Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/_sTD1s8pPvBzDze2Z45u3LL8joc.roa
File: _sTD1s8pPvBzDze2Z45u3LL8joc.roa (raw, json)
Hash identifier: lisb9ufHesfriLDeFfsR0G8M2qHRMn1BsycXRJdjkvY=
Subject key identifier: FE:C4:C3:D6:CF:29:3E:F0:73:0F:37:B6:67:8E:6E:DC:B2:FC:8E:87
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 01906E723CE764ECB0C3CBD44AD705674926
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/_sTD1s8pPvBzDze2Z45u3LL8joc.roa
Signing time: Mon 01 Jul 2024 13:18:18 +0000
ROA not before: Mon 01 Jul 2024 13:18:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202470
IP address blocks: 109.107.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:72:3c:e7:64:ec:b0:c3:cb:d4:4a:d7:05:67:49:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Jul 1 13:18:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fec4c3d6cf293ef0730f37b6678e6edcb2fc8e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:92:45:da:0a:b5:58:6f:c9:22:ec:a2:a6:
66:21:f3:f2:8c:1d:27:c2:83:f0:ad:d5:5c:61:66:
e5:29:7c:f9:00:2a:b4:97:cc:0c:84:b0:15:33:21:
20:26:24:78:4c:3c:e4:29:17:7e:d8:2e:d1:21:1b:
f1:9a:64:3d:34:4b:85:58:7f:45:d3:ae:d3:d7:a8:
93:2d:44:ea:f3:13:8e:eb:c3:7a:51:73:07:f0:6b:
9b:81:88:81:e1:ee:94:4b:e5:e5:c6:49:3f:02:5c:
27:72:47:82:a3:4e:cd:7e:06:7d:a8:c4:e4:ee:3d:
8b:93:71:15:29:31:92:7c:03:92:c8:41:dd:2f:04:
6a:c5:00:98:8a:e8:66:f8:5d:dc:6d:6c:92:2e:21:
29:10:86:cf:c1:19:f2:d9:a0:65:81:32:94:9e:e9:
ee:21:9a:a4:10:ff:69:49:13:21:dc:63:81:0b:ce:
d8:db:45:13:d4:f5:d9:f8:2f:55:6b:da:15:d0:2f:
bb:af:10:d1:2e:46:82:06:61:17:cf:2a:49:5c:ef:
a2:e9:2b:6d:89:64:8f:b6:a2:3d:0e:4f:fc:e3:ae:
30:2b:83:5d:58:c1:80:58:09:31:fa:0f:66:07:56:
5f:10:7a:e8:c9:6f:4f:01:19:38:e9:ce:01:fe:31:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C4:C3:D6:CF:29:3E:F0:73:0F:37:B6:67:8E:6E:DC:B2:FC:8E:87
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/_sTD1s8pPvBzDze2Z45u3LL8joc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.146.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:95:24:b8:86:f5:97:95:7d:66:f7:eb:26:a2:b3:99:10:3d:
a6:b2:f2:b7:35:66:11:63:48:e3:b8:66:86:34:e5:ca:03:39:
fa:29:aa:5d:48:67:4b:7a:da:d5:fb:a9:ec:88:94:65:80:a9:
d9:c3:62:c4:ee:82:e4:d9:58:2b:0a:9c:df:e6:e2:f8:a9:f5:
7b:e6:0b:72:f8:0e:23:9e:34:0e:a7:af:54:18:11:31:b2:4b:
47:bc:4e:89:58:97:6f:2e:5d:f1:ef:27:59:c8:64:87:c4:07:
5d:67:3c:80:17:3b:ae:fd:68:a5:7d:ca:36:17:6b:2e:d2:dc:
63:19:cf:e5:cb:71:64:d2:0f:6e:9c:9d:25:25:77:4d:c5:ae:
3b:a2:7e:f7:c8:1f:25:10:eb:d3:51:b4:f0:b2:29:64:84:34:
f5:69:3c:de:07:f1:f8:61:01:39:85:e5:a7:e5:ac:b8:32:7e:
a8:31:af:f3:ee:e2:1c:54:e3:5c:ce:e8:25:7c:7b:b5:e3:0d:
b3:1b:20:03:e4:b5:42:46:d8:63:5c:3d:b5:2d:25:26:cc:be:
c0:02:fb:01:87:2f:86:e0:d2:32:c1:59:32:f9:fb:d5:63:e4:
47:d2:e1:e4:79:a6:3b:73:a2:be:39:03:88:8d:e4:9f:31:af:
8e:e0:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:57:16 2025 by rpki-client