Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/_8XiEIkQZJK38yGJXUzQ4Uifs4Q.roa
File: _8XiEIkQZJK38yGJXUzQ4Uifs4Q.roa (raw, json)
Hash identifier: EVgdjzT0RA7KTGEN46A4Lem+HI/uSlexyzBd+Enzitw=
Subject key identifier: FF:C5:E2:10:89:10:64:92:B7:F3:21:89:5D:4C:D0:E1:48:9F:B3:84
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 01857271197E3A45544A3000DAD9701B4DA8
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/_8XiEIkQZJK38yGJXUzQ4Uifs4Q.roa
Signing time: Mon 02 Jan 2023 12:24:52 +0000
ROA not before: Mon 02 Jan 2023 12:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56514
IP address blocks: 109.95.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:19:7e:3a:45:54:4a:30:00:da:d9:70:1b:4d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 2 12:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffc5e21089106492b7f321895d4cd0e1489fb384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:64:09:ac:a9:66:ca:1e:8c:c2:69:71:f5:
04:e6:9c:80:6c:4c:95:9e:f6:f1:25:e2:cf:99:0a:
f2:23:24:db:d9:47:85:66:fd:66:cc:1c:9c:8b:b5:
b9:0a:e9:61:f1:77:10:b2:e7:41:e6:24:56:0a:b0:
e2:0c:27:a7:14:a5:ff:e2:89:60:ea:2e:69:0d:30:
4d:7c:f9:6f:a8:bf:9e:9d:69:d3:ff:a2:54:bc:33:
a7:c0:19:2d:69:7a:d7:3d:d5:11:17:8c:1a:c9:1f:
9c:52:9f:f0:21:79:83:2c:c3:2e:2f:c6:ef:68:32:
f5:48:25:23:2e:b0:18:63:25:1b:b1:0f:0f:7c:41:
3c:bd:ae:47:26:ab:af:2d:a0:3e:6a:3b:56:ac:50:
b1:af:b2:7a:f7:7b:3c:cf:05:05:ad:6c:9a:27:1a:
4e:9d:bd:bb:b1:7d:e2:19:8f:17:1f:a5:5f:62:1b:
d2:28:57:db:ee:cd:fd:76:84:28:f4:9f:65:85:d2:
97:cf:be:32:39:4d:88:1e:ec:d1:4f:b7:f4:32:2f:
ec:50:6b:b7:a7:29:f4:fe:33:53:39:06:fd:fc:b4:
c2:6c:de:04:9c:e3:df:50:e9:28:0c:cd:29:03:6e:
20:ea:37:a8:70:1c:56:dc:b4:41:0c:b0:81:99:11:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C5:E2:10:89:10:64:92:B7:F3:21:89:5D:4C:D0:E1:48:9F:B3:84
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/_8XiEIkQZJK38yGJXUzQ4Uifs4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.15.0/24
Signature Algorithm: sha256WithRSAEncryption
25:af:61:67:18:e5:6a:4e:3f:85:fa:e9:1c:31:3d:e0:fb:89:
9d:54:67:60:74:82:0c:96:59:83:ba:fb:45:16:08:2d:d3:96:
e8:ee:83:45:4d:0a:00:43:5b:66:1e:21:ba:48:a4:46:ef:f5:
a4:2d:26:f5:e3:72:d7:85:e4:08:a0:7b:e7:c2:89:6a:e5:46:
c0:53:f6:3b:96:f6:e1:fd:0a:ee:23:52:6f:53:2b:ff:0e:b3:
e3:69:87:a6:8d:bd:99:c3:2c:9a:8e:62:69:b3:ad:e5:49:c5:
6d:9d:ce:af:24:39:f1:2a:d4:28:f0:41:69:84:0e:3f:eb:38:
3a:57:43:89:e5:94:41:17:80:55:08:8d:b8:52:8f:45:2e:f0:
61:09:13:f5:ec:27:4d:0d:8f:1f:ff:9d:2c:7e:fe:b0:79:66:
d8:85:02:e3:f9:d0:3b:d1:1e:40:68:39:66:22:11:97:a1:14:
86:9e:d6:be:43:e4:c6:00:ae:8b:5c:9a:45:ae:79:e6:c9:b2:
12:6e:63:17:d4:7d:ad:4c:3b:46:cd:2f:d6:9f:99:3e:78:d4:
6c:5f:64:68:13:2f:a4:92:10:43:ea:1b:8c:3a:0b:78:38:b7:
86:19:d9:95:bf:b8:0c:f1:fd:95:e9:9a:2d:7c:79:d9:50:d8:
0c:a9:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:27 2024 by rpki-client on console-fra.rpki-client.org