Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_7ik-OTTpR-qi4Fm8c5M8YozYcE.roa
File: _7ik-OTTpR-qi4Fm8c5M8YozYcE.roa (raw, json)
Hash identifier: 94D1pXQ0DFCrKLA3U/2p/IAaZ91I2WKTDDqa7QjzWng=
Subject key identifier: FF:B8:A4:F8:E4:D3:A5:1F:AA:8B:81:66:F1:CE:4C:F1:8A:33:61:C1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F3453E67109EA7609D0CC9570AD7B4BF2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_7ik-OTTpR-qi4Fm8c5M8YozYcE.roa
Signing time: Wed 01 May 2024 13:24:24 +0000
ROA not before: Wed 01 May 2024 13:24:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137509
IP address blocks: 109.176.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:53:e6:71:09:ea:76:09:d0:cc:95:70:ad:7b:4b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 1 13:24:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffb8a4f8e4d3a51faa8b8166f1ce4cf18a3361c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:64:91:41:ad:b4:17:b6:83:77:5e:e6:be:
f9:ec:27:89:e3:e2:8d:3b:3b:c0:22:b7:6e:3c:68:
4d:c2:c2:78:18:be:37:72:74:a6:ae:d7:00:99:d0:
00:f2:01:1a:ea:e5:60:a6:25:05:57:d6:ef:17:f5:
e0:94:43:64:56:8d:52:70:3b:23:9b:b5:3d:6e:ae:
07:59:6c:cb:08:91:75:d1:fd:7c:6d:03:e6:d7:34:
04:fc:d6:c1:4d:a3:ee:2a:26:bb:5b:3a:d9:32:3c:
2f:1b:5b:cb:fa:1e:6b:90:f1:21:2b:90:1b:4e:06:
95:d8:3e:ab:c4:b9:78:86:73:94:f0:4d:c7:c9:c4:
1e:de:5e:9c:88:8e:d8:9f:3f:6d:5d:c8:35:08:48:
0c:b4:0f:fa:ad:e3:84:78:7d:d1:51:30:c7:9b:50:
41:65:06:83:ea:8a:cb:44:1a:b2:0e:b6:9e:09:ea:
8a:f5:3f:c8:6d:89:f0:3d:e3:36:0b:a3:90:f1:11:
7e:fc:3d:3d:67:36:e6:1d:ff:1d:38:a1:01:9f:cc:
c1:bf:d6:92:9e:b1:5c:e0:c8:9e:15:a9:20:61:9c:
e5:8b:d2:6a:f7:a8:b1:43:1b:b5:c8:8c:bf:a2:dd:
02:97:54:13:25:95:db:b8:a0:dc:58:a2:d2:57:73:
75:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B8:A4:F8:E4:D3:A5:1F:AA:8B:81:66:F1:CE:4C:F1:8A:33:61:C1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_7ik-OTTpR-qi4Fm8c5M8YozYcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.24.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2c:80:c0:55:58:a5:fc:5d:c5:27:f5:81:2c:78:21:0a:23:
cb:47:c3:fb:8a:23:bb:92:32:1b:e6:e2:3a:ce:5e:05:61:4c:
9e:85:e9:47:58:ab:91:54:90:68:1c:f0:b7:73:84:d4:61:62:
04:31:8d:9c:07:1e:0a:f4:20:99:c1:a6:1e:8b:7c:cc:16:7d:
03:72:1d:eb:fd:9f:29:93:27:5f:75:28:cc:53:64:91:6e:b8:
19:3c:02:8b:6d:5e:54:46:00:a2:1a:e7:2e:d6:f6:98:85:94:
70:13:90:0c:57:1e:96:a8:12:a2:44:d2:57:a0:0e:a4:f0:48:
a4:04:a4:66:14:d9:86:41:c9:ac:e8:d1:f2:93:56:5b:ca:ba:
36:d4:83:f5:d2:64:93:56:7d:12:c0:15:37:67:5e:4a:e9:a9:
72:1e:50:c4:4d:f8:7f:2e:bb:98:3b:16:f8:7a:b2:49:47:ce:
fe:ff:c7:e0:7f:78:27:e1:e8:5b:2c:d3:b0:4b:59:ef:38:ca:
ab:d4:9f:04:ea:96:ea:27:4e:fe:6e:d5:ed:b2:90:d3:72:05:
66:1a:38:9a:6a:3d:8b:35:6a:db:fe:60:4c:30:13:e7:ee:ed:
f0:c9:6c:2b:1f:0d:c1:db:f0:1d:c0:50:4d:b7:7a:21:f1:c3:
bf:3b:0a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:07:10 2025 by rpki-client