Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/488vm1SHltE8u_hYYTke2n36fkw.roa
File: 488vm1SHltE8u_hYYTke2n36fkw.roa (raw, json)
Hash identifier: oo3P5gn4TTRzsyCLKmAyOZfp/4e6/xScCzWRhI3T6TI=
Subject key identifier: E3:CF:2F:9B:54:87:96:D1:3C:BB:F8:58:61:39:1E:DA:7D:FA:7E:4C
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018E3312AAF4BD43CF2D49AADB7F9808AC52
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/488vm1SHltE8u_hYYTke2n36fkw.roa
Signing time: Tue 12 Mar 2024 14:30:45 +0000
ROA not before: Tue 12 Mar 2024 14:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215340
IP address blocks: 109.236.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 14:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:33:12:aa:f4:bd:43:cf:2d:49:aa:db:7f:98:08:ac:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 12 14:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3cf2f9b548796d13cbbf85861391eda7dfa7e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:7d:84:f3:43:5e:1b:23:ee:a9:24:d8:6e:
e1:bc:af:b8:2b:9a:f7:11:55:08:1d:51:73:3a:76:
b6:66:d1:56:8a:39:6e:7a:a4:e9:c3:5e:d8:5e:20:
5c:6e:ba:ac:db:bd:ce:98:78:c6:a7:2b:77:43:2d:
bc:39:43:a3:b7:7f:2d:95:ef:b2:8e:98:3e:d8:91:
d9:d2:de:d1:b6:55:73:6c:bb:4d:b6:55:27:62:7e:
d8:4e:4f:a9:ae:52:79:5d:c1:e5:bb:7a:62:7f:1c:
e9:93:96:8a:47:f3:36:1f:84:0f:0c:3e:4a:9a:06:
90:b4:34:a6:6d:1c:35:83:73:d8:5e:67:93:df:4c:
58:de:16:6f:15:06:3a:c6:16:b7:eb:a8:ff:a3:de:
7e:3f:d4:92:9b:39:46:a5:d9:a1:be:bb:4c:2c:99:
e5:6c:d0:b0:76:8d:bd:8d:b5:5f:05:cb:e4:77:df:
70:c6:55:69:3b:22:71:0d:d1:28:cc:08:3c:f2:ef:
52:21:f2:74:55:c1:c4:bf:f0:5c:2a:0b:15:ac:1e:
b8:03:14:ed:71:81:15:d3:97:35:33:5a:4d:35:4f:
0a:c0:1a:04:3e:ea:65:e4:99:11:63:3b:97:83:12:
72:8a:24:3d:f3:2a:2b:58:9b:de:10:9a:d0:25:8d:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CF:2F:9B:54:87:96:D1:3C:BB:F8:58:61:39:1E:DA:7D:FA:7E:4C
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/488vm1SHltE8u_hYYTke2n36fkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.50.0/24
Signature Algorithm: sha256WithRSAEncryption
14:86:e6:c9:5a:83:c1:fa:92:09:3a:46:2c:27:53:6d:1f:89:
0b:66:ad:e2:83:13:d6:ad:bf:fc:60:93:fc:6f:f3:19:cc:eb:
a5:14:eb:64:54:05:10:20:e0:29:58:38:c2:da:e5:c9:0d:46:
19:5f:2f:7a:09:40:05:49:82:05:6f:61:3b:3f:02:18:81:03:
33:6d:69:e8:a5:7a:8f:22:89:a7:cf:e4:97:53:04:c6:19:18:
00:63:27:3d:80:04:7c:b4:bb:c3:ef:5a:30:82:3a:f0:6a:55:
8e:a9:dd:68:5b:b1:c9:01:c8:c1:97:12:dc:8c:3f:d7:fb:7d:
16:6b:4f:8b:fc:e0:2b:23:86:cc:26:6d:30:c8:37:a1:8b:4f:
83:a3:db:d5:ce:a2:d2:bd:27:e5:63:a5:9e:08:74:1b:6a:a9:
04:2f:68:41:b7:93:00:01:dc:14:5a:b6:4e:1b:70:1a:17:48:
f4:5e:45:d5:47:cd:84:c8:00:5d:fc:69:0e:1b:ce:d3:3a:29:
eb:10:0d:34:c0:c7:51:84:b0:89:65:0a:43:65:8b:7f:c7:02:
68:fa:8b:06:6e:3d:16:37:ef:f9:0e:e3:9f:bb:32:11:84:86:
c2:54:4c:1b:ce:49:83:04:90:5b:74:aa:b1:56:d3:8e:79:c0:
3a:b4:d9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org