Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/A0YXdEw3d8Dy0ZGTu_1bItmjHKs.roa
File: A0YXdEw3d8Dy0ZGTu_1bItmjHKs.roa (raw, json)
Hash identifier: mlX2iW/DA8e8vKQpdTc1oFZnlDKu9Pd/x+95/cxcgfo=
Subject key identifier: 03:46:17:74:4C:37:77:C0:F2:D1:91:93:BB:FD:5B:22:D9:A3:1C:AB
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 018CC4254395B11EA8387B881B6BE52C6376
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/A0YXdEw3d8Dy0ZGTu_1bItmjHKs.roa
Signing time: Mon 01 Jan 2024 08:30:25 +0000
ROA not before: Mon 01 Jan 2024 08:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61185
IP address blocks: 109.238.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 17:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:43:95:b1:1e:a8:38:7b:88:1b:6b:e5:2c:63:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=034617744c3777c0f2d19193bbfd5b22d9a31cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:cf:4b:f7:b0:8d:85:5c:34:0b:17:62:10:
e6:93:09:ae:0c:5a:fa:6f:63:6f:42:f0:63:a4:96:
96:8a:1a:88:2f:09:da:fa:26:e4:72:36:b8:d5:2c:
3a:b1:63:d6:36:87:6c:87:44:33:05:df:3b:96:79:
a3:99:3a:53:fc:97:e9:3f:e8:a8:41:5c:fd:41:15:
d0:47:ba:58:2d:5a:c3:ad:cb:f9:fa:c6:0d:f9:82:
10:cf:d2:68:16:db:3b:3f:e6:51:ff:9c:a3:e8:5c:
02:ce:47:c2:75:d3:01:51:2f:b1:a6:1a:54:b8:34:
ef:95:65:77:7f:0e:01:86:e2:95:9f:ca:ff:ca:18:
69:ab:f1:e7:0d:7d:93:36:49:aa:bd:77:88:b3:60:
c5:c0:69:75:85:8d:b0:a2:a2:28:24:a7:9a:1b:d6:
50:2a:28:6a:58:45:8e:28:58:bf:1f:d3:d4:f4:01:
2c:75:52:92:ca:1a:75:2c:07:1d:97:4d:78:c4:e3:
d6:e5:41:a0:1e:1e:ab:b1:8c:a3:59:3f:97:56:8a:
e3:83:54:d8:e0:f5:b4:d6:a5:a8:1c:eb:73:d4:95:
61:3f:64:74:3f:36:12:0e:b0:d6:c8:b5:c8:1c:d9:
be:07:28:a4:31:78:2d:6f:c9:dd:4a:d1:ae:cb:6c:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:46:17:74:4C:37:77:C0:F2:D1:91:93:BB:FD:5B:22:D9:A3:1C:AB
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/A0YXdEw3d8Dy0ZGTu_1bItmjHKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.238.168.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:89:f6:95:00:38:30:35:08:ed:62:b3:0c:10:1e:16:c4:78:
45:af:01:34:0f:28:12:f0:2d:d5:cc:bc:4a:1f:b9:ac:bd:a1:
02:3d:45:45:2c:8a:6b:d1:51:e0:b8:a5:f8:58:70:5b:ba:0f:
e4:91:f8:4c:32:95:55:ca:45:a2:f3:c2:14:57:fb:ff:1f:67:
c5:88:4c:d6:b8:11:5c:a3:02:b0:2c:2f:3c:37:8a:a6:a9:c2:
cb:74:86:34:71:df:f7:3a:24:25:63:8d:ce:97:77:89:ea:fb:
3c:49:e7:44:29:8f:8b:d6:d4:c0:1f:aa:7f:e8:4e:66:11:e0:
b8:ad:c6:43:81:b1:56:1b:4c:27:d2:03:2a:4c:14:96:5a:7e:
94:0d:d1:94:7b:38:50:e3:3e:af:ea:2e:f0:b8:9d:b2:e9:10:
a6:9a:83:78:26:84:d5:c0:74:ee:e6:93:9e:4f:90:a2:cf:11:
70:35:36:9e:dc:d2:94:14:c1:dc:ed:d6:f2:77:d0:49:89:65:
d5:32:37:7a:be:af:97:f4:2f:18:b5:63:25:15:99:20:ab:8e:
e2:3b:3a:83:4c:72:0f:d5:a0:67:10:7b:b0:a4:51:47:71:c9:
b5:42:23:c7:41:2d:72:89:5b:bc:f6:2f:a8:b1:c0:c4:96:23:
08:71:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 21:47:27 2024 by rpki-client on console-ams.rpki-client.org