Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Tqij2AkzyIyRmRoRc1mNnjUhOM8.roa
File: Tqij2AkzyIyRmRoRc1mNnjUhOM8.roa (raw, json)
Hash identifier: tAKZQZrYtDHWZ9XA62embgkjsO2rS7iPDC+YgAnikN4=
Subject key identifier: 4E:A8:A3:D8:09:33:C8:8C:91:99:1A:11:73:59:8D:9E:35:21:38:CF
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01919ECA96F3153909DF646034CB0A3DC85A
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Tqij2AkzyIyRmRoRc1mNnjUhOM8.roa
Signing time: Thu 29 Aug 2024 15:39:22 +0000
ROA not before: Thu 29 Aug 2024 15:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214419
IP address blocks: 109.94.165.0/24 maxlen: 24
2a00:7d81:0:1::/64 maxlen: 64
Validation: Failed, certificate revoked on Sun 01 Sep 2024 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:ca:96:f3:15:39:09:df:64:60:34:cb:0a:3d:c8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Aug 29 15:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ea8a3d80933c88c91991a1173598d9e352138cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7b:7a:7f:60:94:df:6f:de:0b:1f:3a:6e:4e:
77:4a:f3:fc:0e:15:65:5d:19:75:40:f0:9f:69:62:
66:b4:d8:8d:fa:eb:d1:60:08:6a:56:f7:ba:97:66:
10:5e:3d:5d:51:49:3f:b6:1d:34:44:be:3f:fb:72:
7b:18:4b:c5:b8:5d:90:59:e3:57:65:91:7a:bd:5a:
52:99:5e:a5:37:0d:ae:e9:a9:bc:fa:b2:ab:f0:3f:
c6:34:ac:5e:d6:2b:5d:05:8c:a4:da:b6:87:a4:d8:
86:4d:98:62:06:45:8a:8f:50:01:26:d7:2a:16:b1:
33:a7:3e:25:3f:ef:db:92:52:6d:19:45:d2:80:84:
77:ae:ee:ad:2b:c0:d8:da:f0:a2:da:e2:d8:cb:e1:
1d:99:30:2c:df:5b:d1:18:ac:78:15:47:c1:06:ac:
4a:03:71:b9:46:df:63:b6:22:40:5d:8d:d6:8d:a0:
56:72:07:ee:c1:97:76:ae:ec:a0:ab:85:08:6b:42:
1c:f5:a7:c2:97:4f:37:d8:29:1c:c8:99:4d:56:f1:
34:6e:a9:6d:67:cc:30:7e:cd:5b:fb:72:99:24:5c:
ea:1f:1a:11:e1:c8:82:10:1e:50:c5:bc:78:1a:95:
86:e7:6b:c2:0f:9d:5c:a2:05:7e:4a:84:0e:5a:2f:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A8:A3:D8:09:33:C8:8C:91:99:1A:11:73:59:8D:9E:35:21:38:CF
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Tqij2AkzyIyRmRoRc1mNnjUhOM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.165.0/24
IPv6:
2a00:7d81:0:1::/64
Signature Algorithm: sha256WithRSAEncryption
a0:ba:1c:39:4e:97:8a:2e:2b:bc:0b:de:ee:fc:d5:4a:4c:5c:
c5:f6:9f:ad:0a:91:fe:04:e7:0e:ca:4a:97:0b:8f:81:42:b2:
32:c3:74:83:0b:1b:92:7b:82:68:a9:56:c9:a4:03:c4:09:a1:
2c:fe:33:75:76:db:c6:23:c9:51:23:80:b7:1a:35:f0:ca:29:
5b:0d:71:98:15:34:54:0a:02:60:68:eb:89:e4:33:31:55:d5:
07:56:ba:3a:ce:d3:0c:55:7d:ef:b7:07:a9:70:77:ee:39:1c:
d8:00:29:0b:fc:3f:de:a9:48:fe:d6:37:fa:2c:10:1e:85:46:
8f:f2:08:c6:d7:34:ec:3f:20:bf:cd:49:81:a8:02:d4:26:86:
36:31:82:18:b9:ea:89:32:44:e1:76:db:87:28:2f:cb:fc:66:
92:10:9e:3f:3c:b0:39:06:78:85:1a:13:91:0d:dc:56:d9:48:
7d:c0:b8:fa:c3:9b:a4:d7:b1:e8:c6:94:c5:e9:a1:88:99:a7:
02:ed:a0:5a:89:0a:6e:70:e1:13:c5:16:a1:61:dd:51:d1:3d:
fd:a8:89:8c:74:cb:71:d8:51:c0:d0:e9:66:66:a0:a1:46:50:
bd:06:17:c4:52:4d:4f:38:96:d7:7d:fd:46:f9:7c:14:c2:8e:
ba:54:2e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 08:59:17 2024 by rpki-client on console-ams.rpki-client.org