Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/cC89o8BlpHuwMweD8g4Kv7XgmuY.roa
File: cC89o8BlpHuwMweD8g4Kv7XgmuY.roa (raw, json)
Hash identifier: UXAGOprbN+MnP7qaB9Tej2kouedQbspSV6V3G8Wb2Xc=
Subject key identifier: 70:2F:3D:A3:C0:65:A4:7B:B0:33:07:83:F2:0E:0A:BF:B5:E0:9A:E6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018DE8458CE7D6A831EE46E8505D914E579B
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/cC89o8BlpHuwMweD8g4Kv7XgmuY.roa
Signing time: Tue 27 Feb 2024 01:54:48 +0000
ROA not before: Tue 27 Feb 2024 01:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 109.111.32.0/22 maxlen: 22
109.111.36.0/22 maxlen: 22
109.111.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 12 Mar 2024 00:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e8:45:8c:e7:d6:a8:31:ee:46:e8:50:5d:91:4e:57:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Feb 27 01:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=702f3da3c065a47bb0330783f20e0abfb5e09ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:79:8e:a3:93:38:df:de:0e:61:c3:c1:da:
7d:15:73:d3:c2:00:31:c4:95:61:34:61:6a:ed:4d:
74:b7:4f:4e:b5:e5:41:21:13:29:af:90:bc:83:a9:
ec:41:aa:80:cc:b6:f7:93:c8:be:6b:30:0e:03:db:
35:30:54:c1:46:16:bd:1a:62:49:33:91:ec:5e:5d:
b3:7b:da:94:84:37:b6:92:03:cd:56:89:65:f1:b9:
42:8f:33:a6:50:a2:87:e1:85:43:7a:f7:8c:fc:60:
24:36:84:89:fd:b0:a5:ca:0d:30:bb:90:81:d0:88:
b3:0e:47:92:2d:76:c1:3f:b9:20:97:fe:9f:76:6e:
b6:ff:c8:86:b4:03:ed:7c:63:7a:6f:39:9d:d0:db:
bd:93:74:aa:14:41:63:76:c2:6e:d0:3a:14:e2:0e:
c6:2e:be:33:35:fa:ea:6b:71:38:18:75:51:0d:ac:
15:11:ab:bc:c1:65:1e:09:65:68:cb:3c:4a:1b:df:
af:34:fd:37:7f:ec:87:bc:5e:11:67:70:66:e9:17:
9e:f4:6e:7a:7b:dd:c8:cc:0a:0b:f8:e7:d9:8f:7b:
f1:22:b8:07:bc:0f:9b:25:1d:46:dc:af:38:0e:55:
5b:7a:17:ab:d9:07:89:0d:3a:a5:54:e5:19:8c:a9:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2F:3D:A3:C0:65:A4:7B:B0:33:07:83:F2:0E:0A:BF:B5:E0:9A:E6
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/cC89o8BlpHuwMweD8g4Kv7XgmuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.32.0-109.111.43.255
Signature Algorithm: sha256WithRSAEncryption
60:33:c6:0d:42:16:ec:4b:72:2f:03:d5:b2:b1:5b:40:c9:1c:
0f:ad:66:d4:b0:6b:2d:48:b5:b1:5a:2a:b6:64:b5:84:ec:c1:
b5:d8:f2:ca:8e:76:25:2b:e5:b6:a2:10:0b:b8:6b:2d:54:3e:
8f:ba:cd:eb:2c:35:d5:99:47:88:96:04:0a:58:2f:cc:0e:d4:
31:33:0d:e5:f9:dd:ac:4f:c6:65:72:20:f7:4e:3d:5e:b4:fb:
ba:2b:1e:d2:f0:a8:a9:cc:94:b0:c8:df:32:8c:2c:f9:15:19:
35:0e:ac:ec:93:f7:46:a8:9d:8f:f2:97:d5:f5:7d:ba:3a:7c:
27:e5:8a:87:f6:f6:5f:38:08:fd:12:ac:53:5c:a6:59:4b:58:
cd:44:04:96:17:fb:f8:69:db:bf:15:c9:07:65:ad:8e:39:58:
9f:eb:57:50:b0:76:90:67:99:e0:c0:19:65:a1:72:ff:ba:a0:
9e:7a:5d:64:f0:21:7f:f8:e9:dd:db:d1:a5:ff:09:be:86:e9:
ac:4c:d4:13:60:e8:d3:c8:de:ee:2a:ba:59:f4:11:5a:86:63:
53:98:54:38:ab:30:46:bb:b8:7f:e4:c4:8c:f3:5c:1c:3a:ce:
af:40:c4:88:72:45:4d:c7:22:12:b1:fe:1b:b0:06:2a:e5:ed:
fd:da:34:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:22 2025 by rpki-client