Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/izjevfzavKFo58qWebgc6tcyRgk.roa
File: izjevfzavKFo58qWebgc6tcyRgk.roa (raw, json)
Hash identifier: FdD1NAE5VpO8EmJO1XwXliQ+9KK0AmJ22cIH7rGhxnw=
Subject key identifier: 8B:38:DE:BD:FC:DA:BC:A1:68:E7:CA:96:79:B8:1C:EA:D7:32:46:09
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 01914781E170B8D630F7664E86C26C04F8E0
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/izjevfzavKFo58qWebgc6tcyRgk.roa
Signing time: Mon 12 Aug 2024 16:52:59 +0000
ROA not before: Mon 12 Aug 2024 16:52:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 109.237.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 10:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:47:81:e1:70:b8:d6:30:f7:66:4e:86:c2:6c:04:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Aug 12 16:52:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b38debdfcdabca168e7ca9679b81cead7324609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:76:6c:d0:a8:cd:d6:49:26:ad:01:0a:67:
f0:55:4c:66:dc:0a:58:ef:46:62:24:1e:05:ae:19:
05:d1:7c:96:06:9e:d7:cf:2b:03:1f:d7:6e:3a:7a:
3f:c6:fa:12:0d:1b:e8:05:06:8f:0c:26:79:c7:34:
77:e6:30:93:6f:9b:06:a0:28:c2:f6:bc:d3:09:a4:
bf:b7:7f:ff:6a:13:27:a6:a5:68:bf:c1:86:82:a1:
b2:6f:63:9b:68:df:e4:7a:ac:28:26:83:e5:68:b1:
b3:d9:e3:a8:97:37:0e:d8:77:1a:e9:56:08:a7:67:
43:45:93:6c:8b:88:5a:0a:60:fd:f7:72:ab:2e:ca:
7f:0a:cb:8e:91:85:90:08:b8:2b:fd:d8:c3:a0:71:
eb:8c:be:0c:8c:51:16:b3:15:2f:bf:4f:85:e4:58:
98:c5:fb:9c:1e:c2:db:74:70:ab:8f:5e:3e:a7:a9:
6e:3b:26:05:24:29:cd:c2:2e:24:3a:c9:f8:74:d5:
6b:3f:15:8f:f6:6c:b1:99:64:a8:ff:ef:7f:e5:c1:
f1:15:4d:bb:53:d2:61:44:0f:c9:94:25:85:ad:ea:
e3:d7:b8:1f:78:90:2c:bd:e7:d4:fc:db:88:69:5f:
a3:63:97:90:55:16:f5:82:fc:ca:5b:55:32:06:a5:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:38:DE:BD:FC:DA:BC:A1:68:E7:CA:96:79:B8:1C:EA:D7:32:46:09
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/izjevfzavKFo58qWebgc6tcyRgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:21:c0:09:f0:7d:06:99:48:27:98:89:cc:72:06:e5:8c:73:
a1:6e:a1:42:dd:d7:3e:a8:81:0e:ad:20:7c:d7:57:92:8a:7b:
39:1e:8d:53:87:52:09:63:87:db:d5:bc:c3:bd:90:72:d9:eb:
e8:d4:78:3e:54:92:ff:23:55:76:5f:a4:6f:25:5d:23:74:ca:
3e:6b:95:ad:65:65:af:1f:50:73:91:bc:da:2c:84:a4:0e:86:
1a:f7:64:4c:ee:d8:08:29:da:3d:5d:7f:35:05:eb:eb:f2:43:
d6:1b:bf:93:d5:ef:29:2d:c9:8e:bb:e3:d1:a7:07:9f:ec:27:
29:61:c4:d4:8c:9b:f4:4b:54:d0:07:15:54:c6:aa:88:83:5d:
d6:d5:cd:ba:0c:f0:17:dc:c2:d3:00:93:fb:c3:e6:2a:8b:b6:
f8:ab:84:1f:94:e5:78:ac:4a:2a:d7:20:5d:7c:c1:f4:d6:94:
11:cc:19:ba:11:4e:bf:b8:09:67:df:da:2f:e5:cc:60:67:e9:
57:0b:ed:8c:5d:79:5e:ca:99:7e:45:96:00:2e:45:a3:f8:24:
2c:e1:ae:91:47:74:72:1c:c7:1e:e8:08:9e:36:49:a5:47:a2:
46:fb:7f:df:8e:b8:5d:09:8a:a7:32:9d:b9:f8:c0:08:cb:fe:
24:21:52:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 13:23:13 2024 by rpki-client on console-fra.rpki-client.org