Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/y03Q7PjqnxHtFoxQ8MvBhXl4Bt0.roa
File: y03Q7PjqnxHtFoxQ8MvBhXl4Bt0.roa (raw, json)
Hash identifier: 5G1ryYUR+AP1oTv/HzDn/Ee8DFU3ztG0pLWb/tLHg/0=
Subject key identifier: CB:4D:D0:EC:F8:EA:9F:11:ED:16:8C:50:F0:CB:C1:85:79:78:06:DD
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 0190BD98EDE187AF96E30F663FE786775CF8
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/y03Q7PjqnxHtFoxQ8MvBhXl4Bt0.roa
Signing time: Tue 16 Jul 2024 22:10:34 +0000
ROA not before: Tue 16 Jul 2024 22:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 109.205.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 20:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bd:98:ed:e1:87:af:96:e3:0f:66:3f:e7:86:77:5c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Jul 16 22:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb4dd0ecf8ea9f11ed168c50f0cbc185797806dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:9b:42:9c:6c:6a:93:12:6a:6d:d0:44:a5:
ac:42:14:06:99:57:8f:0d:43:36:a2:fe:0c:78:0e:
cd:a7:24:c7:20:88:5e:8e:1c:d4:14:d1:44:f7:7d:
47:b2:e5:17:d4:7a:59:b0:f5:eb:c1:7f:ba:0e:34:
f1:ac:16:e6:5c:52:e5:c8:62:a2:3a:e5:53:f5:ee:
d8:98:27:c2:42:bc:5a:7d:05:02:7d:02:92:8c:58:
97:0b:d2:69:4f:44:da:9d:b4:14:63:21:d3:2b:0f:
74:43:aa:03:cc:66:c7:0b:9c:79:b7:17:d1:bd:79:
fd:76:3b:f9:06:f8:3d:77:2f:68:8b:67:37:e1:53:
39:aa:89:b8:b7:4e:e5:ed:0a:e0:0f:43:16:fc:8c:
07:44:19:f8:32:fa:19:db:e6:d9:f9:ef:c6:ce:29:
db:4f:2f:38:16:af:39:43:ed:58:36:f0:35:06:ea:
ed:14:f4:e9:ea:98:fc:1c:9f:84:a2:4a:85:47:74:
bb:5f:4c:56:16:d3:8f:4a:0b:53:c4:5d:cc:d0:44:
b0:5d:20:d4:80:11:ce:c5:df:69:ac:49:af:fd:43:
bf:59:c3:8f:fe:6f:ba:0d:bd:98:e7:12:b6:51:4d:
e7:3a:e8:74:17:ae:3b:05:f4:97:f9:06:5f:bd:45:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4D:D0:EC:F8:EA:9F:11:ED:16:8C:50:F0:CB:C1:85:79:78:06:DD
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/y03Q7PjqnxHtFoxQ8MvBhXl4Bt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e6:6a:5f:1a:3b:81:65:cd:65:33:d5:c6:4b:4d:86:0d:f8:
17:4a:53:1b:a7:6c:3b:bf:c4:c6:49:e8:88:ad:a8:35:b5:e3:
e3:c7:ae:73:44:4b:a5:00:ab:35:b3:be:a4:23:8d:20:cd:c3:
8a:e2:b1:45:01:ad:7a:d9:8e:9f:a7:5a:c7:e1:0c:04:82:a7:
ed:10:62:76:21:12:6c:e5:bf:a3:64:3a:2e:eb:8f:63:b5:1f:
87:b5:cd:b8:84:4f:1f:67:66:eb:a2:5b:d4:c4:0c:e9:e6:71:
4c:78:d7:8a:0e:83:84:de:56:4d:e1:a1:50:d0:08:81:b6:2d:
78:be:46:e4:78:c5:cc:6d:b9:1e:ce:92:d0:bb:c7:e1:46:9f:
18:06:0c:29:11:86:59:68:45:66:a1:a9:6b:ac:23:bd:b4:0f:
ba:28:69:d8:76:a5:62:cc:42:d8:4c:1b:1e:13:a5:26:af:0e:
66:f3:1d:6f:fe:fd:90:12:34:27:4a:2e:40:86:97:ab:4f:95:
70:15:57:62:32:55:ec:e7:62:54:7d:66:14:60:b7:9c:2c:bd:
86:19:24:4b:b9:d5:44:ae:5d:df:02:8a:56:e2:e2:96:9d:f1:
05:37:ce:27:43:2a:73:96:47:3b:6c:b9:9a:71:5f:f2:63:5b:
6c:5e:74:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 22:34:22 2024 by rpki-client on console-ams.rpki-client.org