Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/o39Cq8_oAQO5gqU7rK2xjMF_r7U.roa
File: o39Cq8_oAQO5gqU7rK2xjMF_r7U.roa (raw, json)
Hash identifier: d9nX2j055OCdcxBmB0gD65eu8MZUgDU4+WRnHRENaDs=
Subject key identifier: A3:7F:42:AB:CF:E8:01:03:B9:82:A5:3B:AC:AD:B1:8C:C1:7F:AF:B5
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 018FF0EB5CFF0C135E31E7493C42605BB145
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/o39Cq8_oAQO5gqU7rK2xjMF_r7U.roa
Signing time: Fri 07 Jun 2024 04:18:27 +0000
ROA not before: Fri 07 Jun 2024 04:18:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 192.109.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jun 2024 20:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f0:eb:5c:ff:0c:13:5e:31:e7:49:3c:42:60:5b:b1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Jun 7 04:18:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a37f42abcfe80103b982a53bacadb18cc17fafb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:04:22:ad:3c:9e:da:a6:f0:73:81:fa:c3:
8e:3f:c5:8e:81:28:44:7c:9b:29:be:d2:54:40:dd:
3c:1a:b0:01:99:fe:35:31:bb:78:3d:2f:27:c3:39:
c5:89:0c:3c:7f:4d:28:6b:01:e6:21:1e:3b:08:e7:
6b:20:e7:1c:f8:cb:30:46:56:7f:1a:d1:82:31:66:
56:00:19:50:ac:c9:ac:1c:ff:9f:03:80:bb:d6:30:
5d:13:84:2e:81:86:b2:d2:5e:e1:dd:d7:d5:ee:39:
4b:4d:c2:f7:de:19:02:d6:be:85:23:7f:25:7b:d8:
7b:d5:11:6d:7d:2c:d8:1a:bd:40:14:1b:45:a1:b9:
ed:e5:9f:76:e3:ae:ac:bd:94:c0:c7:a6:bd:98:6b:
b5:57:ee:bd:31:72:28:4a:49:18:cd:96:61:67:f2:
3d:73:12:fd:96:48:1d:37:c6:90:1e:4f:60:71:2a:
33:58:36:fe:cd:55:f3:e7:03:2e:a5:fb:ee:a5:32:
53:ec:25:f9:f2:f5:a8:98:9b:53:d8:f4:2f:bf:96:
05:8d:b7:15:e5:79:66:9e:90:33:55:00:7e:8b:cb:
4d:8a:cf:73:b4:e4:82:cd:68:2d:62:a0:97:9c:15:
05:2b:d9:70:e3:23:fa:a6:29:21:b0:4b:f6:c5:a7:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7F:42:AB:CF:E8:01:03:B9:82:A5:3B:AC:AD:B1:8C:C1:7F:AF:B5
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/o39Cq8_oAQO5gqU7rK2xjMF_r7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
62:41:b2:6a:de:57:fc:e6:dc:a5:17:aa:17:13:98:28:53:a5:
c3:5c:cc:94:94:07:b5:31:3d:e7:dc:50:14:3e:9d:94:5a:e7:
c9:7e:82:99:27:f9:fc:88:4a:3f:f5:b3:39:32:d6:82:09:6c:
41:cd:9f:65:00:75:7a:97:ea:8a:a1:40:3c:13:00:22:0a:cb:
e1:8f:d5:d3:ab:5f:a1:bb:dd:12:ff:7f:94:24:cd:68:e5:4c:
5a:a1:2d:10:0a:e9:e9:c7:f5:d8:1b:d3:52:e9:2c:50:e4:ac:
be:a4:75:ad:e7:ca:fc:b3:16:e0:8b:39:7e:84:04:24:6c:47:
1e:a7:61:13:18:61:bd:f0:57:83:b3:b4:73:47:3d:9a:62:a0:
75:d3:99:cd:56:bd:a1:4b:5d:bf:0e:34:08:21:e9:d3:2e:d0:
59:24:3b:63:71:00:d6:85:d9:27:2b:e4:29:fd:4d:b4:65:48:
9f:f4:f7:b7:8d:63:11:c7:3f:33:5b:63:a8:dd:5b:22:3b:31:
4a:53:0f:70:65:a6:c9:98:66:17:14:d8:7b:34:03:df:45:00:
0d:ad:04:0c:e2:a8:53:f0:bf:a7:9f:1d:d9:fb:e7:d1:ff:38:
27:60:8f:15:98:fe:ae:fa:be:70:fd:f7:13:c2:60:8b:62:6a:
7f:55:4a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 21:10:10 2024 by rpki-client on console-fra.rpki-client.org