Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/f8Ih_o8zsojC8vI6a-qIoY3aOpo.roa
File: f8Ih_o8zsojC8vI6a-qIoY3aOpo.roa (raw, json)
Hash identifier: tyM6DMSX9Kcwafpf0y2iE18w6OFcAwrvrhIrOdgdKmE=
Subject key identifier: 7F:C2:21:FE:8F:33:B2:88:C2:F2:F2:3A:6B:EA:88:A1:8D:DA:3A:9A
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 0187DC83A866DF0F7386F0D6BD06B5EBF083
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/f8Ih_o8zsojC8vI6a-qIoY3aOpo.roa
Signing time: Tue 02 May 2023 12:50:28 +0000
ROA not before: Tue 02 May 2023 12:50:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196943
IP address blocks: 109.205.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:83:a8:66:df:0f:73:86:f0:d6:bd:06:b5:eb:f0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: May 2 12:50:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fc221fe8f33b288c2f2f23a6bea88a18dda3a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2a:53:2d:6f:6e:06:f7:5d:1f:0b:40:7b:82:
40:4a:45:6a:10:62:ea:e1:76:1f:df:db:ba:f1:1e:
7c:4f:ac:d2:7b:59:49:e6:a3:4f:ed:57:8d:ee:37:
61:ae:5e:a6:46:2d:59:52:54:81:03:75:a2:df:9d:
f2:db:7a:3b:3e:65:a9:9b:9e:3e:03:de:5b:cd:84:
db:a6:19:1d:3e:50:e8:ad:9b:69:7b:53:13:d8:5f:
4e:cb:a8:74:fa:42:c0:0c:71:73:ce:08:42:9f:ff:
eb:72:c6:18:06:47:bc:d4:94:fd:61:ba:30:79:b4:
ea:06:c9:15:00:18:1b:b0:17:63:0c:ab:30:a3:4f:
8b:2d:47:5f:49:64:89:9e:c6:b2:be:40:c0:2b:8b:
90:14:c9:70:d0:7d:6f:02:e2:9b:5b:8a:78:c3:4a:
b7:05:73:ca:7e:41:51:01:2d:e3:a0:4d:79:5c:fe:
09:c6:64:4c:0a:f1:87:09:4f:f9:47:63:77:95:b9:
f0:25:32:13:ee:9d:e2:8b:1c:0d:94:ed:0c:62:a6:
86:6e:99:6e:37:1c:37:e6:32:aa:eb:4a:99:e0:a1:
cc:7d:3f:10:b1:6e:3f:69:00:db:ca:36:23:38:8e:
8d:24:9e:6b:76:71:a0:a2:51:59:e5:14:4e:9e:3d:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C2:21:FE:8F:33:B2:88:C2:F2:F2:3A:6B:EA:88:A1:8D:DA:3A:9A
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/f8Ih_o8zsojC8vI6a-qIoY3aOpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7d:d2:37:0f:50:3d:3a:f4:98:93:24:96:55:6d:46:33:0d:
a0:f0:1a:be:b0:54:fd:d2:61:25:d1:04:22:7b:1b:22:4d:6d:
4a:e4:59:fd:0e:92:28:6a:a3:f0:e0:a2:e9:7b:55:86:90:8b:
ea:63:0f:59:a2:61:51:a7:c1:20:d8:ae:29:d2:f5:7c:43:76:
ff:7d:58:79:e8:16:ae:36:40:43:56:48:fa:61:28:4c:94:dc:
38:bf:f5:dd:af:9e:de:ef:b3:92:77:dd:fd:e8:f4:0f:f3:8f:
05:f5:1f:48:28:56:b6:86:f0:af:cb:e7:6c:28:83:a9:18:c7:
9d:e7:8d:a2:13:32:68:a4:e4:13:49:93:e0:bd:8f:65:ec:1d:
31:28:8c:9f:b2:41:05:35:4a:99:a4:2b:20:d0:a0:18:4a:fa:
84:e1:52:aa:2e:81:d6:24:8b:99:df:7e:6e:e4:b7:ad:d5:f4:
b7:5d:5f:94:a4:30:2f:80:a7:00:19:28:72:92:99:37:d1:11:
1d:3a:86:b7:67:9a:03:b4:82:ef:9d:7c:0a:ec:24:41:e2:4f:
57:1e:25:57:1c:8b:a5:50:6f:43:b5:2c:48:39:0a:6e:62:5f:
2e:75:4f:91:61:5a:53:be:84:1f:19:75:1a:30:76:9a:fa:a1:
6c:75:ba:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:34 2024 by rpki-client on console-fra.rpki-client.org