Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/B8IN6FNZ9tEICYtbhad7vnAUom0.roa
File: B8IN6FNZ9tEICYtbhad7vnAUom0.roa (raw, json)
Hash identifier: o1+iIGdf5CqQOc1e8enWW7w02qiajAcNKo4SwA6+1WI=
Subject key identifier: 07:C2:0D:E8:53:59:F6:D1:08:09:8B:5B:85:A7:7B:BE:70:14:A2:6D
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 018962BCDA1F2BC571D83DD691B027FFD084
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/B8IN6FNZ9tEICYtbhad7vnAUom0.roa
Signing time: Mon 17 Jul 2023 07:24:50 +0000
ROA not before: Mon 17 Jul 2023 07:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204203
IP address blocks: 109.162.249.0/24 maxlen: 24
109.162.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:bc:da:1f:2b:c5:71:d8:3d:d6:91:b0:27:ff:d0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jul 17 07:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07c20de85359f6d108098b5b85a77bbe7014a26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:2a:a8:e7:ea:02:05:cb:fd:37:34:31:b9:
1a:63:70:52:36:fb:00:da:d8:f3:d5:83:6f:e6:87:
4f:1a:1f:0c:b2:85:c4:b3:0d:c6:f7:c2:84:73:5f:
3d:dc:f1:63:b9:68:58:a5:05:d5:0c:1c:2b:b9:5a:
9f:f6:8f:df:76:52:0a:5f:c6:56:7b:37:19:28:06:
0f:3d:2c:5d:ec:6c:10:e0:03:83:ad:50:d2:f0:15:
92:ef:dd:02:00:7d:2e:02:7b:22:3b:4d:5a:60:b2:
4b:90:3c:18:f1:8c:0c:7a:86:65:8b:46:b0:1e:20:
ee:4d:d5:84:87:c8:de:80:5f:1b:22:cb:14:4f:6c:
fc:8b:9f:ea:42:8d:7e:69:f2:f5:aa:28:11:06:6e:
67:79:2f:4b:cc:1b:aa:1c:4e:cb:30:a7:19:f9:0c:
25:be:eb:a1:d7:44:4f:71:57:e9:8e:ec:c3:10:f0:
0f:74:df:22:f6:fd:a6:66:71:fc:47:e5:57:0d:df:
72:73:f4:df:73:03:06:56:4b:65:f1:eb:29:9c:1b:
a5:9c:8d:43:6d:09:a5:54:7e:d6:1d:de:60:2c:b0:
c7:b8:f8:33:35:78:bf:d3:eb:70:8c:c8:93:f8:d6:
03:2e:1d:eb:65:ba:48:c2:0e:ea:b5:82:a1:db:85:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C2:0D:E8:53:59:F6:D1:08:09:8B:5B:85:A7:7B:BE:70:14:A2:6D
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/B8IN6FNZ9tEICYtbhad7vnAUom0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.162.248.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:1b:f5:77:1c:f8:30:a4:72:e3:78:64:ff:fe:52:6f:f0:45:
dd:a4:7d:86:04:a1:30:50:12:04:21:c7:5b:ba:01:62:43:63:
36:a5:a5:b8:65:45:01:95:68:7b:a6:6d:b7:80:d1:8b:99:ee:
ca:4f:59:96:9e:f1:03:15:27:a5:64:5e:fa:72:ba:c3:0a:09:
42:ac:1b:29:60:c2:3e:c7:ca:65:ad:75:6a:33:4b:4b:a4:75:
f6:b3:28:5e:2b:5c:e1:c2:17:e4:cd:48:f1:75:8a:f0:41:80:
85:d2:43:58:64:b4:3b:c9:e5:8b:e7:8a:b5:b4:2c:72:f6:77:
cd:5d:db:13:9d:55:ca:ef:4b:db:ce:db:70:e5:56:80:62:50:
d5:70:ca:e4:77:43:f1:fc:48:67:ba:67:66:60:27:0d:2a:9e:
1f:91:56:64:79:54:17:96:4a:e8:49:20:b8:d2:55:a6:cb:13:
6d:1f:99:1a:1b:7c:d9:1d:78:6c:25:99:fc:4b:54:a8:72:75:
2f:d5:a0:67:7f:79:7b:0c:9a:e3:bb:0e:a6:a9:b1:db:e3:3c:
db:6f:93:db:a9:6d:36:78:2e:a3:b4:34:bd:5b:9e:7d:71:f4:
08:1e:b8:07:dd:db:fd:ea:70:33:5e:6b:ce:ab:bd:d0:8b:27:
a2:a6:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:21 2024 by rpki-client on console-fra.rpki-client.org