Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/m3_qILeIJRA-P9cWtacVi6laWkQ.roa
File: m3_qILeIJRA-P9cWtacVi6laWkQ.roa (raw, json)
Hash identifier: fKoLSi8ka9Z4Kqy796ilLhRKypgXCSZ9RzQ+I5RrFmg=
Subject key identifier: 9B:7F:EA:20:B7:88:25:10:3E:3F:D7:16:B5:A7:15:8B:A9:5A:5A:44
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 019039F8F1C6DBF8D9B5FC6BD56C907FB53C
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/m3_qILeIJRA-P9cWtacVi6laWkQ.roa
Signing time: Fri 21 Jun 2024 08:45:34 +0000
ROA not before: Fri 21 Jun 2024 08:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12570
IP address blocks: 109.105.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 25 Jun 2024 15:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:f8:f1:c6:db:f8:d9:b5:fc:6b:d5:6c:90:7f:b5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jun 21 08:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b7fea20b78825103e3fd716b5a7158ba95a5a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:c7:d7:f1:c6:5d:c0:da:ee:2f:3f:64:d7:
8e:0a:20:93:a4:2d:15:d8:6e:fb:e0:51:11:8d:18:
a6:83:e0:4d:be:06:5e:70:97:00:98:db:f2:01:d7:
80:63:06:c9:cb:65:b4:24:e6:2d:11:3d:1a:d7:38:
b7:80:a6:76:5b:5f:6c:44:24:e1:68:a0:c1:f8:69:
91:08:96:f1:d5:48:14:b5:d6:79:f4:d9:a2:08:77:
03:74:39:50:df:20:73:67:be:5d:2f:c5:c5:6c:c4:
5a:84:63:2a:58:d0:f3:43:21:93:34:0d:e0:51:3b:
ae:dc:2b:dd:a0:25:26:e0:74:c5:d1:f2:41:9e:6f:
de:ee:ec:d4:87:32:00:44:8f:39:00:5a:82:b5:a4:
aa:32:94:d8:53:52:7d:21:4c:6a:c6:f8:60:6c:4b:
99:af:e5:fa:be:bd:fd:74:04:ca:51:f0:60:3d:85:
ec:03:e2:62:8d:3a:ae:46:26:a3:81:21:60:5f:3f:
aa:cd:31:8d:f9:8b:c6:b1:bc:c1:21:7e:ea:3f:43:
3a:20:75:38:54:65:11:cc:38:cd:39:3d:59:1a:5c:
59:63:20:c6:1f:49:f6:38:ef:d2:57:e4:9f:76:f2:
f5:a3:2e:dd:ca:d9:b9:30:68:96:58:4b:ba:0b:61:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:EA:20:B7:88:25:10:3E:3F:D7:16:B5:A7:15:8B:A9:5A:5A:44
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/m3_qILeIJRA-P9cWtacVi6laWkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:f9:21:57:3b:a1:10:99:e0:71:52:95:d0:d7:f8:35:db:a7:
18:05:28:1a:b6:c2:69:2b:4d:72:95:c6:f1:6b:70:53:85:97:
9c:1a:6f:97:44:b5:f7:93:f4:78:25:67:86:9e:e6:2a:1b:06:
b0:f8:6c:89:3d:c3:95:1a:6d:aa:57:8a:95:8c:a3:61:fd:37:
2e:08:f8:6d:02:5e:5e:3e:38:6b:9e:6f:ca:3e:1c:01:03:9a:
85:c5:8a:99:48:92:27:58:ba:8f:3c:de:df:6b:ea:5a:96:15:
1d:ea:ab:5c:01:b6:60:08:04:3c:21:65:17:a3:1a:05:e6:cd:
a8:94:68:b9:0d:a0:f0:b2:61:91:8c:2b:14:26:a7:01:73:d3:
bb:7a:06:61:b6:41:d3:2f:9b:0f:7a:ca:18:f3:d4:e5:e7:52:
57:4f:c9:fe:87:c2:7f:73:7e:dd:e9:74:c5:d7:a2:8d:e9:ba:
7e:06:e6:9d:15:4a:01:ce:36:fc:88:ff:e1:4f:f4:a1:ac:16:
de:78:79:50:ca:d1:82:84:9f:58:eb:16:15:0e:cd:3a:b0:46:
a2:dc:19:43:31:d4:55:a5:66:11:fb:fb:da:7c:e4:f7:55:41:
42:0d:07:d5:7f:07:5c:61:c9:5a:49:39:05:16:e7:d6:6a:b3:
42:cd:c8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:05 2025 by rpki-client