Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/XqC-74qhYCFwqgCT_eTQGpO76Vw.roa
File: XqC-74qhYCFwqgCT_eTQGpO76Vw.roa (raw, json)
Hash identifier: rHnE7to+irOrXi6/D5cIa5FdHeDpxr8d2n3ZGT5a8Ms=
Subject key identifier: 5E:A0:BE:EF:8A:A1:60:21:70:AA:00:93:FD:E4:D0:1A:93:BB:E9:5C
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 01933EE22DBCFAD0B295D1FEE6DD80489BA0
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/XqC-74qhYCFwqgCT_eTQGpO76Vw.roa
Signing time: Mon 18 Nov 2024 10:47:10 +0000
ROA not before: Mon 18 Nov 2024 10:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60980
IP address blocks: 109.226.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:e2:2d:bc:fa:d0:b2:95:d1:fe:e6:dd:80:48:9b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Nov 18 10:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ea0beef8aa1602170aa0093fde4d01a93bbe95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:38:ef:29:81:5a:da:2b:9e:2f:c0:0f:ba:
4d:bd:0e:d0:92:aa:99:da:0b:2d:11:bd:d2:06:4e:
2e:f1:0a:ca:18:13:68:f3:28:60:13:ab:cc:22:bd:
eb:27:9e:61:a9:4f:71:b8:08:77:91:52:aa:ac:98:
a9:bf:48:25:8c:e9:2e:5f:2d:2a:38:82:25:86:a0:
ad:5f:e8:35:e2:f7:76:d1:17:45:a3:fa:bc:58:2b:
2b:38:6a:d0:20:62:5a:e9:aa:79:01:56:7b:36:32:
2d:4a:29:9b:cc:05:de:4b:1f:3e:a8:8c:ec:04:31:
7c:36:f1:5b:e6:b7:db:60:4d:42:17:89:58:2b:9b:
23:fe:39:3b:0a:c8:78:ab:0d:5a:82:94:ba:e7:a0:
6b:32:69:cd:70:31:f4:1f:db:6b:68:bb:1b:ea:51:
73:df:b4:d9:6e:a3:bb:97:a7:55:58:ce:9c:ae:36:
c9:0d:ed:65:68:08:36:8c:ac:63:d2:51:76:4c:49:
c7:bc:c6:3c:b6:83:ee:91:21:96:b4:52:84:8d:d9:
8a:72:47:37:d1:2b:06:24:4c:7e:07:30:76:ed:f2:
c3:c0:c2:e6:ab:ac:a0:ed:ee:ba:20:f2:f3:97:2b:
76:84:70:ff:e5:a6:f6:fd:18:7c:2a:76:3b:b4:93:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A0:BE:EF:8A:A1:60:21:70:AA:00:93:FD:E4:D0:1A:93:BB:E9:5C
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/XqC-74qhYCFwqgCT_eTQGpO76Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.226.247.0/24
Signature Algorithm: sha256WithRSAEncryption
00:6c:8d:66:35:e3:db:af:a2:86:6a:b4:91:d2:e5:44:42:e8:
ac:6d:d5:af:9d:79:4e:c1:00:78:44:ab:93:52:e1:af:ff:3f:
88:c9:39:ac:48:04:b4:35:61:68:ff:79:26:5a:77:48:5b:95:
5a:c3:bf:4d:41:7d:7e:63:cf:6e:32:41:ec:be:29:19:b7:c7:
16:2a:04:31:c9:28:e5:47:65:bd:41:6a:16:99:c1:5b:ee:5d:
bc:ee:1f:c5:c5:5b:37:8e:25:76:fe:f2:5f:90:18:e7:f7:67:
36:90:41:a5:50:3c:23:b5:49:ec:b2:fa:18:f4:f0:85:c0:d8:
39:1e:a2:4d:c8:0f:d4:09:cb:f9:be:ba:49:0a:cb:58:21:05:
26:7d:1a:d2:5c:f7:c0:e3:9b:61:ef:1f:7a:7a:60:82:64:d0:
d9:b1:78:7c:91:df:79:f2:7a:ad:54:93:5f:99:68:17:19:11:
9c:7c:85:7d:fc:1f:7b:13:d5:49:1a:51:39:54:5c:f6:b9:5c:
ce:72:70:e1:60:f8:e6:dd:4b:44:46:04:63:60:cf:ff:3d:ec:
6f:b8:d6:0f:c9:5d:e2:f4:5b:d1:3d:51:d3:81:54:7f:3c:e7:
63:f9:7e:20:34:b5:82:07:0f:74:73:2d:19:d0:b5:66:b1:ec:
ad:8f:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:39 2025 by rpki-client