Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/ShO2-cuts0HQ0u-dCPAwD7Tg0BE.roa
File: ShO2-cuts0HQ0u-dCPAwD7Tg0BE.roa (raw, json)
Hash identifier: CDTolEooGgXGpg6fksZhF6nygclO0j7hWdH5PjJIdqc=
Subject key identifier: 4A:13:B6:F9:CB:AD:B3:41:D0:D2:EF:9D:08:F0:30:0F:B4:E0:D0:11
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A366B6B2C125AB210C2FAA7650B1C
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/ShO2-cuts0HQ0u-dCPAwD7Tg0BE.roa
Signing time: Tue 02 Jan 2024 12:33:33 +0000
ROA not before: Tue 02 Jan 2024 12:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134823
IP address blocks: 109.111.52.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 16:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:36:6b:6b:2c:12:5a:b2:10:c2:fa:a7:65:0b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a13b6f9cbadb341d0d2ef9d08f0300fb4e0d011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:0d:85:ed:80:3c:b3:51:54:54:f2:d9:5d:
20:7d:40:56:c3:93:14:5c:f8:09:63:dd:48:59:4a:
b3:2e:b1:52:d4:aa:b6:1b:0a:54:45:e4:d8:29:d4:
69:fa:35:45:49:f6:c1:ff:b2:83:da:51:62:eb:49:
5b:a4:03:80:d4:31:56:9c:5c:6d:86:23:2f:5a:49:
52:34:b4:3c:84:3e:b5:10:26:36:2f:e7:28:d6:92:
51:a1:c3:75:e6:76:64:6f:d3:f1:6c:a8:d6:cd:75:
d5:d8:9f:6b:e4:01:1f:c4:1a:71:30:a0:c2:92:3c:
ce:c7:2a:4c:6b:f2:a3:c0:e7:d5:3e:c6:aa:94:f5:
8e:c6:9d:b2:8d:be:3a:61:51:b6:06:2d:f7:d8:c7:
41:6e:54:95:eb:2f:d7:da:9f:14:1c:8d:c4:56:c7:
e1:5f:97:80:01:b5:ae:c4:d5:63:f9:36:dc:1b:cc:
13:33:14:38:75:7b:3b:fe:df:26:84:93:f4:1f:cb:
53:25:65:29:76:4c:c8:af:db:47:ba:b9:5a:39:ba:
e8:53:5b:ab:74:2f:6e:ac:15:de:0d:f9:03:51:00:
40:56:ea:4b:e7:98:83:11:d9:31:5d:e0:73:a6:83:
8c:c2:70:c0:d2:be:6c:da:7e:c5:63:c2:e2:99:9b:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:B6:F9:CB:AD:B3:41:D0:D2:EF:9D:08:F0:30:0F:B4:E0:D0:11
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/ShO2-cuts0HQ0u-dCPAwD7Tg0BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:1a:f0:fa:8c:99:28:7c:a0:89:02:d3:cd:ef:31:9b:df:cb:
ba:8f:4e:fb:20:8b:8d:32:22:76:93:c8:34:55:d9:1d:fc:9e:
20:08:d7:f0:b7:96:3f:d7:18:ad:82:8d:5d:92:6f:37:02:29:
2d:13:53:e7:c1:98:8e:f6:44:7b:08:db:87:c9:db:51:63:fb:
83:bc:3e:c4:49:ef:15:bf:d0:24:be:de:e0:0b:6f:29:ea:9d:
9f:5f:50:1a:0e:62:69:69:c4:af:78:77:e9:52:ec:74:0a:dc:
d2:96:d5:96:e3:ff:53:1f:06:3b:1d:8e:b8:32:d8:1a:a6:50:
98:59:9b:96:dc:ac:3e:3f:fc:c9:25:38:f7:b4:1c:ab:17:a5:
91:52:d5:ae:03:81:d9:28:a5:64:67:9c:b2:24:65:36:12:f6:
34:10:4f:02:35:b6:b3:54:68:37:dc:5f:8b:55:19:7c:ad:61:
15:79:92:8a:67:e4:e7:f7:e3:5d:ee:60:94:da:83:9c:80:99:
e7:b2:c4:a0:f1:05:40:5c:f1:24:49:b1:ef:4a:86:6b:57:4e:
c9:76:96:71:87:6e:fc:b8:d4:f3:57:7f:82:2d:69:05:fc:15:
8e:04:b7:7c:c5:22:e8:6c:e4:f7:90:3e:04:2c:c3:23:e3:55:
f7:7c:75:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:58 2025 by rpki-client