Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/z4rAJeb3RLXNcUmb2a0B9_aIPTA.roa
File: z4rAJeb3RLXNcUmb2a0B9_aIPTA.roa (raw, json)
Hash identifier: Vzi+xZEpijH461vHJtlnIvrpGXFS1RDYx50ntk32IfI=
Subject key identifier: CF:8A:C0:25:E6:F7:44:B5:CD:71:49:9B:D9:AD:01:F7:F6:88:3D:30
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 01856F5DD76F9E0A0B24BA2A3794D109F241
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/z4rAJeb3RLXNcUmb2a0B9_aIPTA.roa
Signing time: Sun 01 Jan 2023 22:04:59 +0000
ROA not before: Sun 01 Jan 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50975
IP address blocks: 109.75.0.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d7:6f:9e:0a:0b:24:ba:2a:37:94:d1:09:f2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Jan 1 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf8ac025e6f744b5cd71499bd9ad01f7f6883d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:6b:ab:40:76:9d:16:9c:cb:55:38:2f:99:
b3:21:2f:71:28:f7:4a:f5:3f:3c:9c:32:b4:ec:69:
61:17:c6:cd:57:5e:dc:da:af:47:6b:0a:46:68:53:
14:5a:23:70:d2:b2:05:78:aa:3b:4d:32:df:ae:7f:
0a:b2:69:1d:76:8b:64:10:4d:d3:d8:67:0d:f8:a1:
df:a7:df:be:fa:f0:2b:19:f6:6b:c7:33:e5:f4:64:
44:61:fd:90:97:5e:07:e7:ab:0f:7b:b2:8f:e8:51:
7e:0f:27:ba:09:ae:70:f6:ad:bc:e2:5a:30:eb:92:
f4:51:3f:32:b2:52:6d:39:b5:48:86:dc:e7:cb:e2:
04:46:43:e9:03:ed:c5:53:22:85:22:fa:7e:b2:df:
c3:b3:28:5b:ff:5c:9f:e1:45:cc:df:59:7b:cd:f6:
b2:57:2e:4f:e9:a4:22:4d:e6:2e:74:53:38:09:d0:
64:95:62:a4:54:56:25:7b:e3:c1:03:98:41:f3:01:
32:9d:ae:a5:60:33:a1:43:91:ad:6a:69:48:f4:bf:
98:44:cf:4a:9f:d9:c0:24:01:3d:40:f0:bc:0a:0a:
f9:f6:02:06:61:7c:36:c2:30:5e:dc:5a:07:e4:a4:
d2:49:f7:25:89:22:76:1d:89:3c:99:53:56:34:8c:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8A:C0:25:E6:F7:44:B5:CD:71:49:9B:D9:AD:01:F7:F6:88:3D:30
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/z4rAJeb3RLXNcUmb2a0B9_aIPTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.75.0.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:4f:63:17:cf:25:39:41:2b:46:be:bb:75:dc:13:9b:5c:7e:
a5:f2:44:0b:d6:9c:1f:1c:dc:db:45:a1:b8:04:69:1e:df:be:
4a:ff:de:2a:90:cc:04:3c:89:04:f8:04:e6:22:d9:c0:75:51:
12:7d:94:8c:7a:77:e1:8d:8f:7e:7a:94:cf:69:7f:5d:e2:8f:
a4:17:58:ba:2e:b6:f6:d7:95:20:44:b1:ad:6b:e1:6d:29:3f:
20:4f:01:d5:88:52:6b:35:a6:53:99:ff:fd:ca:cc:d8:fb:fc:
1d:e6:36:47:66:c2:0a:fb:7d:0f:d3:0b:5f:58:c0:e3:98:9e:
f1:0e:85:f2:d5:51:85:ee:ec:e4:26:5e:a7:3c:49:dd:13:3b:
f7:0a:a1:3e:ac:51:25:a8:0a:6e:8f:62:8d:05:1a:73:15:ce:
be:15:e7:b9:cf:46:6b:a5:bc:61:98:df:e0:da:94:6b:15:ee:
06:9c:fc:5e:6c:10:67:b9:7e:b9:ab:11:15:d2:78:15:3f:0d:
61:da:63:d8:e6:7d:31:f5:f9:be:fa:d2:d1:73:97:52:6e:cd:
db:29:5f:3e:94:bc:84:99:dd:9f:d9:26:0e:8b:11:a1:8c:d5:
80:09:19:12:fc:49:45:da:64:75:f9:52:2f:7a:94:64:9f:2e:
83:43:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:58 2024 by rpki-client on console-fra.rpki-client.org