Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/sMbX0Ti56h2RcO5mdUe8x56cyrQ.roa
File: sMbX0Ti56h2RcO5mdUe8x56cyrQ.roa (raw, json)
Hash identifier: tZYmdEULM/ok6lOTxkzQyNDKAp+0uyR2WDLu9e6k/B0=
Subject key identifier: B0:C6:D7:D1:38:B9:EA:1D:91:70:EE:66:75:47:BC:C7:9E:9C:CA:B4
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 018CC9BCDC139BD7F4E37480E44491E68679
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/sMbX0Ti56h2RcO5mdUe8x56cyrQ.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50809
IP address blocks: 109.226.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 05:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:dc:13:9b:d7:f4:e3:74:80:e4:44:91:e6:86:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0c6d7d138b9ea1d9170ee667547bcc79e9ccab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:7d:62:26:f6:34:3a:ab:7d:64:2e:e6:82:
2c:f1:b9:b1:8a:90:49:da:de:cd:d6:7c:4c:55:31:
de:f0:e0:ba:96:8f:fb:01:b9:b4:18:4b:14:d0:7e:
2c:f5:5b:9f:01:60:3d:f7:5a:2f:ae:89:c8:a3:b5:
bb:67:ea:78:ff:4b:6a:d8:37:4b:55:7c:de:35:17:
c2:f9:e1:99:f3:14:53:d2:2c:3c:b2:36:7f:ab:bf:
d8:97:a7:55:5e:55:76:ab:e9:77:20:cc:26:45:86:
89:99:95:3e:a0:11:51:49:fb:37:f8:8e:f3:85:b7:
60:5c:a6:6f:81:f6:09:e9:70:e5:62:ac:cb:71:ac:
5b:3a:2c:80:a6:88:ab:18:38:e6:4a:0c:cf:70:56:
73:20:4e:66:b0:0d:1f:a4:da:4c:86:9b:61:59:9e:
a8:f0:d9:ca:15:cd:b4:79:b1:ce:4b:16:ba:f6:a1:
6a:ff:05:6b:f7:21:a7:b5:de:a6:b8:8f:b5:10:51:
2d:ac:7b:59:71:f0:9b:19:37:e8:ba:ed:3a:1f:8d:
ee:38:fe:09:1d:3b:8a:0f:5b:ce:96:c4:c1:14:74:
be:9e:2f:e9:a6:53:6e:22:ec:92:61:1b:38:c3:ff:
b9:18:09:5d:73:f7:66:ad:fc:dd:61:d4:f7:a0:29:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C6:D7:D1:38:B9:EA:1D:91:70:EE:66:75:47:BC:C7:9E:9C:CA:B4
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/sMbX0Ti56h2RcO5mdUe8x56cyrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.226.249.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:14:54:92:bc:a0:73:26:ec:32:d5:80:ba:fc:1b:48:47:b1:
27:36:b0:c4:59:5b:b3:18:b8:c7:f5:93:46:a7:9f:cb:d7:a8:
fb:a4:6b:d8:38:b1:81:af:02:fd:e0:81:f8:bc:c1:06:62:31:
48:16:ff:43:5c:74:72:41:35:1d:16:bd:6c:c9:c9:ff:9b:1c:
3e:f6:47:f1:d3:0c:5b:96:94:86:8b:fc:cc:4c:a2:29:2c:72:
e6:e7:d5:38:26:06:14:a6:a7:65:e3:bb:7e:73:d9:9d:ae:41:
b2:47:af:05:35:a9:c7:83:90:61:3b:35:86:0a:62:e6:be:39:
4a:10:67:39:aa:66:3c:e8:a7:7f:d8:f0:06:98:43:d1:8e:f6:
f0:5a:63:4e:e3:21:73:8b:da:53:7d:49:d1:1f:1a:ca:0b:da:
ab:f5:6e:be:28:af:d5:0c:f7:76:17:f8:6a:91:7f:8c:90:3e:
ad:12:2a:c7:84:14:da:1e:81:bb:7e:a6:27:07:92:22:5a:d1:
07:88:3e:a7:ff:74:a9:89:9f:4d:f5:82:44:c1:3c:73:ff:95:
f2:25:56:58:ac:0d:58:b6:05:5e:f3:63:86:1b:85:1c:3c:c8:
d1:49:30:42:23:3d:cf:cc:55:0b:e3:93:3a:19:bf:0d:07:cb:
b4:eb:73:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:18 2024 by rpki-client on console-ams.rpki-client.org