Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/Jy9pLScgw8xqlWcCVqGB6ionR-0.roa
File: Jy9pLScgw8xqlWcCVqGB6ionR-0.roa (raw, json)
Hash identifier: MGfaofWcToDJBfzQODCyqDIOSUHwubO7febTMpy3Kg8=
Subject key identifier: 27:2F:69:2D:27:20:C3:CC:6A:95:67:02:56:A1:81:EA:2A:27:47:ED
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 018CC26D01A5372E6A64172B3B8A5D3583B5
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/Jy9pLScgw8xqlWcCVqGB6ionR-0.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59441
IP address blocks: 109.95.65.0/24 maxlen: 24
109.95.66.0/24 maxlen: 24
109.95.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Jun 2024 13:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:01:a5:37:2e:6a:64:17:2b:3b:8a:5d:35:83:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=272f692d2720c3cc6a95670256a181ea2a2747ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:3b:d0:76:be:e8:5e:15:69:74:e3:ab:fc:
15:8f:85:e8:45:82:65:06:32:02:45:57:81:fa:7a:
c7:56:9c:bd:7e:64:b7:59:76:2c:cb:df:f1:a2:e1:
03:a1:75:57:f2:77:3d:7d:c2:ed:d2:4d:fb:35:38:
d0:f4:84:b3:0b:5a:72:3e:f5:39:a3:57:d6:e5:1b:
88:87:84:90:a7:3a:7d:e6:66:71:3e:c0:c6:80:8d:
6c:83:6e:5b:76:17:3e:65:73:8b:49:95:e7:76:f9:
11:14:9d:f7:e9:37:e6:48:4d:cb:96:7b:4a:ad:af:
53:de:2e:15:6c:66:5a:a2:c6:bc:e5:f0:83:a4:1b:
29:69:c1:f3:59:b9:f5:c7:5f:63:49:4f:28:7f:5a:
17:a6:0b:21:a3:a3:e7:a5:fb:e5:25:99:13:e6:8e:
47:3e:3e:85:3e:6f:f5:09:15:d8:54:82:af:f0:f4:
79:5c:2a:fd:a6:7c:9a:c3:2c:a0:db:9e:40:48:dd:
49:13:13:61:27:49:7c:67:16:57:5e:11:db:54:d8:
d2:71:e7:17:35:d2:01:57:e8:cc:50:b3:56:f5:52:
15:a8:91:f4:4f:f6:9b:2e:f2:9d:d8:12:5b:9c:28:
40:25:9e:49:fa:cf:13:44:fb:1f:be:ca:73:2a:c6:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2F:69:2D:27:20:C3:CC:6A:95:67:02:56:A1:81:EA:2A:27:47:ED
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/Jy9pLScgw8xqlWcCVqGB6ionR-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.65.0-109.95.66.255
109.95.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c7:b7:d1:9d:27:39:48:ee:05:d8:e0:f3:bc:97:64:c4:61:
bf:06:e7:88:0c:d6:98:f0:fa:74:79:c3:21:0d:06:5b:74:58:
71:8c:8d:a5:cd:37:de:ab:d4:71:94:71:92:5a:ca:4e:4e:04:
f6:e5:07:ca:1f:71:a9:c4:1e:5f:99:18:d8:17:84:59:3f:38:
13:3d:b0:40:7d:63:12:6b:b0:dd:85:85:52:dc:42:e8:de:fb:
60:ad:03:fa:1b:c0:8b:70:d6:49:cd:7e:d1:45:cd:3f:b7:31:
e3:ed:98:23:55:d8:05:b1:54:57:58:bc:e4:11:cd:9c:cb:6c:
1c:94:71:ee:1b:bf:2e:9c:00:1d:3a:7b:92:41:ba:46:a2:81:
21:74:56:f4:35:13:ff:8e:da:eb:88:4d:a7:40:d9:92:57:52:
9e:74:22:c4:d7:77:7f:a4:ec:e3:0e:99:b5:39:01:fd:1b:94:
9b:26:e6:16:7a:fa:0b:94:cf:3d:e9:93:2b:21:42:df:b9:43:
36:87:3a:77:74:ba:97:ff:47:53:28:1f:fb:94:80:44:82:f0:
42:db:fc:37:21:59:e0:61:ee:99:79:8d:9f:f7:dc:0a:8d:43:
a9:53:c4:82:68:e1:02:03:1c:9d:f6:12:b4:72:1f:64:80:0e:
ad:dd:31:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 29 18:32:39 2024 by rpki-client on console-fra.rpki-client.org