Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/B_wBHSGPLoLfGktqGd_F_Z3HFYw.roa
File: B_wBHSGPLoLfGktqGd_F_Z3HFYw.roa (raw, json)
Hash identifier: wATW6+f2BkusDAjigq8mB5qIZbzV90ZbpQxRlXA4G80=
Subject key identifier: 07:FC:01:1D:21:8F:2E:82:DF:1A:4B:6A:19:DF:C5:FD:9D:C7:15:8C
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018F6883C31924EADDE526B11495706A8E80
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/B_wBHSGPLoLfGktqGd_F_Z3HFYw.roa
Signing time: Sat 11 May 2024 16:36:56 +0000
ROA not before: Sat 11 May 2024 16:36:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215668
IP address blocks: 109.105.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 10:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:68:83:c3:19:24:ea:dd:e5:26:b1:14:95:70:6a:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: May 11 16:36:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07fc011d218f2e82df1a4b6a19dfc5fd9dc7158c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:01:5e:46:49:c7:d9:92:ae:34:d5:1a:dc:
5c:0c:09:26:36:e1:e2:a7:d6:17:f8:24:53:e5:c8:
ba:d8:d4:06:08:b3:34:5d:42:97:8c:f7:10:4b:3e:
66:ee:35:58:87:a7:57:4c:7a:fc:19:b2:17:97:9c:
87:03:c5:04:33:64:5f:0f:26:ec:47:36:77:66:a4:
b1:ce:5f:52:1b:03:62:b9:c7:bd:cd:35:cf:22:0b:
67:fc:3f:cc:1e:57:f4:a6:ba:aa:8d:2b:2a:e5:7f:
9f:f1:bc:55:ac:39:bf:23:bb:ca:64:2d:46:b3:a4:
02:13:87:59:5c:1c:12:7f:93:46:90:7e:97:0f:ea:
10:b3:24:c4:b6:7d:90:41:d4:32:74:0f:01:fa:c3:
33:7d:6c:de:58:6e:f7:1c:68:28:e4:c5:c4:60:20:
90:7e:be:15:bd:e8:2a:a7:88:f5:43:9c:97:b4:45:
8f:b8:2c:8c:50:7f:b7:39:46:e8:cb:10:0b:74:85:
4b:7e:e1:91:c0:1b:54:37:db:b3:21:56:84:e4:1b:
3f:be:f2:3f:ba:4a:c3:63:53:43:e5:ad:c9:4e:35:
1a:3d:77:c5:06:14:ae:f1:83:33:34:ff:3f:2e:0f:
d2:a7:7b:ae:45:a3:e2:9e:fc:e8:9d:23:e7:b6:27:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:01:1D:21:8F:2E:82:DF:1A:4B:6A:19:DF:C5:FD:9D:C7:15:8C
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/B_wBHSGPLoLfGktqGd_F_Z3HFYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.194.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d7:c8:b3:d6:c3:1f:02:ef:0a:9c:5f:3f:d9:ef:89:82:81:
6c:d0:27:b9:8a:aa:ab:f0:9e:a1:3a:14:d7:6d:5e:09:fe:40:
f0:cc:2b:3d:b6:6b:a2:b4:ae:86:62:c4:84:37:3d:9a:78:53:
0d:b5:4b:d5:40:06:0f:7b:29:26:57:06:7c:8b:39:38:58:92:
ce:3e:99:f9:bf:d6:e4:26:bb:b9:3d:9a:ff:92:6c:e7:6a:d6:
eb:a4:8c:fd:5f:96:f6:fc:48:20:d4:cc:50:37:5c:7c:26:3d:
28:bb:7e:86:ec:ae:8d:33:09:8b:5c:77:46:2d:0a:a4:dc:6a:
91:3e:ea:ce:1c:62:aa:82:a1:bc:1e:0d:e1:d9:bd:f0:7f:3f:
96:2d:c8:6f:ce:23:43:0e:13:4d:80:ac:66:6c:56:d1:43:b1:
67:78:4b:38:92:72:1d:79:48:27:d3:67:6c:41:7a:ea:ca:6e:
eb:2f:00:a1:a2:aa:42:4a:3e:ba:c6:07:2f:e1:66:d8:8c:fe:
b3:e0:c8:92:38:08:a3:3d:57:8d:c6:72:bf:b1:c4:fd:9b:20:
57:77:46:8f:11:64:0c:93:4d:34:39:0b:5c:ef:8c:0a:18:22:
f1:6f:ad:64:b7:10:c6:b2:14:c8:90:c8:34:e1:4b:33:e3:75:
f2:8c:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 13:12:49 2024 by rpki-client on console-fra.rpki-client.org