Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iWF4TUGMUuIJAV1784RAnIezB7A.roa
File: iWF4TUGMUuIJAV1784RAnIezB7A.roa (raw, json)
Hash identifier: F7lu+FaEuy08NKNctn3ouS6AlCBl2MaQ0ax3xGY4z4c=
Subject key identifier: 89:61:78:4D:41:8C:52:E2:09:01:5D:7B:F3:84:40:9C:87:B3:07:B0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F867A2C26524A56507D909A7996267C6B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iWF4TUGMUuIJAV1784RAnIezB7A.roa
Signing time: Fri 17 May 2024 12:15:04 +0000
ROA not before: Fri 17 May 2024 12:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215267
IP address blocks: 109.176.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 08:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:7a:2c:26:52:4a:56:50:7d:90:9a:79:96:26:7c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 17 12:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8961784d418c52e209015d7bf384409c87b307b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0a:81:92:e8:2a:7d:08:17:16:28:07:10:54:
26:46:c6:38:e3:74:3f:ef:60:65:7d:e4:1b:94:19:
86:91:75:6d:d4:17:e0:94:f2:dc:b4:da:3e:86:53:
68:a6:39:83:1c:c2:7f:42:b5:73:8d:d8:a0:f2:63:
0b:e5:0a:33:c5:28:26:10:99:e4:ea:9a:e2:b4:30:
9a:4f:a9:83:61:82:c0:d5:5f:2d:eb:ff:e0:0c:42:
2b:b3:e1:40:32:b7:1b:7f:f8:79:e6:da:18:46:94:
5b:d3:06:47:f5:12:b9:70:43:63:2b:1c:f3:fa:ff:
b2:df:78:eb:ec:fb:55:62:19:1e:47:35:5d:44:f2:
b8:11:d1:1b:42:9b:52:6e:e6:75:74:3d:92:72:e8:
67:10:78:b2:ec:de:49:e5:5b:5f:64:7c:ce:9b:1d:
12:2a:77:3e:28:a2:14:9a:5f:79:ab:34:a7:70:e7:
f0:c5:78:1e:22:c6:6b:ec:ce:ff:ed:78:28:65:fe:
e1:ce:4f:87:ba:24:c6:f6:5c:fb:63:0e:f8:ec:e7:
b6:77:a1:f0:c2:97:4e:29:f4:9f:5e:62:83:98:99:
90:a0:ae:cc:c5:44:3a:66:d4:ab:fa:3c:e2:8f:11:
5a:22:e5:ba:0b:dc:6a:9f:a7:fe:da:e7:e6:8e:9d:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:78:4D:41:8C:52:E2:09:01:5D:7B:F3:84:40:9C:87:B3:07:B0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iWF4TUGMUuIJAV1784RAnIezB7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
78:6f:3b:fc:57:03:da:72:dd:dc:99:cf:2c:b2:55:61:1c:26:
51:ff:77:b0:d3:06:9d:04:b5:85:ad:35:0a:1a:79:1c:ad:fd:
69:3d:3a:ad:65:52:dd:22:b4:ce:c3:8b:d9:90:7b:1a:c7:83:
cc:5b:1b:bc:7d:f8:0c:b5:9d:49:ce:f0:fe:e2:a0:1c:1b:8d:
7f:6a:1a:1d:f1:78:4d:fb:3f:aa:a0:30:18:f6:f9:93:14:40:
37:44:9d:7b:85:c0:c1:62:4e:31:93:5d:67:8b:6e:8c:8d:95:
58:4b:72:fc:5e:6f:04:0c:a1:69:fc:b9:ed:e3:68:62:8e:52:
31:4a:f7:2f:f8:36:c4:05:e7:01:d4:4f:6f:9a:6d:f3:62:0a:
99:bc:9b:b2:73:7d:20:52:3c:3f:0d:4f:b9:10:0c:f8:a2:56:
9c:9e:95:34:8a:69:22:9a:ed:a3:15:d1:a3:6a:16:8a:d2:37:
40:4f:d9:f0:41:01:84:00:42:8d:1d:0b:d3:f4:2e:6b:8b:5c:
22:6e:86:75:de:44:47:64:b3:8d:38:bc:e8:8c:d6:a0:ff:5e:
c8:80:bd:d7:eb:ad:d1:13:6d:60:c2:8c:d9:da:4b:44:c7:02:
43:94:6a:8a:29:9f:47:24:d5:fb:33:d3:76:0c:82:59:49:16:
c4:1b:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:05:40 2025 by rpki-client