Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cniP0t2qKX26-o9soWSLSgMzy5k.roa
File: cniP0t2qKX26-o9soWSLSgMzy5k.roa (raw, json)
Hash identifier: y6wdHSnkhaWUOTlpZ58/J4YGgDVPknrD3pXgJDorYiM=
Subject key identifier: 72:78:8F:D2:DD:AA:29:7D:BA:FA:8F:6C:A1:64:8B:4A:03:33:CB:99
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190227AD956633E3BA23938C285AF9A6FB1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cniP0t2qKX26-o9soWSLSgMzy5k.roa
Signing time: Sun 16 Jun 2024 19:16:34 +0000
ROA not before: Sun 16 Jun 2024 19:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48753
IP address blocks: 109.176.16.0/24 maxlen: 24
109.176.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 21:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:22:7a:d9:56:63:3e:3b:a2:39:38:c2:85:af:9a:6f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 16 19:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72788fd2ddaa297dbafa8f6ca1648b4a0333cb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:23:bf:76:d2:da:95:9d:33:30:e9:bf:68:
6e:81:5d:0c:d7:a8:a0:de:49:39:5a:a0:ff:80:48:
56:95:89:eb:01:b0:1b:d0:b4:58:a9:a2:96:c7:8f:
f4:ad:7b:6e:c0:d3:82:45:ef:c0:e6:c2:f5:b9:f0:
2f:5e:e1:a3:7a:87:ff:08:01:25:20:bd:91:40:e1:
50:6f:69:76:54:e1:05:cd:f2:97:f8:3c:74:7f:3b:
1b:97:e7:af:59:a5:34:e2:5b:c6:64:fb:3d:5d:71:
4d:88:e2:c4:48:49:62:69:ea:6e:32:32:bd:9e:ac:
4a:e4:f5:5d:c4:a9:16:a5:c3:3f:26:0e:9d:27:3b:
c2:e3:43:88:26:a1:28:44:52:25:fe:2f:f1:81:01:
7a:6e:22:c5:78:8a:70:15:1f:86:85:05:2e:10:35:
42:29:1c:d9:63:3e:a6:1e:14:92:da:c0:fc:27:c8:
de:b7:4d:cc:64:f3:f1:24:a2:d4:92:0f:b7:b4:78:
f9:51:bd:97:57:42:64:63:da:b6:1b:a1:9b:dd:44:
f0:d2:53:e5:bf:52:3a:a4:39:dd:d4:8c:cc:c5:f2:
d7:bf:7d:77:bb:35:2e:53:15:3f:75:04:36:21:a1:
f5:67:26:27:82:8d:dd:3a:22:50:e4:c9:40:34:ec:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:78:8F:D2:DD:AA:29:7D:BA:FA:8F:6C:A1:64:8B:4A:03:33:CB:99
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cniP0t2qKX26-o9soWSLSgMzy5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.16.0/24
109.176.21.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5a:62:51:d7:5f:f5:1e:84:d1:cc:de:52:1a:2f:40:51:06:
fe:bc:b7:13:c1:fa:b4:67:c1:f2:36:1c:ca:26:17:e4:9a:e8:
df:4e:0a:35:3e:03:90:91:ad:ab:83:76:11:9c:6e:aa:97:04:
c7:e1:e3:aa:5a:a2:37:77:99:18:0c:b3:4e:25:08:20:9e:53:
bc:97:77:c2:00:ab:79:60:98:b9:1f:7e:8c:ee:49:f8:e0:e2:
2c:0a:ee:e8:26:d2:32:f3:85:22:eb:56:01:a2:62:68:ff:1a:
02:7a:c5:ea:19:a9:cd:f4:70:56:03:1a:46:35:1c:8e:16:04:
7a:6d:9d:a8:ca:a8:ec:21:e4:d3:3b:5e:d4:0e:17:1a:ae:d5:
bb:78:0e:4a:5d:99:db:f6:8e:af:07:c9:b7:5c:ee:48:b0:da:
d6:d4:a4:f2:79:08:9d:22:44:1c:ed:a7:7d:42:96:74:68:e4:
4a:f0:a3:6f:d5:cd:9f:3e:58:99:af:de:1f:6b:5d:ad:f6:d7:
b3:a5:2a:13:d4:ac:1c:2c:4b:a3:3f:0a:6c:f3:e4:ed:f2:1b:
13:a8:bf:90:22:43:ba:2a:be:fc:c6:41:5c:e2:6c:50:f6:a9:
79:70:f5:f0:c5:fc:50:55:ae:c4:6d:18:47:1d:ed:d0:fe:26:
46:bd:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:27:36 2025 by rpki-client