Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5vPK-lFNUF1NBJb1JYKqxcfjMss.roa
File: 5vPK-lFNUF1NBJb1JYKqxcfjMss.roa (raw, json)
Hash identifier: GFCFo6rYhfStShO30WPc8FDrfy3bdQTW1YYretDm73I=
Subject key identifier: E6:F3:CA:FA:51:4D:50:5D:4D:04:96:F5:25:82:AA:C5:C7:E3:32:CB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D20FD0FD6FE437DC963D1F71BB0B81E8F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5vPK-lFNUF1NBJb1JYKqxcfjMss.roa
Signing time: Fri 19 Jan 2024 09:11:12 +0000
ROA not before: Fri 19 Jan 2024 09:11:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47692
IP address blocks: 109.176.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 07:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:20:fd:0f:d6:fe:43:7d:c9:63:d1:f7:1b:b0:b8:1e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 19 09:11:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6f3cafa514d505d4d0496f52582aac5c7e332cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:e4:54:3f:94:42:57:bc:c7:4b:57:8b:64:
4c:ae:c0:86:a7:1d:8c:f3:2b:97:c9:26:4f:12:7e:
54:5f:9a:d1:38:9c:e3:14:34:39:ce:fe:88:6b:64:
a3:10:18:cc:02:7b:c1:62:ae:e1:33:1f:d3:3b:1d:
a2:d9:83:0c:72:0f:ee:bd:a8:d4:30:7e:e3:14:3f:
7d:94:6f:bb:3e:95:ab:25:7a:bd:e6:29:54:a3:ec:
76:bf:cd:b0:b9:39:de:69:b1:2c:91:eb:2b:10:05:
86:16:49:af:d2:fb:36:0a:d3:11:3a:8a:9c:fd:d2:
1b:a1:0a:a8:2b:48:a8:7d:ee:3a:7d:62:b1:15:ee:
1e:b9:35:9f:4b:64:e9:b7:b5:86:9b:ea:5b:ea:71:
dc:a0:f6:64:6f:d8:be:c6:c1:bd:91:81:67:05:af:
83:49:57:dc:5e:cd:e5:89:19:39:25:d3:ca:80:b5:
ee:68:4c:7b:03:b4:a7:99:cc:23:7a:ea:64:05:b3:
85:eb:1a:93:9f:ce:28:d4:53:3c:ae:84:5a:d2:5e:
07:fc:2f:6c:65:47:ea:97:63:ff:e3:b8:e5:da:2c:
61:71:a7:b1:59:f2:7f:fa:51:6c:30:5b:d6:6b:64:
15:f3:b0:b6:cd:e1:11:7f:6c:d0:cd:6a:c6:c8:d6:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F3:CA:FA:51:4D:50:5D:4D:04:96:F5:25:82:AA:C5:C7:E3:32:CB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5vPK-lFNUF1NBJb1JYKqxcfjMss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:dd:d7:99:ef:75:8a:0e:13:44:e7:65:48:df:de:d4:24:7d:
2b:26:f6:6b:3b:6d:0e:e4:9c:ff:51:50:06:45:ce:14:ce:c9:
bc:03:a4:38:59:54:a8:1d:84:2c:aa:34:61:a4:51:9a:41:e8:
81:64:b6:7c:b8:f0:73:e5:29:f6:8d:ae:6e:d6:ab:bb:6a:4a:
56:2c:a9:e1:14:4b:b1:24:9b:6f:08:ff:b1:9b:5f:49:e1:3a:
3d:71:37:8e:38:7d:d1:c8:d4:8b:0a:4a:58:e8:4d:57:79:4d:
1a:4a:67:f2:cf:c4:f7:4f:44:4f:a6:83:0c:db:fc:c2:38:73:
5f:6d:b6:07:f5:ea:19:0e:49:ab:37:fd:fe:6b:22:61:8f:e9:
43:2d:2f:71:6e:eb:7f:2e:a5:14:2a:90:9b:4d:59:be:06:01:
bf:82:41:87:23:09:77:ec:fc:ae:b9:3f:4d:00:8e:14:a6:37:
b5:17:dd:96:15:57:e7:f2:c4:69:46:e8:8b:34:f6:f8:b3:cd:
ef:9d:9f:07:91:73:3c:0b:64:54:52:fd:33:29:ba:84:da:45:
d5:0d:fe:aa:62:12:fd:14:85:3e:38:5c:23:63:43:4c:bc:0d:
6f:74:e5:f6:41:8d:5a:94:39:ac:de:10:de:37:13:21:ce:27:
43:48:64:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:07:44 2025 by rpki-client