Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/tx1sbNw_g6FQ06ltW7kg5FC-T3I.roa
File: tx1sbNw_g6FQ06ltW7kg5FC-T3I.roa (raw, json)
Hash identifier: nc2EI9UrH4sOjKA5RbDgji+6l+j0pS7bkQ/6gzJU02c=
Subject key identifier: B7:1D:6C:6C:DC:3F:83:A1:50:D3:A9:6D:5B:B9:20:E4:50:BE:4F:72
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01869E82FA746A24A6AD492796E34C9479F9
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/tx1sbNw_g6FQ06ltW7kg5FC-T3I.roa
Signing time: Wed 01 Mar 2023 18:50:29 +0000
ROA not before: Wed 01 Mar 2023 18:50:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 109.105.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Mar 2023 14:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9e:82:fa:74:6a:24:a6:ad:49:27:96:e3:4c:94:79:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Mar 1 18:50:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b71d6c6cdc3f83a150d3a96d5bb920e450be4f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:6c:0b:6e:c5:6d:ef:20:e5:f4:b4:2c:17:
34:7b:3f:89:5e:4f:bd:ef:3c:76:21:93:12:d5:92:
49:03:1e:ce:29:de:d0:c9:4c:1a:59:e0:a3:46:d9:
37:48:5a:67:86:18:45:09:94:b2:b9:ab:5a:43:55:
dc:7d:32:d7:ba:68:b7:d2:cd:6a:10:aa:be:b4:1b:
e2:6e:e6:cd:ab:94:9e:d1:2e:fc:dc:1f:b4:30:ff:
f7:8d:ec:11:c6:5e:54:93:7f:fc:c8:f4:1f:4c:97:
0f:32:4a:9c:9a:8c:ca:d5:d7:04:a6:9f:be:76:6a:
e9:57:5c:f5:17:a4:e3:08:e2:45:22:9f:a2:d0:7d:
0d:8a:73:40:1c:7e:e3:3e:a1:5f:91:f4:a9:b8:cf:
c6:24:d1:dc:c7:57:27:29:13:00:e6:fd:5c:07:36:
38:c6:79:ff:ff:62:90:df:d2:fb:e5:a0:e8:27:5a:
5c:e4:e8:99:43:b7:95:8f:8f:65:7c:da:71:44:93:
dd:8a:a1:fe:3e:a6:c4:c1:b6:27:17:d7:74:2e:af:
e4:54:ca:cc:a7:ba:e5:f5:51:1f:25:d4:f1:63:9f:
56:b5:16:d9:e6:27:a3:ba:f5:43:e7:43:9d:0a:7e:
fe:cd:8b:87:05:68:c5:8e:39:75:d0:8d:fa:86:e4:
de:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:6C:6C:DC:3F:83:A1:50:D3:A9:6D:5B:B9:20:E4:50:BE:4F:72
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/tx1sbNw_g6FQ06ltW7kg5FC-T3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.198.0/24
Signature Algorithm: sha256WithRSAEncryption
37:86:26:ef:93:f8:44:c7:c5:09:90:8d:25:cb:d2:28:61:fc:
cc:39:05:88:ae:a9:81:65:1b:a8:76:8c:84:96:62:fc:5f:bb:
92:45:71:9c:24:80:c9:ae:8b:5a:84:f0:b7:a8:67:7c:d5:b9:
02:2c:58:c5:28:79:de:cc:ba:21:5e:e3:ee:90:2b:9e:1d:ca:
f9:27:d1:7a:2a:46:c5:95:d7:87:ee:f4:90:8e:4d:6e:b9:6b:
88:d1:4b:34:65:7d:95:f3:97:e0:c3:df:b2:f4:a7:fb:85:1f:
51:34:7b:da:03:df:bb:ab:cf:c8:7d:16:df:96:58:e0:79:92:
4a:e4:ca:56:48:67:0d:05:9d:32:33:a0:72:0b:cb:48:4c:96:
90:47:70:87:59:4c:29:16:d1:de:c5:5b:12:e7:94:9a:62:41:
c1:90:d7:fc:05:02:bf:a3:48:fa:63:53:cd:60:c6:45:a8:21:
04:90:e9:54:fd:08:44:55:12:23:11:bb:0a:ca:61:2b:ca:63:
37:3a:9c:cf:72:5c:f8:4f:79:4e:df:31:db:1f:b0:82:41:b3:
29:ee:52:de:85:66:bf:1a:71:04:94:9b:9c:c7:57:ef:e8:12:
a6:cb:3d:c9:af:49:6f:b2:2a:c3:a4:1c:fa:17:c0:40:07:4d:
4f:9a:fb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org