Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/UFp_DfcZnqMiYYEZbuLFI8GqYCc.roa
File: UFp_DfcZnqMiYYEZbuLFI8GqYCc.roa (raw, json)
Hash identifier: v9GePu8ftQq9SgrTkSnxRvTUa+T0UDmdN1GlgJuCL7g=
Subject key identifier: 50:5A:7F:0D:F7:19:9E:A3:22:61:81:19:6E:E2:C5:23:C1:AA:60:27
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 018A98551FC5A1C762B317E4B65C13331543
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/UFp_DfcZnqMiYYEZbuLFI8GqYCc.roa
Signing time: Fri 15 Sep 2023 10:13:50 +0000
ROA not before: Fri 15 Sep 2023 10:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 109.205.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 08:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:55:1f:c5:a1:c7:62:b3:17:e4:b6:5c:13:33:15:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Sep 15 10:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=505a7f0df7199ea3226181196ee2c523c1aa6027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1a:b8:8f:c1:b1:f6:9a:f3:a9:3f:33:66:38:
d4:84:a3:27:f2:56:6a:5b:e3:10:14:8f:76:f8:9d:
a6:ac:cb:f9:1c:72:2c:02:28:af:24:8e:9b:8c:c7:
40:2e:22:7d:e2:20:ed:e6:69:d1:26:ef:67:9c:15:
2c:78:33:b8:11:cb:37:25:0c:5c:3f:15:87:c9:d4:
a5:ce:b9:9a:45:03:ef:b3:1b:62:71:32:e9:15:3e:
4d:87:36:e9:a9:9c:e5:25:1a:11:12:da:6d:c5:a2:
80:d7:15:b6:e8:43:a8:04:3b:09:79:7e:6b:9d:a5:
c7:95:3c:f3:00:12:af:2a:af:b1:19:11:36:4f:3b:
36:41:5c:09:97:fa:ee:08:be:84:46:2a:7b:be:3e:
e4:85:5a:78:26:b4:aa:f3:44:d4:cb:39:70:5b:de:
d5:0f:dd:84:a7:d8:9b:e1:3e:bf:9d:7f:2b:11:08:
bd:1f:83:9b:8d:a1:e7:48:7f:da:25:f0:a1:0c:ec:
5f:0e:27:8f:e3:39:42:c6:65:9f:f8:70:04:57:34:
1d:02:c3:ee:7c:e8:fe:58:2c:e3:c9:d7:73:67:11:
fc:5d:36:da:2d:96:d3:9c:e2:23:4c:88:a2:b7:20:
54:f2:25:4e:97:23:7b:18:6a:27:f0:23:8b:21:8b:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5A:7F:0D:F7:19:9E:A3:22:61:81:19:6E:E2:C5:23:C1:AA:60:27
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/UFp_DfcZnqMiYYEZbuLFI8GqYCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.8.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d1:a2:4f:9f:16:58:20:b3:21:1d:94:9d:a2:ce:e1:5b:f0:
b3:8c:32:2f:30:24:38:23:3b:bc:64:4e:5a:a0:b2:86:6a:63:
16:6b:9f:99:7c:f0:80:82:5b:99:f8:a3:b6:1d:a3:9c:bd:5a:
2a:9b:4c:54:5b:5d:62:96:ef:68:fe:e3:15:10:f2:a7:2c:f5:
ab:70:b9:ff:18:00:f1:77:3c:b9:35:44:65:03:89:1c:bf:5f:
6d:8b:d6:f0:45:30:60:65:46:33:2d:a2:e5:48:8a:2a:09:a0:
54:90:e9:54:9c:e9:72:44:40:4f:62:03:bf:49:41:45:0d:66:
94:ec:a0:f0:31:f3:73:88:d4:2d:96:aa:27:82:f7:f6:53:75:
01:5c:d9:f5:a0:dc:9c:8d:91:27:92:d3:b0:53:cb:2b:a7:10:
f0:8f:eb:e6:30:e6:36:aa:b4:be:1e:8b:92:75:b0:00:b9:90:
6e:2d:4d:50:9e:f7:7a:0c:de:a9:8d:90:7a:e8:3f:47:13:85:
f2:40:cf:76:66:7d:56:34:4a:1b:06:24:dd:a2:89:a2:0f:0a:
9f:7d:3a:37:ac:cd:ce:ac:4e:65:2e:42:55:d4:ad:09:f6:f3:
53:07:c7:63:54:fe:cf:af:db:4c:ee:83:a3:40:12:b9:47:86:
6e:00:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:31 2024 by rpki-client on console-ams.rpki-client.org