Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/uyNUsCZ2LijKybvQVypvR2570Dc.roa
File: uyNUsCZ2LijKybvQVypvR2570Dc.roa (raw, json)
Hash identifier: UKux3VwCT6/8gPVqnhpO6yIh9XTU6LtyycgEwLZ06BE=
Subject key identifier: BB:23:54:B0:26:76:2E:28:CA:C9:BB:D0:57:2A:6F:47:6E:7B:D0:37
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01908048E4BF929D40C9B1E22D5A53887510
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/uyNUsCZ2LijKybvQVypvR2570Dc.roa
Signing time: Fri 05 Jul 2024 00:26:18 +0000
ROA not before: Fri 05 Jul 2024 00:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 109.111.34.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 21:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:80:48:e4:bf:92:9d:40:c9:b1:e2:2d:5a:53:88:75:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jul 5 00:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb2354b026762e28cac9bbd0572a6f476e7bd037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:8f:e8:8f:3a:8c:66:61:45:38:09:2f:55:
c8:e3:d1:47:07:7b:bf:7f:8e:6e:b3:f8:34:d5:74:
d5:83:f9:6a:71:72:a4:b1:9a:f6:4c:9a:c3:38:1f:
0c:c9:13:3b:2e:18:1c:47:85:0a:e7:80:88:18:23:
a4:0a:00:30:d6:fd:ea:7b:f3:64:99:8a:6b:e3:07:
0b:d1:8f:df:18:ab:fe:42:39:88:e3:8f:6a:a0:28:
44:bb:8e:6f:d4:39:42:59:d7:ce:e8:5d:99:90:85:
83:17:ca:70:9f:92:c1:9f:c1:0b:d1:d3:44:bc:ab:
eb:88:d0:c5:c7:37:09:5a:8d:15:da:e1:27:5f:ef:
b8:c3:70:96:1c:d2:ea:46:9e:63:70:60:28:c6:5a:
59:a4:ec:ef:05:c7:6f:22:eb:bd:23:ba:be:51:c1:
ce:4f:23:30:3c:e1:2c:83:1a:96:4f:ab:b3:8a:29:
a3:69:52:64:86:a0:dd:84:de:b7:8f:b3:b8:56:9d:
86:0f:9a:e1:26:25:f4:2f:0d:98:9d:5a:08:5d:70:
16:5b:12:2b:da:52:8c:88:d1:ba:e0:10:33:9a:a7:
cc:46:57:28:4a:17:90:22:4f:82:bf:a9:24:05:1a:
ac:ba:9a:91:98:d8:7c:d0:c7:bf:24:80:07:3e:b8:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:54:B0:26:76:2E:28:CA:C9:BB:D0:57:2A:6F:47:6E:7B:D0:37
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/uyNUsCZ2LijKybvQVypvR2570Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.34.0/23
Signature Algorithm: sha256WithRSAEncryption
72:13:29:99:7e:e7:75:5b:54:07:03:0c:cc:de:5c:af:dd:58:
3f:94:7d:bf:73:fb:3a:7d:67:c5:30:02:fb:86:61:32:b8:67:
11:98:60:0b:73:86:b7:56:e8:80:9b:41:4d:9e:a5:d3:45:7c:
54:bb:56:00:54:65:73:cb:0d:84:de:47:fd:44:1e:d0:c0:7b:
f4:16:45:9d:3e:20:c4:ab:b5:ff:fd:c8:61:31:c7:e6:f2:d9:
ff:2b:af:a4:4d:53:af:e8:dc:d2:58:46:27:75:09:1f:3f:74:
80:75:37:4f:2f:3a:6e:7f:03:0b:d0:18:3f:74:48:ed:34:47:
c4:97:55:dc:da:8c:3e:ba:b3:c2:21:71:20:e0:45:4c:50:33:
67:f7:58:96:8b:9b:64:5a:07:e3:84:8a:44:a2:f9:0e:9a:56:
33:cd:87:e7:ca:f7:29:55:52:53:a3:b8:f3:ed:84:ce:31:73:
2c:c4:5f:ea:02:58:21:9b:66:4f:06:9f:03:1a:ed:74:06:21:
a8:a3:de:84:65:0b:71:26:71:f5:2b:7a:46:3e:ed:23:b9:b6:
55:0b:cc:aa:91:e1:96:03:49:e2:2d:3b:b7:30:ed:0f:05:11:
23:79:07:7e:71:1b:b0:08:ca:75:3f:d9:8b:a1:e5:64:a3:25:
92:62:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:57 2025 by rpki-client