Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/0CEK9m_MPP6ofAkce5ukeLJ4umQ.roa
File: 0CEK9m_MPP6ofAkce5ukeLJ4umQ.roa (raw, json)
Hash identifier: ehLjyFtniwtV2uuc8TQ8+ll0oZTIE9RHQYcojuj8sk8=
Subject key identifier: D0:21:0A:F6:6F:CC:3C:FE:A8:7C:09:1C:7B:9B:A4:78:B2:78:BA:64
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018CC56EDF2199295F11E80D0D293100680B
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/0CEK9m_MPP6ofAkce5ukeLJ4umQ.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 109.105.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 13:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:df:21:99:29:5f:11:e8:0d:0d:29:31:00:68:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0210af66fcc3cfea87c091c7b9ba478b278ba64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:ea:89:89:47:d9:02:92:6f:dc:fa:2b:23:
ed:b5:52:9a:3e:d3:40:41:1c:1c:3b:0f:c5:dd:9c:
4b:ce:19:28:6f:3d:70:b8:e0:f4:f0:7d:53:b9:eb:
0b:d1:b5:f2:ed:16:55:af:21:6b:97:39:f8:36:49:
73:7c:d6:16:14:92:12:41:56:b6:74:b4:6c:d0:90:
0e:05:9e:50:78:4e:e1:fe:89:2d:6c:38:b6:3a:2b:
cb:61:a4:2a:4b:a7:5b:3a:de:ab:f8:72:ba:f0:c3:
d5:c1:be:4f:47:03:68:4c:df:e1:bf:87:68:f6:b5:
40:c3:aa:a8:3a:d0:a8:fb:34:f9:63:17:10:e5:3c:
c8:ed:e0:d3:99:e1:7b:c4:66:06:4a:6e:66:ca:23:
3d:9a:4f:f1:75:20:04:8d:67:95:63:77:2a:be:6e:
eb:fc:bc:ce:cc:05:a1:d6:49:4d:ba:76:ce:91:d8:
4d:f1:71:89:59:5b:8a:5d:a0:d4:ab:98:61:81:40:
f2:92:dc:33:eb:b2:d3:62:00:1c:91:86:12:f7:e1:
e6:b5:b6:21:37:7b:90:c9:f8:c1:eb:09:2d:36:ba:
e3:59:0c:a1:5c:50:ac:36:42:d2:2e:8b:f0:f2:2f:
93:50:58:fb:d2:dc:01:a9:5d:50:b5:13:d8:51:f1:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:21:0A:F6:6F:CC:3C:FE:A8:7C:09:1C:7B:9B:A4:78:B2:78:BA:64
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/0CEK9m_MPP6ofAkce5ukeLJ4umQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.194.0/24
Signature Algorithm: sha256WithRSAEncryption
95:4e:5b:a6:4b:04:a1:65:95:83:48:7d:6b:88:cf:0a:d7:3e:
df:f4:85:92:96:b8:3e:61:8a:1c:09:64:8c:33:2f:b0:c1:b4:
08:4a:9b:8a:c4:5a:fd:d4:f3:25:bb:02:6b:f9:65:43:78:e9:
fc:fd:85:89:ea:c4:9e:da:1d:32:a4:a0:e5:1b:0e:c7:f4:84:
90:eb:9e:6d:91:52:79:2c:4d:e7:a0:08:76:f1:36:a5:76:36:
78:27:5b:a0:46:e7:9f:0f:49:4f:9c:3b:8a:ce:71:b7:58:a1:
2e:a3:fb:11:c8:dc:17:25:ab:31:20:c6:77:2f:6e:0e:95:59:
ba:08:23:e1:e2:75:e8:b3:36:a0:2c:12:31:87:4a:3d:fb:2f:
95:8e:e9:51:83:36:05:d1:3e:5a:26:19:ee:ee:b2:1f:1a:4f:
ef:7c:65:9f:c6:ea:f6:da:39:39:3e:9f:5f:60:c4:e9:db:50:
c5:d4:b3:f8:7a:a7:65:d0:4f:3b:af:5d:74:f3:25:51:70:38:
a3:c9:ab:9a:ac:0a:43:d3:c9:ce:5a:78:77:c4:8f:bf:af:90:
47:31:09:b6:05:80:db:18:2c:57:73:a2:47:06:ab:c9:b1:34:
f6:d7:b8:aa:02:06:16:3f:4a:a4:db:39:27:24:b8:ee:c3:54:
8b:56:9f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 16:49:19 2024 by rpki-client on console-ams.rpki-client.org