65:9c:10:d3:c7:1a:
80:2d:02:1a:c7:a0:77:85:8a:28:5d:c2:d6:fc:38:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2B:92:EE:D2:B2:75:5D:9D:3A:0A:83:4B:EF:E1:5D:98:33:44:83
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/BCuS7tKydV2dOgqDS-_hXZgzRIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.48.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c1:77:4c:60:10:4e:bb:26:eb:51:92:21:5a:79:00:15:f3:
4e:fa:52:97:8d:79:c1:03:95:c1:ae:1c:9b:34:7f:a0:aa:c8:
fa:08:8e:b9:7d:66:b8:e7:27:24:d9:c3:ab:6a:54:d6:10:24:
4b:ef:fa:86:6a:fd:27:af:56:1a:fd:8b:61:f3:fa:c6:db:a5:
b3:38:74:69:be:d2:f9:78:ea:19:17:b0:99:f1:9b:c6:63:85:
52:4e:52:85:53:16:38:55:b0:a6:c6:24:ed:49:e4:cb:6b:b0:
de:f8:d1:f2:55:7c:9e:12:c3:30:9e:9b:e6:37:26:c8:c6:21:
af:75:ed:23:03:1b:9b:0e:ac:61:f5:c4:a6:0e:dc:10:e9:fc:
c8:cd:27:f6:f9:7e:95:7f:bb:4b:79:f9:4e:98:e9:20:79:ad:
fe:08:16:20:38:a0:11:70:b6:b8:c4:d6:02:91:b3:61:ae:2a:
ee:18:79:ff:39:44:39:8b:d9:b3:61:25:ff:5d:68:30:86:a8:
60:ef:1e:e1:20:d0:3d:19:e2:cd:b7:e2:b3:fa:72:88:8f:9d:
13:61:b9:b9:71:06:1d:2b:60:90:51:cc:26:97:2f:51:15:6b:
71:e5:c0:26:c6:74:a5:ce:b2:d4:20:16:e3:ce:d7:af:31:88:
0e:f9:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 18:30:09 2024 by rpki-client on console-fra.rpki-client.org