Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bUTb0D_1nGgUo0RekzwnKfKi274.roa
File: bUTb0D_1nGgUo0RekzwnKfKi274.roa (raw, json)
Hash identifier: HVayyWPMrKxIfb0DdTjCKmoRE2y2V4gbePzyjSP+EWM=
Subject key identifier: 6D:44:DB:D0:3F:F5:9C:68:14:A3:44:5E:93:3C:27:29:F2:A2:DB:BE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190CAE5D9125FA87311036F47DCDF110965
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bUTb0D_1nGgUo0RekzwnKfKi274.roa
Signing time: Fri 19 Jul 2024 12:09:39 +0000
ROA not before: Fri 19 Jul 2024 12:09:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205175
IP address blocks: 109.176.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 10:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:e5:d9:12:5f:a8:73:11:03:6f:47:dc:df:11:09:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 19 12:09:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d44dbd03ff59c6814a3445e933c2729f2a2dbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:0c:32:a1:ba:a1:a0:de:24:aa:ca:7e:32:
3a:8f:f2:03:12:b2:bc:f4:d4:3b:c2:7d:b3:b5:60:
a5:4b:8e:b7:9e:ed:bb:80:7d:8b:eb:22:5e:37:91:
a6:eb:3f:1a:8b:48:2c:a2:d3:56:42:ca:5d:d4:09:
48:e1:ec:9d:1c:7e:f0:3b:20:3f:a5:e0:72:a2:dc:
7f:b1:09:9c:21:78:3f:ab:c7:54:e9:08:22:a8:58:
8a:a8:23:dd:e8:34:bc:d4:af:f8:85:45:36:11:dd:
c0:d7:0d:aa:fb:3f:3b:49:40:42:6b:d0:b6:5f:b0:
d1:c2:63:1f:d2:8f:7a:36:63:cc:97:b2:26:49:0f:
4c:5e:fa:fd:96:15:43:98:46:c4:cb:1d:75:72:13:
b8:9f:dd:19:62:2a:09:be:5f:fa:1c:7e:b8:cd:28:
cc:a2:46:cd:c5:53:a0:48:50:e3:d7:7a:a6:cf:9a:
21:a8:a8:ee:19:b2:b9:55:b8:6d:f1:44:8e:c3:0a:
8b:11:fa:8d:50:f5:ca:83:7c:60:1f:6f:f2:5a:50:
8c:26:2d:f5:b4:a2:38:1a:af:f8:b2:4c:de:51:12:
63:d2:06:2c:b9:91:51:88:01:a1:f5:83:8b:56:88:
a0:77:2c:81:48:0d:48:d5:74:70:9a:1d:c2:9e:9b:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:44:DB:D0:3F:F5:9C:68:14:A3:44:5E:93:3C:27:29:F2:A2:DB:BE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bUTb0D_1nGgUo0RekzwnKfKi274.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b5:0a:6c:f7:f0:23:0d:b9:f4:dc:99:32:7f:82:03:6a:95:
62:a0:95:ad:f4:9d:60:b1:80:7c:54:13:03:6d:7b:f6:4a:9f:
fb:ef:7c:bf:2e:97:8b:ee:b5:8e:08:98:d3:a8:ba:89:d0:cf:
6a:08:48:77:80:76:a6:89:5c:66:2e:94:f3:79:56:5d:81:7a:
32:a1:91:ca:c7:a1:9e:34:1c:28:26:7a:c4:0a:34:3e:0c:d1:
27:54:16:75:6a:d5:8c:ef:a9:1d:12:9a:77:2d:e1:91:d0:ac:
38:66:82:44:2e:8a:d9:0f:6e:8c:f5:ae:84:ac:d3:81:05:08:
34:a1:ce:7e:ae:aa:1b:56:81:ce:d0:78:6f:8f:3d:9f:59:f8:
81:44:c3:4c:4a:62:4d:31:c2:e6:0e:3e:f5:6c:ae:02:01:9a:
ee:d4:84:74:be:d2:ca:17:79:34:3a:d7:78:33:86:43:d0:77:
89:f4:ae:af:7e:a1:eb:2a:23:b1:aa:f8:a9:8b:37:76:42:69:
bf:b5:fb:c0:1a:12:fc:9a:ce:d8:03:f6:cb:42:49:36:e0:e2:
9e:24:02:2d:80:e0:39:0b:53:d0:13:9c:f1:56:79:07:46:9d:
2b:b7:b3:89:aa:c8:7c:20:e4:ad:a2:d0:72:46:9a:8e:60:d7:
59:22:ab:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:17:10 2025 by rpki-client