Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/MYfY0waN_Z66Qa6HXMEFHJnGxnM.roa
File: MYfY0waN_Z66Qa6HXMEFHJnGxnM.roa (raw, json)
Hash identifier: IQJZeLUADP9t63zJE4SORqtrLDzkSviIkp9Vs2Yls2Y=
Subject key identifier: 31:87:D8:D3:06:8D:FD:9E:BA:41:AE:87:5C:C1:05:1C:99:C6:C6:73
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 019349E08064DE61FAECCF6008313B677EBA
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/MYfY0waN_Z66Qa6HXMEFHJnGxnM.roa
Signing time: Wed 20 Nov 2024 14:01:09 +0000
ROA not before: Wed 20 Nov 2024 14:01:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16625
IP address blocks: 109.230.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 20 Nov 2024 15:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:e0:80:64:de:61:fa:ec:cf:60:08:31:3b:67:7e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Nov 20 14:01:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3187d8d3068dfd9eba41ae875cc1051c99c6c673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:f0:86:3b:1f:a6:4c:25:71:bd:81:9e:76:
18:f3:65:5a:5e:3f:cd:7b:be:27:92:a8:e1:4a:94:
ee:ba:97:4a:2d:13:ef:08:af:35:22:61:31:11:41:
0f:39:03:4d:9f:dc:eb:b4:db:3a:a6:4a:46:a8:8a:
68:a6:7b:16:7c:07:53:a5:9e:4f:0f:bc:84:bd:77:
a7:64:21:f6:15:04:89:90:0f:87:2d:c9:fb:8f:b8:
d6:ba:e7:cf:df:97:12:6d:b3:47:70:66:e4:04:83:
bf:b0:e8:f9:a0:1a:b9:92:d9:95:5a:f1:80:e0:aa:
ae:0e:6c:a7:fb:f2:a7:b7:69:84:6d:63:b7:d1:ef:
11:ef:36:13:49:ad:26:8c:33:a7:20:20:78:d4:3d:
59:90:59:a5:6b:d9:64:40:bf:e4:13:b9:f8:e2:69:
e8:14:de:6d:3d:2e:fc:44:92:94:15:b1:4f:ba:ab:
ae:7d:f2:a9:54:ed:fc:9d:91:f8:88:39:9d:91:7d:
a6:7e:af:a4:98:7e:d7:69:ad:11:c6:2e:ff:c6:38:
8e:04:49:c7:ff:97:5a:cf:87:e4:82:55:46:ae:92:
84:1c:80:08:ef:8f:54:ff:36:3e:05:e7:a6:2d:47:
ae:6e:c8:39:66:6e:3f:0a:fe:b4:29:0b:a3:7b:7c:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:87:D8:D3:06:8D:FD:9E:BA:41:AE:87:5C:C1:05:1C:99:C6:C6:73
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/MYfY0waN_Z66Qa6HXMEFHJnGxnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.230.116.0/22
Signature Algorithm: sha256WithRSAEncryption
01:c2:23:73:3f:f1:18:44:78:1d:1f:48:22:3f:0e:b8:d9:62:
9a:01:31:a0:ba:1e:cb:87:67:b8:31:8b:10:84:d2:c1:60:9c:
fc:c7:b4:fc:8f:01:06:64:64:80:e3:1b:79:bf:04:9f:dd:48:
88:56:17:f0:01:04:c2:79:d4:bb:7c:56:07:c1:ed:22:c4:77:
53:68:38:e3:45:99:f5:ef:00:e9:e5:ca:d1:fd:1d:88:79:db:
fc:66:d4:28:34:af:42:ce:9f:40:88:1b:9c:c6:e7:18:cf:fc:
e3:c8:4c:77:f6:49:0e:33:d8:0e:33:08:46:07:83:2a:8d:70:
b0:70:53:b5:10:f0:04:a1:24:69:f1:9d:83:3f:ee:3b:6f:60:
1b:7a:fb:ab:ee:51:27:52:8f:1f:c5:6c:e6:33:6a:31:51:ca:
d0:29:04:c6:3d:7a:35:8d:83:fa:bd:c2:97:9e:b1:26:f6:97:
86:9b:91:a8:5c:06:9e:a6:42:55:b7:be:f3:ee:b8:4a:1b:85:
96:c7:47:77:0e:bc:10:24:63:05:f0:8a:30:91:3a:e5:3b:3b:
81:a5:4a:31:79:1c:ed:89:82:b2:3f:bf:dd:02:a2:13:ca:e1:
a6:04:ee:7c:a6:36:84:7c:25:9d:f5:f5:87:e7:23:a4:16:e1:
48:ec:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:50:11 2024 by rpki-client on console-ams.rpki-client.org