Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9da1ASE5CBeUVIz6i06FLLiS0TQ.roa
File: 9da1ASE5CBeUVIz6i06FLLiS0TQ.roa (raw, json)
Hash identifier: WspsfUIdBcWpT8NUf7gkzgSczSYt0emwAD3gNho6+3E=
Subject key identifier: F5:D6:B5:01:21:39:08:17:94:54:8C:FA:8B:4E:85:2C:B8:92:D1:34
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0191AC9B454213F9C326771077E9732D3B8D
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9da1ASE5CBeUVIz6i06FLLiS0TQ.roa
Signing time: Sun 01 Sep 2024 08:02:22 +0000
ROA not before: Sun 01 Sep 2024 08:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214419
IP address blocks: 109.94.165.0/24 maxlen: 24
2a00:7d80:11::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Sep 2024 09:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ac:9b:45:42:13:f9:c3:26:77:10:77:e9:73:2d:3b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Sep 1 08:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5d6b5012139081794548cfa8b4e852cb892d134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e2:d5:48:04:53:ce:34:14:d2:b6:93:b2:fe:
a5:89:87:b8:b2:b4:d0:88:d0:53:cc:d2:06:33:23:
1e:89:f9:07:01:4a:01:a6:1b:f3:65:e4:07:20:22:
14:c4:6e:75:39:be:00:7d:b3:eb:36:be:38:1a:b1:
05:fc:81:c2:22:35:a6:8b:2c:5a:f2:48:c4:a0:34:
70:a7:4c:0c:4e:8e:b4:a6:fc:54:3b:d9:0d:b2:ca:
ef:ab:7c:6d:9b:6d:23:21:ad:3f:54:2d:75:e1:f5:
7e:a0:d1:eb:fc:05:2b:b4:aa:04:7b:68:e7:fd:89:
97:59:17:b9:31:fb:18:51:6e:59:5d:2b:d6:b1:49:
63:20:9b:e0:8e:ad:05:8b:36:e9:be:6a:d5:0d:41:
67:e1:f4:e3:9c:8e:32:26:d4:eb:1b:68:91:29:14:
5c:47:9e:25:8a:7f:82:51:65:ef:df:f2:11:f3:83:
a1:72:3c:f5:93:7d:e5:49:d3:10:43:4e:8b:d4:f7:
dc:5c:67:27:0b:8c:e6:58:de:b3:df:8b:76:89:a5:
49:06:56:69:b0:60:10:5e:46:0e:63:c7:bc:68:2a:
95:7b:29:c3:e4:df:b8:0a:91:01:4f:bd:c2:5f:37:
f1:1e:42:c3:3f:ec:20:2f:2f:81:70:9b:a9:7f:85:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:B5:01:21:39:08:17:94:54:8C:FA:8B:4E:85:2C:B8:92:D1:34
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9da1ASE5CBeUVIz6i06FLLiS0TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.165.0/24
IPv6:
2a00:7d80:11::/48
Signature Algorithm: sha256WithRSAEncryption
10:e1:50:3c:1a:e4:0c:d5:fd:23:8a:00:be:2f:1a:0e:66:b9:
70:ac:70:2c:52:e1:2a:f8:78:51:20:99:92:6d:a7:11:20:ef:
32:03:85:66:d4:22:3c:69:37:8e:72:4e:a7:e9:9e:ef:51:f9:
3c:b3:e6:05:00:f1:35:c1:af:5d:b4:ea:6b:fd:67:40:ab:53:
e3:38:65:9c:49:6a:71:c5:9e:6e:84:64:2a:81:41:39:1d:18:
2e:20:a9:9d:de:09:bc:6e:02:64:18:43:e7:a1:37:22:54:03:
20:82:ad:15:78:53:85:2d:45:5e:c4:c0:b2:3e:e7:d6:18:1e:
56:10:ad:13:0e:19:42:69:4a:96:d7:42:75:a6:5d:2b:67:ba:
aa:14:62:15:42:24:51:16:34:47:3e:7b:85:4d:11:33:d1:55:
64:80:67:62:2a:37:47:47:f5:01:e9:cd:ac:4e:b7:d2:72:59:
36:90:ee:c0:8a:33:75:fe:63:2f:b1:ce:5a:43:30:c9:17:4d:
b6:45:2a:71:f2:84:c7:37:28:74:cb:22:ca:0a:1a:81:9a:45:
70:de:10:23:ef:83:45:57:62:ad:ad:fd:30:0f:88:08:90:e0:
44:92:4a:4d:0b:c1:a6:39:a2:fa:50:c7:02:7b:dc:d9:ac:31:
97:e8:cb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 11:17:36 2024 by rpki-client on console-ams.rpki-client.org