Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ipaQND5DU0WHQhkc86D6Ttc0o3Q.roa
File: ipaQND5DU0WHQhkc86D6Ttc0o3Q.roa (raw, json)
Hash identifier: W50xbun/JzK2zQm1fwkFRn0S0hm1i6GWGkP2W02nx74=
Subject key identifier: 8A:96:90:34:3E:43:53:45:87:42:19:1C:F3:A0:FA:4E:D7:34:A3:74
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019074518B06545E96A6B8764854E09E327C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ipaQND5DU0WHQhkc86D6Ttc0o3Q.roa
Signing time: Tue 02 Jul 2024 16:40:19 +0000
ROA not before: Tue 02 Jul 2024 16:40:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215267
IP address blocks: 109.176.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 20:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:74:51:8b:06:54:5e:96:a6:b8:76:48:54:e0:9e:32:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 2 16:40:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a9690343e4353458742191cf3a0fa4ed734a374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:04:a1:c3:99:8e:cb:8d:c8:35:34:0d:12:
86:c7:4b:6f:09:50:16:45:94:55:43:12:c2:d8:1f:
9e:2f:0e:a4:ad:fa:83:ba:ea:1c:ac:61:9e:db:5a:
e4:4d:f8:56:7f:70:38:fa:91:68:a0:11:7c:a3:76:
70:4e:5b:31:c2:70:07:2a:a3:ad:53:91:28:df:bb:
86:da:61:43:70:bd:1e:2c:73:20:c2:1d:85:61:d8:
30:c3:5f:7b:a3:58:bf:65:02:40:84:9d:84:ef:a6:
f2:1f:f9:21:8b:14:80:ee:ad:bc:dc:6a:27:f2:2b:
a5:ea:d5:51:1f:b6:68:a9:ee:d0:3c:49:26:6d:a2:
f2:a8:1f:fd:e0:4e:5e:16:d6:80:da:f5:31:18:6f:
ab:1a:2d:f5:66:1f:1a:77:06:97:ad:3e:32:a7:09:
7d:58:5d:19:32:03:81:4a:fa:0e:c3:5e:0a:cf:3e:
ef:ab:e6:90:48:52:da:ba:3b:90:32:7b:dc:e8:fe:
4c:51:62:33:31:e1:40:ee:07:aa:db:39:7c:ad:82:
9d:61:6d:c8:b7:d7:c7:4b:e3:61:08:53:05:f2:12:
92:3f:90:80:8d:56:20:d8:d3:5d:a6:e9:8c:e2:40:
f6:0b:38:4e:a7:5c:ab:f6:d7:5e:8a:5d:c5:10:95:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:96:90:34:3E:43:53:45:87:42:19:1C:F3:A0:FA:4E:D7:34:A3:74
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ipaQND5DU0WHQhkc86D6Ttc0o3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:0d:ae:10:0b:65:07:68:4c:d8:0f:d3:85:09:a5:c8:1f:e9:
b8:3b:cd:c8:72:df:ac:fc:4d:52:f7:13:ad:c9:ce:c5:74:21:
80:53:be:2c:d9:07:76:55:2e:67:cb:8a:f7:9b:7d:ae:18:5f:
53:9e:99:80:37:14:01:13:c7:b3:4b:e9:9e:31:7d:b0:0e:f9:
01:b4:1d:ea:d7:f9:6f:e3:09:2c:b6:39:e2:17:ac:ad:fe:e9:
2d:72:4e:46:e6:d6:2e:8c:be:4e:c1:ea:aa:10:60:54:7d:b6:
6e:61:17:84:3d:1a:52:c0:ed:1a:6e:48:7b:47:b9:66:13:54:
ae:d8:54:4f:8d:7f:5a:af:ad:8a:5d:f0:97:8c:ae:d1:1b:48:
3e:8a:2d:62:30:67:75:c3:a7:03:df:c8:bb:ae:af:4c:f5:d3:
6a:de:7b:de:44:1d:c0:e1:7f:09:96:7b:4e:91:3c:87:f0:1c:
50:7e:9b:4c:79:bb:38:67:cf:cb:6b:1b:8f:0b:de:03:f3:69:
a9:1d:5a:d4:27:91:eb:91:01:c1:6a:2b:d0:01:67:a9:59:6e:
59:5d:0e:f2:87:24:14:92:1c:42:9e:11:14:c8:e9:c4:02:c8:
f8:ba:92:d3:1f:4f:d5:ed:b4:b6:be:4a:d4:d2:e3:80:b5:a5:
70:49:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:32:07 2025 by rpki-client