Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/V6HtebNmrFxwD-A5DE7yehyTiNo.roa
File: V6HtebNmrFxwD-A5DE7yehyTiNo.roa (raw, json)
Hash identifier: BQJaRXNx6cMK7tNVBEcLjWnHLSJjV+fgidqx2/OnSF0=
Subject key identifier: 57:A1:ED:79:B3:66:AC:5C:70:0F:E0:39:0C:4E:F2:7A:1C:93:88:DA
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 018CC5011807B153E364A751BAF47CB3D931
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/V6HtebNmrFxwD-A5DE7yehyTiNo.roa
Signing time: Mon 01 Jan 2024 12:30:32 +0000
ROA not before: Mon 01 Jan 2024 12:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44259
IP address blocks: 109.235.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 01:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:18:07:b1:53:e3:64:a7:51:ba:f4:7c:b3:d9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Jan 1 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57a1ed79b366ac5c700fe0390c4ef27a1c9388da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:f3:46:98:eb:37:e4:5e:6b:0c:bd:4d:ec:
3e:e7:5f:db:3e:bd:e1:bb:2a:90:de:6e:3a:d8:54:
58:ec:e4:46:53:f2:5b:fc:b6:f3:fd:07:da:e5:8f:
42:c4:dd:b3:84:9b:49:dc:2a:67:9c:15:bf:82:59:
e0:bd:56:9a:d5:56:ca:a4:f1:83:d6:d4:71:01:53:
4a:98:a4:83:4d:eb:fe:e4:17:24:bd:31:60:98:80:
89:63:72:1d:cc:ca:39:81:6b:80:1d:a1:65:e6:c9:
2e:b1:5b:d8:ab:cf:4b:47:f6:fd:c1:ea:6a:86:9c:
6a:19:89:69:36:38:77:d1:3c:b1:29:b4:50:57:4d:
db:2e:a9:8d:4c:6c:65:d3:b1:71:4b:60:e2:41:71:
9d:38:55:2f:50:44:83:fd:55:59:e1:a1:69:fe:40:
c8:25:84:8c:c5:1c:bb:db:ce:23:0b:19:bd:c6:da:
92:b9:56:84:be:4b:5e:37:54:d6:3e:83:a2:33:ae:
44:72:49:5d:b0:f7:69:d3:f8:f3:66:91:cf:0d:47:
e3:42:4e:39:2d:1b:24:65:45:1e:db:20:c6:88:d9:
ac:67:66:f6:cb:36:06:cd:45:a0:a7:6f:ac:f3:2c:
07:2b:9e:d8:bd:5f:47:04:9a:b0:f4:4a:28:3c:b7:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A1:ED:79:B3:66:AC:5C:70:0F:E0:39:0C:4E:F2:7A:1C:93:88:DA
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/V6HtebNmrFxwD-A5DE7yehyTiNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:99:96:9a:f9:a3:35:2d:d0:e8:5a:fd:10:02:70:9d:34:0a:
c9:ce:ec:67:51:3a:18:76:51:86:fb:63:b3:fe:de:a9:09:b1:
44:39:33:ea:cb:ed:f5:a7:96:15:83:08:e8:4f:f2:fb:1e:3f:
af:0a:8d:fb:a8:b7:36:be:f0:cb:0d:5f:49:05:26:24:2a:95:
b7:b6:f3:4f:30:61:e2:ad:49:e1:d8:11:2d:83:1e:bf:a4:f5:
5e:dd:ed:72:47:18:7c:6e:b8:bb:59:81:de:7d:4b:fc:1e:83:
eb:9a:e6:cd:cd:01:e8:b9:32:e9:f1:fb:e8:76:01:68:c3:b7:
c6:c6:3f:7b:2e:cc:66:78:c0:71:2c:4d:6a:b2:9c:b4:70:48:
87:6c:ad:be:5d:b1:df:62:74:ac:ba:79:83:e0:2a:05:34:88:
b5:2a:8b:6e:cf:73:34:34:65:78:78:7d:ce:63:80:bf:d0:21:
0a:87:ac:68:e8:d7:fd:5c:c7:49:3a:4d:04:b6:82:d3:65:8e:
8c:bb:22:46:f3:af:62:5f:8c:5a:a2:07:2e:96:96:1e:1b:f0:
2a:8d:f9:bf:f1:d3:21:6a:92:9a:0d:4c:8c:e2:3c:6d:3d:78:
76:9f:2f:89:ed:07:6b:89:b8:3b:c7:0b:36:0a:d6:fc:f4:98:
1d:45:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:40 2024 by rpki-client on console-fra.rpki-client.org