Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/cp159ZF5dbSXgg5c4TbuSSQN34o.roa
File: cp159ZF5dbSXgg5c4TbuSSQN34o.roa (raw, json)
Hash identifier: oSmFT92ChgKsxcqTS7YW3ndwgPVTEBz3XwP0ho/q+NA=
Subject key identifier: 72:9D:79:F5:91:79:75:B4:97:82:0E:5C:E1:36:EE:49:24:0D:DF:8A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018F1E391000FB92C07E985E79585A34D675
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/cp159ZF5dbSXgg5c4TbuSSQN34o.roa
Signing time: Sat 27 Apr 2024 06:23:27 +0000
ROA not before: Sat 27 Apr 2024 06:23:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 109.111.40.0/22 maxlen: 22
109.111.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 12 May 2024 20:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1e:39:10:00:fb:92:c0:7e:98:5e:79:58:5a:34:d6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 27 06:23:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=729d79f5917975b497820e5ce136ee49240ddf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:3c:ba:bc:be:ac:72:dc:47:26:0b:d0:48:
31:7c:eb:b3:4d:7d:ad:14:7d:9a:58:11:a9:2d:87:
2a:40:f7:88:ad:1e:38:fe:5f:12:a5:a2:af:df:0c:
79:7e:e9:bf:39:b6:59:7c:e9:f7:6b:43:3b:22:97:
66:de:70:21:2b:02:19:23:77:e6:41:47:41:1c:6f:
de:bf:f1:48:68:46:8d:fc:dd:c8:85:0b:2f:3e:13:
d4:65:4f:c6:14:d7:93:f2:a3:41:9d:45:b1:0b:34:
9f:d1:19:3f:9c:5b:67:55:1d:0f:c9:0c:6d:5d:7e:
91:e7:56:bf:e2:48:04:08:aa:d7:b8:a0:0e:c4:5e:
a8:9e:2e:b4:ca:d3:dd:03:2b:2a:33:c8:6b:7f:f1:
5d:0c:f4:3a:30:fb:53:e5:95:e2:24:ff:90:e3:c2:
c2:0d:0d:ad:76:ec:31:d6:48:ca:20:08:d2:0d:e8:
cd:fd:12:53:82:cd:76:55:6f:f2:92:17:5a:76:48:
40:f8:83:5f:15:4c:ab:86:84:22:04:8e:53:fe:51:
d8:d4:fb:c0:27:28:91:c8:0a:16:20:f7:12:fc:41:
4c:70:4f:4d:8d:35:46:b3:54:4a:37:b8:51:27:14:
b0:d4:1d:eb:4e:8b:f8:8b:9a:b5:6c:c1:65:3e:96:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9D:79:F5:91:79:75:B4:97:82:0E:5C:E1:36:EE:49:24:0D:DF:8A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/cp159ZF5dbSXgg5c4TbuSSQN34o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.40.0/21
Signature Algorithm: sha256WithRSAEncryption
94:fe:b4:a1:44:24:22:40:6a:3a:f0:ce:ce:83:c4:17:6b:1c:
ea:e6:6d:d4:33:ab:46:4a:c0:92:76:e1:9d:d3:08:8d:de:de:
96:ca:f2:fe:98:b6:ce:0d:f0:ee:0d:9a:5d:03:57:20:0c:b5:
01:7c:a0:f0:ac:0d:ec:fe:f5:d5:52:b4:23:0f:0a:7f:61:ec:
57:34:d1:11:5f:42:a0:76:98:9e:f0:ea:d5:b8:78:c6:86:3a:
f8:41:c2:f2:2d:52:fd:ff:79:61:1b:ac:69:85:18:5c:c1:87:
21:14:36:d2:a5:e1:0b:0a:a7:da:0e:9c:ef:a9:15:a3:47:d1:
05:c9:e3:a0:93:d5:29:55:35:1e:44:7f:29:13:f9:65:f4:6b:
cf:32:86:08:19:6b:69:8b:9d:b2:e2:7b:57:d3:78:39:ba:e9:
82:d1:6b:59:90:82:af:38:f0:b4:f5:2b:85:3a:26:f1:4b:2e:
db:61:ac:cf:44:14:2c:30:fc:e9:48:f9:34:e1:cc:36:92:37:
10:62:c7:ea:14:e2:6c:d4:f5:1e:04:a6:ac:cb:a6:83:df:59:
43:9a:5d:d3:ae:02:53:99:9f:3c:64:54:24:66:6d:5b:9d:9e:
f2:fd:6d:c2:5d:88:9c:2b:33:cf:ff:7c:a6:52:cd:65:6f:f9:
98:ef:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:29 2025 by rpki-client