Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/uWj2rIDqzrGFqg0my5CuPQQjvMQ.roa
File: uWj2rIDqzrGFqg0my5CuPQQjvMQ.roa (raw, json)
Hash identifier: Hg+4TohXiCjP3NftTodmsiwBEx18A0BTlYtJrTTXPWU=
Subject key identifier: B9:68:F6:AC:80:EA:CE:B1:85:AA:0D:26:CB:90:AE:3D:04:23:BC:C4
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 018EBD5D001B20CC5756EB126C7E34F7E0AF
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/uWj2rIDqzrGFqg0my5CuPQQjvMQ.roa
Signing time: Mon 08 Apr 2024 10:59:32 +0000
ROA not before: Mon 08 Apr 2024 10:59:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 109.120.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 13:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:5d:00:1b:20:cc:57:56:eb:12:6c:7e:34:f7:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Apr 8 10:59:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b968f6ac80eaceb185aa0d26cb90ae3d0423bcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:92:8f:e1:b4:ec:7e:f0:13:fc:14:14:29:6a:
49:65:83:1c:74:fb:70:63:14:07:ca:30:14:a4:f0:
7f:ab:ff:07:86:80:d4:32:ea:5a:00:6c:e9:89:8c:
1c:e1:cd:a2:80:d9:0f:22:5c:ec:d0:00:d5:af:f7:
03:87:ad:0a:e2:06:e7:ee:99:d9:6a:2c:cd:c8:0c:
fd:fc:4a:98:bc:b9:c3:c7:eb:f2:bc:88:06:38:45:
e9:ed:dc:70:8a:fe:46:b0:75:89:86:4c:82:d4:51:
d4:aa:95:24:a5:76:9d:2f:3c:a4:bc:78:c9:52:2a:
bc:94:95:7e:52:61:7b:70:78:1f:8b:6d:cc:5c:9c:
d2:f6:0d:8e:36:ab:e7:1c:11:88:45:94:1e:a2:76:
b5:8d:06:39:21:74:b2:45:aa:45:56:ad:cc:25:5a:
75:ea:55:c0:25:c5:97:ba:6b:d6:a6:77:9f:99:6e:
56:ea:23:06:06:6a:9f:fa:e3:52:48:64:73:3d:60:
1b:62:8c:d0:12:b6:b8:46:1b:a4:a8:05:74:62:d4:
e0:fd:7c:e3:ab:54:27:ff:5d:a0:fc:c2:8d:f5:5d:
a4:09:d2:e5:82:41:25:2d:7d:b7:83:91:33:32:0e:
37:94:ad:a9:42:d6:92:9c:e1:29:c5:84:bf:3d:33:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:68:F6:AC:80:EA:CE:B1:85:AA:0D:26:CB:90:AE:3D:04:23:BC:C4
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/uWj2rIDqzrGFqg0my5CuPQQjvMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.159.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:49:b9:0c:58:15:22:e3:d6:e1:6c:79:20:a4:4b:f7:46:57:
4c:eb:02:28:40:68:d9:32:f9:2d:dd:c9:c0:05:35:f7:57:8d:
23:2c:e3:59:ce:65:72:62:8a:21:ba:0e:85:80:f9:46:f6:ab:
97:d1:b4:ce:d8:bf:5d:3a:12:32:6c:ec:f6:59:42:93:43:70:
a8:8d:fb:a1:be:a0:d5:e1:78:14:6c:3b:0b:78:4a:10:f0:59:
ce:8d:6d:89:93:68:1b:a7:de:d8:0b:54:6c:a2:a9:86:7f:b5:
e5:90:e3:99:15:ac:6d:1f:e4:0b:74:00:6c:ea:4d:da:31:c8:
9d:29:30:64:df:b6:29:3a:1b:d3:75:19:c0:dc:76:75:0d:41:
26:9a:29:bb:66:9f:8f:3f:aa:05:80:37:61:d7:26:21:97:46:
21:60:b5:85:3d:47:fc:3c:97:20:b2:1d:14:99:54:10:6a:29:
0c:0c:b9:3d:4c:48:2a:f8:8e:3e:a7:92:a6:db:c6:ca:cb:7d:
b6:ab:4d:51:e5:ac:10:74:5f:04:b7:79:db:81:a3:af:fa:9d:
b9:c7:26:32:3b:1c:67:93:66:c3:7e:42:f6:86:4b:ce:5f:a6:
cb:4c:91:26:ab:fa:dc:c4:77:99:0d:9f:b1:45:fe:d5:cf:87:
c7:b3:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:02 2024 by rpki-client on console-ams.rpki-client.org