Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/_G8vl_vRI6VEL-R8YIPwh41fH-k.roa
File: _G8vl_vRI6VEL-R8YIPwh41fH-k.roa (raw, json)
Hash identifier: bRMfMzBEd9FdM6uj28oOxTIDYs1yo3Vg/vv6LtfBa1M=
Subject key identifier: FC:6F:2F:97:FB:D1:23:A5:44:2F:E4:7C:60:83:F0:87:8D:5F:1F:E9
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019360350EA6934AA83D2C04D48B71EE8DD3
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/_G8vl_vRI6VEL-R8YIPwh41fH-k.roa
Signing time: Sun 24 Nov 2024 22:05:10 +0000
ROA not before: Sun 24 Nov 2024 22:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 109.111.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 25 Dec 2024 01:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:60:35:0e:a6:93:4a:a8:3d:2c:04:d4:8b:71:ee:8d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 24 22:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc6f2f97fbd123a5442fe47c6083f0878d5f1fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:96:e3:62:f9:e8:30:69:c8:88:22:c0:86:
cf:2c:7b:e2:53:81:7b:5e:1b:6c:4c:82:03:e5:40:
c3:44:6c:3f:17:94:78:7a:e3:25:b7:32:01:cb:0c:
83:d7:9e:0a:0a:3f:ca:0f:3c:9c:1f:43:1a:46:2b:
d7:64:e8:ea:de:a6:8a:84:b3:c6:91:c3:22:4a:04:
73:c8:8d:5f:15:48:d3:5f:fa:61:aa:fd:e2:aa:03:
59:e6:d1:e5:e5:76:27:58:b7:bb:9b:20:d1:ef:0d:
67:f3:c6:e6:41:38:e6:d1:f1:28:f9:ff:4d:1e:2b:
22:0d:56:31:48:d3:5d:a0:80:58:26:e6:17:f5:9a:
6b:1a:97:d8:df:50:b5:64:f2:8f:d0:3f:9f:4e:37:
cd:70:72:b0:49:7c:81:58:cd:01:d8:00:b4:e2:5a:
b4:f1:e6:de:c8:29:50:72:f0:f5:e2:ca:29:ac:e1:
3c:c6:f0:6d:61:82:18:b6:0f:43:4f:cb:4f:94:e7:
f9:e8:a1:79:fa:05:23:0a:74:23:88:e5:5f:18:ab:
c0:54:6e:b1:c6:fe:ce:f7:aa:0f:74:3b:7f:66:10:
b2:c6:5a:fc:63:d4:aa:dd:5f:20:7c:1e:04:73:b0:
35:38:95:bd:05:4d:50:d9:6f:00:72:b8:3c:81:81:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6F:2F:97:FB:D1:23:A5:44:2F:E4:7C:60:83:F0:87:8D:5F:1F:E9
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/_G8vl_vRI6VEL-R8YIPwh41fH-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.34.0/23
Signature Algorithm: sha256WithRSAEncryption
63:de:5d:4f:be:01:f7:75:04:6f:26:ee:20:07:a3:14:c9:8a:
2b:e3:e1:e2:1f:e6:f1:6a:5a:e3:92:50:25:11:c8:87:4c:b3:
ff:60:ad:af:28:69:62:fb:ac:d4:e6:b4:4e:20:52:96:ec:7d:
00:c7:fa:75:d5:b3:8b:0e:e2:eb:f5:99:3e:e8:cf:d1:62:82:
99:2b:a5:81:16:72:d8:ae:6f:e0:1e:fc:b2:f4:34:04:f6:ef:
4f:9a:1d:e3:8c:6e:4e:ec:b0:93:ab:22:cb:5f:38:cb:7e:97:
4b:94:64:fa:98:e3:bc:74:14:f3:97:6b:4b:10:8a:c4:1b:09:
fe:a9:37:9e:30:2d:26:47:da:88:76:fa:a9:8a:29:fe:16:74:
7a:8c:dc:89:73:ee:43:1b:5f:ef:52:4f:f4:de:a4:ef:83:88:
ad:30:d5:0c:0b:d0:81:07:ab:47:14:1e:33:b9:64:37:e3:0a:
2c:2c:2f:80:e7:d3:6a:e8:f9:08:db:f2:aa:97:0e:41:dd:96:
75:dd:9d:55:e7:22:8d:ed:b0:4e:cd:62:ce:e4:c5:b7:e0:c0:
ac:a2:a9:f5:a5:c6:b1:b8:b5:ba:c0:e1:58:7e:be:5b:b6:af:
75:d7:4b:64:6b:bd:60:79:92:85:3e:e7:25:fb:cc:95:38:93:
3b:25:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:23 2025 by rpki-client