Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/DxV1p9aD8CQkzJ1HeQl7L-g3-VY.roa
File: DxV1p9aD8CQkzJ1HeQl7L-g3-VY.roa (raw, json)
Hash identifier: hBcoF37TdpiYLw2j9VYFlJyUx1sU9aqkjH0yZ9U2OiE=
Subject key identifier: 0F:15:75:A7:D6:83:F0:24:24:CC:9D:47:79:09:7B:2F:E8:37:F9:56
Certificate issuer: /CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Certificate serial: 018CC79356D3934AA31E1FC311F7DFB62B64
Authority key identifier: C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/DxV1p9aD8CQkzJ1HeQl7L-g3-VY.roa
Signing time: Tue 02 Jan 2024 00:29:31 +0000
ROA not before: Tue 02 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29479
IP address blocks: 109.233.56.0/24 maxlen: 24
109.233.58.0/24 maxlen: 24
109.233.57.0/24 maxlen: 24
109.233.63.0/24 maxlen: 24
109.233.59.0/24 maxlen: 24
109.233.62.0/24 maxlen: 24
109.233.61.0/24 maxlen: 24
109.233.60.0/24 maxlen: 24
2a01:8dc0:112::/48 maxlen: 48
2a01:8dc0:110::/48 maxlen: 48
2a01:8dc0:109::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:56:d3:93:4a:a3:1e:1f:c3:11:f7:df:b6:2b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Validity
Not Before: Jan 2 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f1575a7d683f02424cc9d4779097b2fe837f956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5d:c9:74:b4:c7:fd:95:ac:78:3e:4d:56:83:
05:7a:0a:83:e4:5e:30:72:d7:c5:bb:e9:db:15:da:
fa:fb:20:61:37:3b:82:47:cf:77:24:f8:c5:05:c0:
71:a5:c3:ee:4a:f8:1b:8d:15:b2:ba:6c:94:a5:4d:
dc:83:72:5d:fa:77:c0:44:ad:c9:8d:06:18:b5:40:
d3:67:14:42:39:5e:f0:4d:8c:a2:90:a4:87:62:5b:
62:ec:9b:d6:29:47:7e:50:8d:2c:01:fa:1b:73:4a:
c4:be:4c:71:69:c5:a1:41:da:41:28:6d:99:1f:53:
29:b2:2f:68:1c:f4:88:85:78:2a:a3:53:ce:98:33:
4d:30:10:5a:2b:0c:2e:00:d2:76:f5:ef:96:40:21:
c4:1b:dc:68:9a:3c:47:07:fe:70:5c:3d:0a:d2:50:
c2:15:7b:9b:77:14:f5:2b:d5:e0:c9:2c:ed:f7:f5:
13:82:8f:7e:c7:9e:95:34:e0:14:53:48:2c:f7:ca:
92:fd:37:63:c1:75:06:0f:f3:a8:b7:4b:e0:41:a7:
26:17:75:ce:78:25:80:b7:62:aa:9b:d3:fb:6e:21:
28:1b:ef:e9:75:77:63:0a:4b:1b:96:9b:4a:25:ca:
a4:cf:c4:ff:75:87:c3:3a:37:b3:67:25:a1:83:a8:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:15:75:A7:D6:83:F0:24:24:CC:9D:47:79:09:7B:2F:E8:37:F9:56
X509v3 Authority Key Identifier:
keyid:C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/DxV1p9aD8CQkzJ1HeQl7L-g3-VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.56.0/21
IPv6:
2a01:8dc0:109::/48
2a01:8dc0:110::/48
2a01:8dc0:112::/48
Signature Algorithm: sha256WithRSAEncryption
a8:9a:60:16:ec:62:2a:e0:67:a1:38:b9:47:d8:75:ce:58:d1:
cb:0d:ff:5d:79:e4:f5:b4:42:68:3b:95:6a:ca:c6:9e:d8:1a:
a9:63:82:8c:bb:25:6b:e1:7c:81:b5:fc:29:90:4f:1c:bd:49:
21:89:e0:29:ae:ac:60:f0:5c:06:92:ce:12:8e:94:19:9f:aa:
27:e8:6d:68:e8:7c:c2:d5:31:3f:0b:39:f1:47:16:0f:7c:ba:
b5:ee:ab:d8:69:f7:4b:60:db:a3:65:17:34:d6:0a:b0:46:3a:
1f:6f:87:ec:c6:57:8d:50:ab:40:b3:a2:59:98:3d:94:2a:65:
01:ee:cd:85:ee:9b:ab:53:7f:a3:09:63:6b:c0:32:7b:29:af:
58:d0:28:d2:79:3b:b5:7f:35:f5:67:28:4c:2c:eb:92:25:b1:
2d:7e:ad:e3:2e:df:b8:81:27:70:85:e2:ae:ab:b1:4e:dd:87:
2b:f8:4c:26:9c:a6:e3:de:07:4e:aa:96:05:4b:c5:a2:e0:40:
09:92:c5:d9:74:c5:57:f8:e6:3d:f4:93:f1:db:8c:b3:f3:1b:
67:a0:51:e1:2b:f1:30:2a:0c:53:1e:70:3e:7b:8a:5b:ed:16:
b6:dc:d1:63:8e:e2:7a:57:b6:ae:88:f5:98:4b:80:07:61:35:
18:15:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:54:52 2025 by rpki-client