Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/s3wJlz3WKkDe0YJ1BIl3OwoYPl0.roa
File: s3wJlz3WKkDe0YJ1BIl3OwoYPl0.roa (raw, json)
Hash identifier: NIUOTOSJ+n8mHE/4DF2+gAdpTvjoEQ2Eg7r5o3Uv10c=
Subject key identifier: B3:7C:09:97:3D:D6:2A:40:DE:D1:82:75:04:89:77:3B:0A:18:3E:5D
Certificate issuer: /CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Certificate serial: 018570CBF054DBBF7840706E97EB75F219D6
Authority key identifier: 90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/s3wJlz3WKkDe0YJ1BIl3OwoYPl0.roa
Signing time: Mon 02 Jan 2023 04:44:51 +0000
ROA not before: Mon 02 Jan 2023 04:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 109.68.216.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:f0:54:db:bf:78:40:70:6e:97:eb:75:f2:19:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Validity
Not Before: Jan 2 04:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b37c09973dd62a40ded182750489773b0a183e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2f:8b:34:c7:51:ff:06:a0:71:6a:65:4c:be:
1a:59:9f:1d:91:8f:c9:a4:a6:fd:20:e6:e1:c8:ab:
03:a9:1c:dc:ac:d6:6a:95:01:8d:18:e7:34:c1:90:
25:8d:58:e7:e1:c6:f3:2e:ac:26:8a:d7:88:6f:2f:
ab:7e:34:00:80:b0:e9:3b:b7:1b:f6:85:f4:2d:be:
1d:8c:f0:3a:f3:83:3e:77:89:eb:a3:5f:97:c3:ac:
29:79:3e:d0:3d:4b:6a:3e:45:59:32:96:22:a4:10:
a5:69:e3:18:9d:ea:2a:5b:53:0a:57:4d:3e:ec:7f:
2d:20:51:75:29:05:fa:7c:87:4f:87:cc:c7:bf:ee:
02:d7:e6:53:db:a7:c8:5e:d0:08:36:e3:c0:6f:2d:
65:43:57:59:b0:6b:2d:22:c9:e0:a7:19:86:b0:8f:
35:90:2d:b2:b2:72:77:eb:09:b3:50:27:d0:4d:62:
9a:f5:e3:17:bd:44:0d:d0:63:b4:6e:ab:ef:4f:5b:
b0:30:62:30:e1:c4:33:36:66:ed:df:e0:90:d2:6b:
8c:71:91:92:84:69:47:58:67:be:59:e4:36:4b:36:
26:a0:21:51:3f:61:62:e9:98:32:41:b8:cd:0b:48:
61:76:32:45:1c:75:09:3c:7a:ba:e2:05:7b:15:ff:
04:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7C:09:97:3D:D6:2A:40:DE:D1:82:75:04:89:77:3B:0A:18:3E:5D
X509v3 Authority Key Identifier:
keyid:90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/s3wJlz3WKkDe0YJ1BIl3OwoYPl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.216.0/21
Signature Algorithm: sha256WithRSAEncryption
43:2c:a3:d3:d8:ba:c7:ea:21:05:6e:97:f5:82:38:29:ab:79:
a1:41:7a:f4:20:f3:d0:c5:1f:11:ae:df:6f:f1:a2:7d:99:cb:
c1:ac:b5:2a:22:d7:f8:0a:3c:ee:47:d4:58:46:e2:de:e8:c8:
1e:70:f0:c5:22:53:ba:ea:a8:ce:93:79:23:ee:1e:f9:0b:f3:
d7:70:20:d9:d4:50:9a:6b:87:34:be:26:00:12:c1:e8:ec:a2:
ea:d6:4a:b3:c6:dc:18:fa:21:b6:85:0d:f9:11:5d:2c:86:14:
c6:14:b1:2b:7a:ad:49:a5:94:64:4c:73:bc:9d:ac:4f:fb:11:
f1:39:76:fc:cd:eb:b4:2d:3a:4b:33:2a:9b:47:85:ad:24:b9:
a4:77:d1:d8:9a:50:8a:b9:3b:f5:18:fe:ec:3e:61:7b:d1:2d:
41:c9:dd:50:b4:d2:ce:14:8f:bb:86:64:66:0c:6c:23:a2:4e:
48:94:97:1b:ff:88:1c:ee:a6:68:89:50:f7:31:6f:73:cf:dd:
91:60:2d:d9:df:97:25:50:fd:9f:81:bd:51:3d:0f:69:49:d9:
40:97:c9:02:78:1d:6c:56:5a:cc:49:4e:94:2e:06:64:ea:9e:
ff:ad:6d:a5:27:c8:e8:be:53:ac:e7:04:7f:31:b0:95:dd:a8:
36:82:f7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org