Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/Gi3knmdbldNgpks1byst7fv1xUE.roa
File: Gi3knmdbldNgpks1byst7fv1xUE.roa (raw, json)
Hash identifier: bGIE+QHarsr3vnEtjC146WNCeLZYEX0NgsZQh5lRmJE=
Subject key identifier: 1A:2D:E4:9E:67:5B:95:D3:60:A6:4B:35:6F:2B:2D:ED:FB:F5:C5:41
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 018CC4248BAD7F965A025A78BC32166C9392
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/Gi3knmdbldNgpks1byst7fv1xUE.roa
Signing time: Mon 01 Jan 2024 08:29:38 +0000
ROA not before: Mon 01 Jan 2024 08:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197095
IP address blocks: 109.232.120.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 21 Nov 2024 11:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:8b:ad:7f:96:5a:02:5a:78:bc:32:16:6c:93:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Jan 1 08:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a2de49e675b95d360a64b356f2b2dedfbf5c541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:0f:fc:12:85:80:07:dd:9f:15:1d:91:64:
29:65:7c:97:3a:26:36:5f:3b:8a:83:8d:89:48:33:
13:9b:21:6e:fc:65:f6:03:32:55:1a:9a:8c:0f:1f:
ce:3f:55:9a:9c:a5:45:3c:f6:84:59:13:8a:ea:26:
59:a3:f4:b2:21:0f:f0:43:61:a9:9e:cb:ae:65:43:
26:6f:e4:64:d7:51:8b:c5:16:d7:6a:fa:2a:9e:ea:
b3:46:02:4f:9b:0e:da:18:2c:ac:30:62:66:18:57:
87:04:f5:3c:5c:e2:2e:f9:fe:46:0e:c2:47:2f:84:
5c:76:91:6d:bd:71:f7:c3:94:61:11:de:93:dd:55:
9e:98:db:74:e9:d2:73:9e:90:45:ab:32:0c:c6:3d:
3c:b4:18:3a:a4:55:af:e3:bc:94:82:d0:fd:d5:a7:
0f:e3:83:93:f0:fa:a7:cb:aa:c7:3d:d1:7d:e7:c9:
57:3a:92:68:23:24:9a:30:40:06:39:bf:9a:65:84:
80:c9:d7:c8:e7:a9:88:41:1c:bf:cf:56:f6:53:e9:
0d:a4:4e:d1:1f:c5:b0:10:02:fd:29:e0:8e:84:21:
53:e3:0b:d7:be:46:d7:13:7f:99:ab:a7:a5:68:a0:
12:c2:81:b3:6b:08:cf:9c:98:f5:bf:22:c0:ca:1f:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2D:E4:9E:67:5B:95:D3:60:A6:4B:35:6F:2B:2D:ED:FB:F5:C5:41
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/Gi3knmdbldNgpks1byst7fv1xUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.120.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:e8:78:ac:31:67:e5:d5:d6:42:e7:c0:db:27:50:20:63:c1:
74:84:ff:18:4c:55:41:96:24:da:43:82:a5:af:7a:a6:8e:7d:
ca:54:a7:c2:15:26:97:30:3b:12:68:51:90:37:dd:e3:38:1a:
01:4a:07:cd:70:d2:34:8d:4c:e8:90:f5:eb:5e:2e:f4:02:bb:
19:ce:fe:d3:9a:9e:8e:9d:d9:8e:21:20:07:3f:fd:5c:9d:42:
e3:81:55:fc:5e:dd:29:e4:01:e3:3e:bc:32:c4:a5:cb:11:6a:
a4:ad:11:cf:b3:1e:77:a8:ba:22:a1:fe:42:27:c2:ff:b6:8f:
e3:1e:3c:8c:b5:7f:fb:22:f6:8a:03:99:6a:00:1e:6c:5b:78:
5a:4a:e8:6b:ae:97:62:d9:84:76:fc:de:c1:21:09:03:8a:ca:
83:62:b1:cd:29:b5:d6:df:94:27:e5:90:55:df:26:30:fc:31:
bf:fb:c5:a9:48:5b:0c:0c:41:34:bf:97:ce:45:7e:77:f2:a9:
2c:37:5c:8d:73:a4:75:75:37:24:d8:ff:e2:6c:96:53:24:76:
ba:8a:b7:25:bf:03:25:dd:d6:63:a4:98:92:c8:22:8f:9d:90:
31:e7:30:cb:3d:54:da:f3:44:ca:f4:e4:57:90:41:1e:b1:96:
54:05:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:13 2025 by rpki-client