Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/7cRqO6Tw_taVWl4hZeXUpfA9Dfs.roa
File: 7cRqO6Tw_taVWl4hZeXUpfA9Dfs.roa (raw, json)
Hash identifier: 6QGuMa5oIDf2mL140dhaV3cMpwO9eE/pBU0z5RLRdzk=
Subject key identifier: ED:C4:6A:3B:A4:F0:FE:D6:95:5A:5E:21:65:E5:D4:A5:F0:3D:0D:FB
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 018CE491C9326773F1242B6A90546A79924A
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/7cRqO6Tw_taVWl4hZeXUpfA9Dfs.roa
Signing time: Sun 07 Jan 2024 15:36:48 +0000
ROA not before: Sun 07 Jan 2024 15:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198213
IP address blocks: 109.202.124.0/24 maxlen: 24
109.202.121.0/24 maxlen: 24
109.202.123.0/24 maxlen: 24
109.202.120.0/24 maxlen: 24
109.202.125.0/24 maxlen: 24
109.202.122.0/24 maxlen: 24
109.202.127.0/24 maxlen: 24
109.202.126.0/24 maxlen: 24
2a03:e180::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 09 Jan 2024 10:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e4:91:c9:32:67:73:f1:24:2b:6a:90:54:6a:79:92:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: Jan 7 15:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edc46a3ba4f0fed6955a5e2165e5d4a5f03d0dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:7e:c6:94:6f:79:96:0c:c2:00:f1:ad:47:
6e:4a:52:e1:ea:da:ae:54:a7:05:3c:ba:5c:72:b6:
74:9b:5e:6b:80:4e:23:47:a5:14:b8:1f:45:cd:a9:
77:02:21:47:b0:2a:16:76:39:7b:a7:14:74:c0:1a:
d3:e1:cd:3f:9d:15:45:bb:78:84:79:8d:bc:b1:aa:
06:a1:6e:df:3a:fd:56:cc:af:31:6b:54:70:88:07:
2c:74:41:a9:66:3a:b7:2e:9f:58:66:ed:f2:55:31:
c3:49:2b:01:89:f5:42:08:a3:60:4b:f8:f2:b6:b1:
51:1d:7a:19:19:62:90:45:d8:c5:5f:52:7b:62:22:
3f:41:b8:c1:6b:98:4f:9e:6a:53:56:65:5f:81:e5:
98:f9:7a:25:9f:74:16:0f:25:a4:69:50:29:d0:de:
41:4a:95:1a:1f:5d:80:e4:20:67:dc:b7:39:43:14:
65:25:e4:e6:64:20:9f:40:b1:51:7c:3d:c4:9c:fd:
7d:f6:a4:3c:8c:5c:97:c4:03:e6:17:60:58:28:38:
6e:eb:f9:4a:74:2d:87:1e:38:c4:04:9f:39:68:ac:
d5:2b:d9:9d:54:97:bb:64:8c:da:e8:03:95:0b:80:
84:c8:7d:7a:1b:c8:63:79:e8:c2:01:4a:ae:4b:d1:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C4:6A:3B:A4:F0:FE:D6:95:5A:5E:21:65:E5:D4:A5:F0:3D:0D:FB
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/7cRqO6Tw_taVWl4hZeXUpfA9Dfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.202.120.0/21
IPv6:
2a03:e180::/32
Signature Algorithm: sha256WithRSAEncryption
62:ca:10:1e:cd:ee:cb:85:65:b4:ae:7f:61:ba:19:be:d5:ed:
f5:3c:0f:67:0c:a7:75:c1:7b:b3:53:b5:aa:5e:ce:6f:c2:af:
c8:03:47:19:2d:ff:0e:3d:94:71:6c:7b:bf:68:68:01:86:eb:
1c:35:cc:a0:74:45:86:86:e7:4b:0e:cd:e6:fd:98:d7:7d:17:
5c:c3:5d:99:eb:f1:43:58:09:81:4a:92:95:ae:4e:2a:e1:34:
cb:5e:f2:e9:e9:eb:be:95:90:6f:47:09:00:76:61:87:7a:5e:
f9:09:c0:de:f9:5b:d8:4c:50:f5:eb:6f:21:48:37:e6:17:d3:
7d:1d:da:83:18:11:6f:02:74:8d:ed:cb:1a:5a:61:fa:8f:7d:
e1:8a:dd:e0:d6:68:b6:1f:87:0a:fa:a1:aa:2e:bc:07:c3:9a:
5a:56:dc:fe:b0:6f:91:42:65:dd:3a:41:9d:28:ff:3c:94:02:
c5:9a:dc:6b:9c:7f:e7:38:f3:c8:03:06:9d:00:92:e1:05:a9:
0b:2a:6a:a9:ac:fb:cf:71:99:94:4f:e4:7e:7f:fe:e2:45:8b:
03:fe:5d:de:f5:68:06:ca:28:51:79:b4:28:49:2e:64:49:5d:
57:f4:44:c2:b8:e7:ee:1f:34:fe:5a:6d:d7:19:1f:35:f6:f0:
f8:d9:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:52:11 2024 by rpki-client on console-ams.rpki-client.org