Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jC_1Fq286oQHWZRCdKoYUKhfOQQ.roa
File: jC_1Fq286oQHWZRCdKoYUKhfOQQ.roa (raw, json)
Hash identifier: fm0FRHoDJFYz45SD4M0MG+3sXTxr/RUvQApf+ZMBwBg=
Subject key identifier: 8C:2F:F5:16:AD:BC:EA:84:07:59:94:42:74:AA:18:50:A8:5F:39:04
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01899831CBEE32F5E34F41476500CC2BD06A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jC_1Fq286oQHWZRCdKoYUKhfOQQ.roa
Signing time: Thu 27 Jul 2023 16:32:27 +0000
ROA not before: Thu 27 Jul 2023 16:32:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197644
IP address blocks: 109.176.215.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 16:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:31:cb:ee:32:f5:e3:4f:41:47:65:00:cc:2b:d0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 27 16:32:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c2ff516adbcea840759944274aa1850a85f3904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:44:e5:e3:73:56:6a:6e:3b:c2:df:51:e1:a4:
bd:29:0e:4c:cc:52:fe:cf:ba:7a:fa:11:ee:61:20:
a4:d9:53:1b:40:0f:91:7a:26:b8:92:82:05:fa:26:
dd:6b:0a:79:a0:e1:cf:01:b8:2d:c3:38:8b:72:07:
d8:46:be:1a:71:ee:72:bb:45:b1:95:35:f6:0e:81:
d7:4e:54:ec:ed:c3:df:39:93:23:6e:86:9b:b9:9d:
da:41:d4:65:f2:7c:6f:15:05:6d:7c:18:8b:62:0d:
21:02:75:f1:59:e2:f6:43:54:f9:ae:94:38:75:a5:
64:4d:1c:81:1f:44:df:4f:d6:98:47:43:af:0f:01:
59:df:b9:7e:d4:d8:dd:a0:e4:0a:44:2c:26:d7:4b:
42:d7:e4:2d:9b:fc:6c:1a:23:b6:ed:3b:d2:c7:8c:
cc:97:04:87:31:69:cd:2c:ab:1d:bf:38:4b:50:f4:
90:c0:80:41:1a:4a:fa:48:2c:6c:6d:e9:8d:2e:f5:
a5:2d:0a:e0:1e:55:ce:bd:eb:2b:4d:fa:ed:77:39:
60:f8:9b:f2:41:23:3a:e9:c1:6b:0c:e7:86:19:37:
de:72:c1:f1:45:21:bf:9f:a8:b4:a3:76:01:47:ea:
ed:b6:9f:5f:1a:d5:8d:3f:76:23:5f:69:55:11:b9:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:F5:16:AD:BC:EA:84:07:59:94:42:74:AA:18:50:A8:5F:39:04
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jC_1Fq286oQHWZRCdKoYUKhfOQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.215.0-109.176.216.255
109.176.218.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ad:76:98:cc:b4:05:00:7a:f7:a6:43:81:c1:20:63:a7:e1:
db:9a:f2:fa:b9:a3:f8:bd:10:ad:14:bc:d3:0c:04:70:cd:af:
53:29:61:95:b7:22:6f:4a:ec:30:48:5d:45:55:93:4f:e3:8d:
0d:23:ef:f6:7d:ba:c8:11:60:76:14:30:2b:a3:cf:e9:c1:94:
4a:cf:e9:b6:cb:2d:6c:24:49:d3:d8:82:b1:69:bc:b0:af:3e:
0d:23:7c:dc:c0:dc:18:79:77:43:dc:66:87:bd:76:88:c1:67:
ee:96:4a:99:72:01:cb:46:9d:96:8f:3b:89:ac:30:ce:32:52:
71:69:9d:58:d1:00:14:56:5e:e7:c8:55:36:c1:af:3a:16:d4:
18:ce:85:21:04:76:6b:40:5b:6f:6f:66:fb:00:61:f6:3e:a8:
73:f9:b4:72:b8:ec:b8:58:e4:97:f1:78:bf:94:47:40:a7:b8:
f1:bc:1e:6a:81:9b:73:67:6d:70:a1:3a:d3:81:9f:26:57:fd:
75:c1:95:85:e9:f1:26:d6:0d:03:11:a1:34:08:d9:17:14:10:
1f:87:25:ef:e8:b4:85:34:47:b2:1f:ca:d2:ad:67:d9:64:6b:
ba:f4:c1:e4:21:cb:6b:c8:73:fa:5c:d8:f1:20:dd:50:7e:8b:
be:7a:7a:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org