Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1L6RCw5Wma3j-7HyTqZUzLusFgs.roa
File: 1L6RCw5Wma3j-7HyTqZUzLusFgs.roa (raw, json)
Hash identifier: tuNNQZdbqG0AUErxcXSeFAxAqTFnTs2qQnVVVH3WTfA=
Subject key identifier: D4:BE:91:0B:0E:56:99:AD:E3:FB:B1:F2:4E:A6:54:CC:BB:AC:16:0B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FCBAB3C454B92C08EE6F3AF0FD904A323
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1L6RCw5Wma3j-7HyTqZUzLusFgs.roa
Signing time: Thu 30 May 2024 22:42:27 +0000
ROA not before: Thu 30 May 2024 22:42:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 109.176.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 20:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cb:ab:3c:45:4b:92:c0:8e:e6:f3:af:0f:d9:04:a3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 30 22:42:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4be910b0e5699ade3fbb1f24ea654ccbbac160b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:03:62:a1:3b:67:37:99:04:3b:5e:5a:c2:
52:e2:f7:c1:2d:44:68:a0:0c:27:db:58:51:8d:00:
e4:39:67:32:b4:ce:8c:09:39:d5:f1:e7:ff:78:1d:
af:88:99:85:4b:6e:c5:e0:ba:ef:53:c7:86:b7:da:
49:a4:0b:90:db:fa:f6:e0:00:a4:83:fb:50:c1:89:
a2:a5:ee:da:4e:1e:14:54:70:5d:9d:4c:b7:03:a7:
f2:72:a3:a6:f8:f7:ed:ff:78:82:76:db:af:63:f1:
33:94:cf:34:cb:3f:58:7e:18:fd:95:a8:be:f4:d8:
18:01:c2:e3:1e:89:1e:84:ab:5d:3b:38:55:49:dd:
c3:db:e5:29:c8:10:e3:97:b2:a9:6d:ca:d4:a0:9b:
9a:ab:77:01:3f:77:f1:0c:60:57:36:25:48:bc:f2:
12:b3:28:34:65:de:a7:62:2f:29:2d:ea:0f:ca:c6:
2c:81:a5:fc:cc:5d:7a:c0:82:89:ed:66:14:7e:0a:
98:fe:48:97:20:3f:ac:69:74:72:b3:71:83:4b:f7:
ab:2c:5b:45:7c:db:b3:58:f5:66:1a:41:c6:ad:c4:
e0:c1:5f:dd:3b:4c:c7:ad:f8:57:6b:9f:19:94:9d:
5c:e6:ba:ac:b1:9e:69:2d:4c:53:f9:24:c8:5c:d8:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:91:0B:0E:56:99:AD:E3:FB:B1:F2:4E:A6:54:CC:BB:AC:16:0B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1L6RCw5Wma3j-7HyTqZUzLusFgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d6:63:c6:28:91:14:89:00:ac:51:67:ca:60:18:52:09:e8:
c1:96:f3:3a:35:b5:2d:a2:47:fc:8b:12:d5:d1:3c:a9:aa:da:
80:eb:d2:89:44:77:63:c8:24:8a:3f:b0:5d:c5:ea:3f:1e:c7:
15:7b:4e:15:1a:06:6a:bc:8e:46:26:de:ef:00:c2:34:b1:b6:
4e:0a:5e:93:ab:b4:e3:33:2f:f4:81:8b:2e:3b:d6:e8:25:d7:
64:85:21:84:38:80:08:35:05:1a:95:ed:82:dd:68:63:a5:3d:
fe:b2:f2:a3:37:e0:e8:43:d6:ef:47:62:78:de:d3:f8:ed:8d:
1e:c4:96:4b:3e:25:ca:a7:f6:08:6b:50:16:91:2f:2b:72:c9:
aa:d2:90:48:8f:50:d9:e1:0f:91:3e:98:57:7a:85:cc:3b:cd:
e7:af:e4:0c:0a:ab:39:54:05:06:e0:cc:0f:da:c0:bc:ed:8f:
16:1b:71:d8:84:d8:00:08:c2:9d:84:a8:40:d7:ef:1d:8d:78:
66:85:81:60:e3:9a:44:31:c6:cc:9d:ea:e1:9f:1c:8f:c7:2d:
9e:8c:3f:9c:16:2f:a4:e2:f5:32:26:aa:c1:a6:fa:a3:a6:14:
78:06:11:70:dd:ba:ab:b7:27:96:a1:d8:9a:e4:36:78:fa:2b:
87:98:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:23:26 2025 by rpki-client