Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/stFiEZSiXPka4mfTRv43Ftxgv8I.roa
File: stFiEZSiXPka4mfTRv43Ftxgv8I.roa (raw, json)
Hash identifier: Ba1QVzfmmeB8dWwTsihrmBRf3msyBevu6IC3NT9NdmA=
Subject key identifier: B2:D1:62:11:94:A2:5C:F9:1A:E2:67:D3:46:FE:37:16:DC:60:BF:C2
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA50FBC95792E48F00F188BC007F57
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/stFiEZSiXPka4mfTRv43Ftxgv8I.roa
Signing time: Mon 02 Jan 2023 13:44:51 +0000
ROA not before: Mon 02 Jan 2023 13:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56340
IP address blocks: 109.248.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:50:fb:c9:57:92:e4:8f:00:f1:88:bc:00:7f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2d1621194a25cf91ae267d346fe3716dc60bfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:37:c1:41:18:19:2e:5e:b1:69:30:7d:18:
2d:df:f5:3f:96:50:a9:ee:bc:a2:23:aa:d4:32:9d:
f7:0b:6b:f2:5b:7a:ce:5a:8d:4f:d8:fb:28:6b:5f:
00:14:61:3a:78:45:dd:be:d7:30:a0:ac:f3:23:ce:
e2:f6:e7:39:0f:29:fd:3f:b5:0f:63:24:68:cc:cc:
bc:2d:ed:99:1b:27:aa:3d:a8:a7:25:fd:ec:2e:62:
f7:62:97:b5:6c:53:63:40:9d:e4:13:8e:be:87:88:
b3:eb:5d:55:e9:1c:33:f2:32:2e:47:4e:29:39:d7:
aa:99:09:08:f7:ed:eb:70:e2:3f:d1:65:66:c8:e9:
64:89:be:ff:09:d4:fd:54:8a:7d:36:6c:50:71:88:
e3:cd:2a:12:e0:4c:8d:ce:6d:ea:23:33:4f:b9:f3:
dc:70:d5:92:2b:38:4f:11:d0:03:9a:75:ce:8b:ab:
61:3e:0c:78:36:92:ff:ec:fc:9a:e8:9b:7c:6d:69:
4a:d0:7d:bd:27:19:e2:10:74:41:0d:28:9e:65:0d:
71:f8:65:c7:a4:44:b9:71:95:0f:cf:b9:da:39:ce:
af:97:b7:6c:c5:4a:34:01:46:de:ed:91:37:c4:3e:
e7:69:e1:34:6a:d9:10:92:0e:84:f3:1a:c3:b2:4a:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D1:62:11:94:A2:5C:F9:1A:E2:67:D3:46:FE:37:16:DC:60:BF:C2
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/stFiEZSiXPka4mfTRv43Ftxgv8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:27:cd:a3:a5:9f:84:b2:00:e0:47:18:81:99:2a:21:ce:34:
3a:ac:8a:9d:be:56:5f:76:0d:a9:69:18:ad:3f:71:41:5b:92:
98:ab:0b:9b:52:0e:b3:1c:59:fb:ad:a9:13:26:cb:e0:78:80:
23:f7:11:e5:b0:78:7d:ec:30:2c:29:cd:5c:b1:1c:8b:65:31:
08:07:db:72:16:97:3f:23:c6:9e:ae:f2:68:2c:8e:02:0f:cb:
94:51:c2:05:8d:8d:bf:d6:f6:95:e6:0b:42:ac:b8:17:27:ef:
8f:db:63:2a:8e:ec:32:ad:92:04:f5:66:20:f0:6e:ff:a9:40:
89:d1:16:c8:d8:b6:3f:f9:da:81:74:49:12:4f:78:d4:dd:41:
03:7d:50:7b:a5:79:96:0e:6a:78:5a:5b:50:84:34:5d:0b:ea:
fc:79:ea:65:d3:95:69:31:ab:fc:9a:35:20:45:66:28:66:50:
c2:c8:1d:46:1b:a5:52:9c:e3:d1:93:28:52:24:64:f1:49:9f:
a3:f3:8a:f9:d8:88:fe:61:ba:3e:2f:49:cb:47:ae:5f:53:5f:
fe:41:ec:32:14:3c:ce:69:64:03:ef:05:cf:19:78:d7:7f:7a:
30:4d:8a:49:24:16:6b:e5:af:ca:39:ec:b8:3a:7b:e8:6e:b9:
9f:8a:66:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org