Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eMmU3SXgn6pXNqgfsLj8EgTS84Y.roa
File: eMmU3SXgn6pXNqgfsLj8EgTS84Y.roa (raw, json)
Hash identifier: UIZf9AWAeCDeVZy4OSpFks7u7xedl/3o9tUvgJpmgnA=
Subject key identifier: 78:C9:94:DD:25:E0:9F:AA:57:36:A8:1F:B0:B8:FC:12:04:D2:F3:86
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01906983B8F5B9B67311D8621C732A210F88
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eMmU3SXgn6pXNqgfsLj8EgTS84Y.roa
Signing time: Sun 30 Jun 2024 14:19:18 +0000
ROA not before: Sun 30 Jun 2024 14:19:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 109.94.164.0/24 maxlen: 24
212.80.9.0/24 maxlen: 24
212.80.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 13:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:83:b8:f5:b9:b6:73:11:d8:62:1c:73:2a:21:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jun 30 14:19:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78c994dd25e09faa5736a81fb0b8fc1204d2f386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:94:09:56:39:09:71:3b:ca:fc:70:ca:72:
09:f3:99:af:84:a8:66:6e:5e:af:fd:5c:7d:58:9e:
7e:38:63:a1:a9:4c:52:f5:33:94:e1:17:c9:90:c9:
4f:6f:86:cc:9e:e8:a8:94:a9:71:be:e2:2c:42:2a:
24:fe:78:ce:28:a1:51:ea:fb:8e:90:f8:a9:01:28:
4e:72:66:41:94:d4:14:17:5f:10:cc:3c:0b:92:96:
f4:d4:18:24:1a:60:c6:b9:a7:9a:b7:4e:8e:4d:3c:
91:6b:e2:ae:48:1e:65:e1:86:14:65:8a:09:8a:00:
80:9a:3e:d2:dd:46:b0:fb:3a:64:e6:65:15:7a:c2:
cd:59:00:97:69:1c:ac:91:47:3c:82:e5:e3:19:a8:
b9:a3:82:da:51:3a:39:4b:ca:80:5c:9d:58:fb:1d:
16:03:2a:b2:e9:fc:90:62:cd:df:06:f6:18:f2:34:
e4:84:50:d1:3e:9c:fc:ca:7b:bc:b3:44:c2:00:13:
4f:42:9a:84:a1:1e:a7:66:b2:95:68:b3:49:85:6d:
84:ff:df:95:48:f1:88:20:a7:df:6e:11:1d:f8:79:
6e:04:f5:cf:b3:63:4a:d0:64:c9:8b:a8:bb:4b:93:
a7:e2:df:d9:b6:4e:17:e4:7b:34:84:19:5b:be:6c:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:94:DD:25:E0:9F:AA:57:36:A8:1F:B0:B8:FC:12:04:D2:F3:86
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eMmU3SXgn6pXNqgfsLj8EgTS84Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.164.0/24
212.80.9.0/24
212.80.11.0/24
Signature Algorithm: sha256WithRSAEncryption
78:6f:f0:d8:a2:bb:43:ee:5a:34:88:7e:75:ab:f9:30:8d:a5:
44:de:83:ae:be:57:de:85:05:17:b2:4f:92:25:5f:6e:0f:72:
9a:ae:70:eb:d5:a3:c3:ab:96:16:3c:b9:b7:2e:1e:fb:08:94:
48:80:0b:85:37:f9:90:b3:c6:7e:27:43:57:50:e8:35:69:8a:
cd:93:d0:15:b7:98:4a:0c:79:87:89:e4:5e:26:ed:20:33:6e:
77:6e:2c:e5:96:5f:e7:11:a9:86:49:3f:dc:4e:bd:e0:cf:6a:
56:a5:0c:76:94:e5:86:cb:1b:32:a6:ee:3c:97:1c:55:a0:85:
08:44:52:2a:8b:f8:99:c9:ee:09:b6:29:25:0c:07:c6:cc:f8:
e1:87:b7:7b:bd:9c:a5:4f:be:2a:25:3e:c7:f9:ab:02:52:74:
46:d3:c3:97:44:3e:ec:da:4c:73:35:66:cd:9d:46:74:d8:f0:
e6:14:73:87:a3:58:1c:d8:4c:ad:b3:af:a5:bc:a2:7f:14:4f:
cb:08:c7:b5:52:bf:52:3c:0f:5e:c5:3a:a1:5a:6f:67:65:ca:
76:7b:aa:2e:cc:89:f6:23:02:9f:25:b1:2b:c8:71:e5:99:f2:
89:5c:cf:13:09:51:d0:0b:d3:b8:cc:fb:b3:00:54:67:d4:6f:
b1:81:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 16:48:19 2024 by rpki-client on console-fra.rpki-client.org