Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Tm9l6So7v6oPXKzVtPwyEke_Iwg.roa
File: Tm9l6So7v6oPXKzVtPwyEke_Iwg.roa (raw, json)
Hash identifier: d3RcXQDxitK5MCYG5O5AOqYzb7ZIYR8IwjKYN6XMwS8=
Subject key identifier: 4E:6F:65:E9:2A:3B:BF:AA:0F:5C:AC:D5:B4:FC:32:12:47:BF:23:08
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0193F8C5AE86B51845E990E4CEE9A4F35EE8
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Tm9l6So7v6oPXKzVtPwyEke_Iwg.roa
Signing time: Tue 24 Dec 2024 13:05:25 +0000
ROA not before: Tue 24 Dec 2024 13:05:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201211
IP address blocks: 109.196.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:c5:ae:86:b5:18:45:e9:90:e4:ce:e9:a4:f3:5e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Dec 24 13:05:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e6f65e92a3bbfaa0f5cacd5b4fc321247bf2308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2e:4c:bd:43:1e:68:92:04:bc:42:ed:31:79:
af:ae:3f:13:fa:d2:fe:09:35:7f:d3:34:8e:46:32:
a4:7e:d4:e9:ad:da:86:c7:62:01:94:3e:07:22:27:
3d:03:06:31:2a:75:9f:15:25:1d:e4:a9:0b:c4:e0:
4f:ac:08:7c:3d:f4:90:79:1f:6c:65:e6:8e:9b:6f:
02:c1:f6:9a:3f:6d:d4:ec:bf:6d:58:17:a8:a9:93:
2e:7f:71:ed:7d:f9:fd:27:48:32:13:ed:74:e6:d7:
52:73:d1:59:a5:f9:da:68:95:6c:4e:e0:00:7f:96:
b3:3c:e7:96:20:23:d5:05:89:77:53:15:a4:0b:0e:
4c:3b:b2:41:75:41:9e:cb:9c:6d:12:a5:5f:cc:18:
12:5e:bf:54:81:c7:64:f6:ec:17:7e:19:ce:11:40:
ad:b3:16:a9:a1:65:16:a3:ae:4a:0c:08:10:88:83:
22:e7:98:b1:ae:63:c0:f7:a8:c6:32:3a:aa:a5:1f:
18:75:4f:bb:48:46:48:68:65:a4:7d:86:21:2e:a5:
00:1b:3f:ba:9b:c0:5c:4f:dc:3c:6c:74:91:c0:79:
25:c2:8e:d8:ae:2d:27:c0:74:42:84:7d:18:9e:dd:
98:db:18:68:5c:35:f4:4b:e6:c0:c6:a8:18:14:a9:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:65:E9:2A:3B:BF:AA:0F:5C:AC:D5:B4:FC:32:12:47:BF:23:08
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Tm9l6So7v6oPXKzVtPwyEke_Iwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.167.0/24
Signature Algorithm: sha256WithRSAEncryption
14:57:e3:f6:ed:1b:4e:23:6b:b3:b2:19:c6:47:74:71:13:4f:
57:63:22:cb:f8:2d:3e:54:e9:6d:b1:ed:3a:71:1f:38:74:dc:
13:f7:d7:a5:50:b1:ea:85:26:8f:88:a1:71:a4:0f:5e:d1:7f:
ab:86:cd:95:8b:f2:83:e0:c6:6e:c3:b0:4f:80:88:aa:4b:44:
7d:b4:c7:09:26:57:06:94:96:79:0f:1c:b3:52:fe:f9:fd:f3:
55:d9:81:c2:6b:e6:9c:4a:2e:b7:bd:66:4b:3e:31:25:a1:fc:
9f:e1:71:ee:d7:e3:09:f5:6d:85:6c:d6:d7:ec:c0:f1:6b:32:
27:f6:d7:ab:40:ab:7a:e4:31:6e:32:d3:2c:4b:1a:c2:e3:72:
ad:8d:8a:36:c8:03:c1:5c:fe:2a:d3:f0:1b:38:dd:42:10:e8:
a4:c9:a5:b3:c7:a4:1b:1f:1a:40:78:d8:19:00:d8:0a:b5:9f:
53:58:8f:bc:d7:33:79:62:33:03:bc:78:aa:56:5e:b7:e5:41:
f8:ac:fc:39:62:d9:d5:a0:6d:ba:df:3f:b2:76:25:df:69:12:
f4:de:42:a0:f6:b0:7b:4f:a6:ae:97:40:58:c0:d9:c9:30:c6:
ba:e3:56:fb:d2:52:53:22:f0:9d:81:92:8b:b5:4c:c9:85:8e:
c1:a3:7b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:44 2025 by rpki-client