Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/BfBTKSfATmgJi8n5b9NQ0ilLGzQ.roa
File: BfBTKSfATmgJi8n5b9NQ0ilLGzQ.roa (raw, json)
Hash identifier: 1EA7otafo9kJZIkuR0o5h2Dl1P1CF3/5T/Uo1i/cH5k=
Subject key identifier: 05:F0:53:29:27:C0:4E:68:09:8B:C9:F9:6F:D3:50:D2:29:4B:1B:34
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 0190132C63A455740AD115A077C2C82A3759
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/BfBTKSfATmgJi8n5b9NQ0ilLGzQ.roa
Signing time: Thu 13 Jun 2024 19:56:34 +0000
ROA not before: Thu 13 Jun 2024 19:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42083
IP address blocks: 109.224.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:13:2c:63:a4:55:74:0a:d1:15:a0:77:c2:c8:2a:37:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Jun 13 19:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05f0532927c04e68098bc9f96fd350d2294b1b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e2:ce:27:b0:25:dd:45:f5:c7:40:73:47:cb:
2c:7b:14:ea:2b:fb:36:3c:95:9c:10:dc:4d:86:27:
47:c6:13:e4:45:f1:95:a9:b3:1c:e4:e2:03:8b:9f:
e6:e7:30:a7:d3:92:7d:5b:aa:a5:d4:b2:7f:c2:6e:
45:00:b1:b8:5a:83:3f:44:30:f4:48:86:aa:27:25:
d0:2b:80:3b:33:7e:62:6e:3d:ad:1b:a0:55:60:64:
1b:63:f2:3d:02:1f:b0:6a:7c:bf:ce:e1:95:18:42:
e6:32:a2:7c:08:cb:31:fa:7c:16:e0:2a:61:76:0f:
e1:6f:e6:71:19:f6:ea:6f:7c:c0:6d:9d:cf:99:70:
4e:50:eb:87:f3:77:e1:0d:d0:82:08:e2:9b:e0:1b:
0e:80:a1:c1:8c:02:a9:7e:bd:e9:d8:77:83:24:0b:
60:a0:12:97:b5:e7:73:b2:97:b2:5d:90:81:07:07:
c7:e6:b6:d9:dd:46:dc:29:05:8c:d7:be:59:43:69:
53:1d:3a:ad:a7:c2:22:08:02:c0:03:75:3b:36:cf:
ee:a6:94:89:50:70:20:8c:93:d0:4a:9e:72:12:3e:
0d:b9:69:41:35:1e:8e:d2:d7:69:b4:56:59:bc:ea:
ec:07:af:b6:7a:21:63:a8:21:4f:fd:1e:41:65:aa:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F0:53:29:27:C0:4E:68:09:8B:C9:F9:6F:D3:50:D2:29:4B:1B:34
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/BfBTKSfATmgJi8n5b9NQ0ilLGzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.242.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c3:4a:8a:c8:85:09:f9:06:60:a2:22:af:f6:c4:02:5f:98:
49:37:a0:b9:bd:5b:c5:d4:55:91:6a:24:7b:93:54:97:40:5c:
25:05:f1:ba:7d:28:fc:18:cd:12:9c:0f:91:34:8d:6e:0f:de:
a4:80:62:76:4b:be:24:ea:32:42:5b:ad:2b:7d:a7:1d:8f:8b:
d7:23:9d:02:7c:af:98:b0:36:34:37:6b:d2:60:83:3d:bb:3d:
29:b1:d4:85:5f:b3:91:09:d1:88:77:e4:80:54:5c:b3:e7:bd:
e1:10:4a:e8:08:31:55:f9:07:eb:14:6a:fe:fc:cb:9b:72:c5:
f3:6b:c5:1b:ac:88:9d:53:b3:1b:4a:ec:ff:95:7c:8c:9e:20:
94:03:18:d5:90:3a:65:42:58:1a:1c:2e:22:68:a7:19:e7:d1:
8a:95:6b:b5:2d:de:0e:af:7d:b6:a6:a3:32:07:2d:8e:a7:a1:
19:fe:f8:18:b9:93:6b:38:fc:1f:0d:a8:14:49:86:27:70:04:
00:db:ca:aa:25:63:bf:e7:ce:99:7a:19:60:4f:5f:37:13:75:
5e:04:4c:fa:34:3d:0e:b5:ab:53:58:d3:14:24:89:a2:0f:39:
ff:27:a5:0b:8b:d0:cc:00:05:88:00:fe:25:1d:37:d8:bc:7a:
18:3a:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:55 2025 by rpki-client