Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/6Tdh66AK0CVmgJCNQsAlIPVjE0I.roa
File: 6Tdh66AK0CVmgJCNQsAlIPVjE0I.roa (raw, json)
Hash identifier: 4aWQeX4yrumalUqB2ohyVs7rt+May/5EaVSxcrJnp1o=
Subject key identifier: E9:37:61:EB:A0:0A:D0:25:66:80:90:8D:42:C0:25:20:F5:63:13:42
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018B6BBB415F1456210A9E1ED983EDD3C5ED
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/6Tdh66AK0CVmgJCNQsAlIPVjE0I.roa
Signing time: Thu 26 Oct 2023 11:25:15 +0000
ROA not before: Thu 26 Oct 2023 11:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 109.105.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:bb:41:5f:14:56:21:0a:9e:1e:d9:83:ed:d3:c5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Oct 26 11:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e93761eba00ad0256680908d42c02520f5631342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5a:1b:9d:1d:12:7d:96:1c:4f:11:78:91:7e:
23:0d:b2:85:80:5c:83:3f:bb:d1:af:27:73:10:53:
da:27:e3:5e:39:a7:9a:3a:59:19:cf:81:4d:fb:b2:
c4:ce:19:97:d8:04:9e:b2:4d:05:21:91:b1:4e:9a:
58:ad:93:a8:63:26:3b:cb:1d:36:27:6a:67:df:92:
53:c9:2d:b6:c0:47:af:40:20:d5:42:e7:37:16:26:
0a:e9:51:65:2c:42:41:17:59:8a:7b:b2:42:f1:6c:
c0:e8:08:7e:a1:60:5d:09:05:13:0d:0a:c1:09:a8:
58:2f:f7:9e:1b:d1:2b:69:b5:11:d4:a1:89:46:7b:
25:5d:95:8a:13:e0:97:45:75:2b:df:de:06:6f:ec:
63:35:ee:0f:76:83:2f:9d:79:23:96:05:14:81:37:
9a:2c:95:7b:38:03:4b:0e:5f:61:ef:88:a9:b1:bc:
49:89:7f:7f:bd:cb:f6:13:d0:38:22:f9:b2:e7:2f:
8b:05:79:5a:2b:ee:c9:4c:9e:9b:b0:ac:cf:3c:5f:
63:70:0b:ca:ff:69:1c:e9:f5:6d:88:e9:41:1a:9b:
ee:c5:e9:97:b0:5a:57:2d:09:9e:81:bc:a9:07:97:
6b:31:6f:db:e2:08:a8:a2:c9:b3:09:a8:55:ca:50:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:37:61:EB:A0:0A:D0:25:66:80:90:8D:42:C0:25:20:F5:63:13:42
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/6Tdh66AK0CVmgJCNQsAlIPVjE0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.196.0/24
Signature Algorithm: sha256WithRSAEncryption
73:82:cc:35:3e:3b:2a:b7:f8:62:c2:8f:55:00:26:0d:d8:2b:
df:e6:3e:f1:fb:d6:35:ee:55:f3:57:54:22:70:33:ca:b8:74:
7a:ce:21:80:b3:cc:f9:c8:db:2f:d6:2b:39:ff:03:02:18:20:
1c:84:f4:50:78:a9:1b:11:29:f7:ec:2e:00:a2:ff:49:42:93:
22:b7:1a:31:df:87:3e:24:1b:bb:29:3c:45:30:ea:b0:9f:1f:
36:ab:4e:60:56:30:bb:ae:72:7d:0c:e7:6b:47:a7:f1:5d:10:
e6:46:f5:38:81:99:f5:5a:69:f8:db:be:62:72:55:a6:df:26:
65:55:d4:82:65:87:f8:67:b6:3a:84:c6:13:65:25:dc:dc:62:
1c:43:20:3b:d7:29:9e:58:7a:88:08:6e:a6:6c:27:c9:b2:b0:
13:05:e5:52:57:01:fc:44:ac:7a:9c:b0:37:3d:0a:08:1b:87:
46:b8:19:66:f5:fd:09:d3:4c:f0:e2:b9:24:7f:ee:d8:7f:df:
6b:03:2a:18:a3:cf:43:2c:03:80:ba:af:b0:8a:77:59:2b:b1:
1e:ff:97:28:90:20:89:f7:7c:fb:ce:b4:cd:a0:72:3a:65:7c:
0c:3a:86:19:0b:94:1f:36:db:ac:13:8f:96:b7:f1:ce:bc:25:
40:ae:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org