Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ngOtVnv7HieOxlszt5hI2h6LjQo.roa
File: ngOtVnv7HieOxlszt5hI2h6LjQo.roa (raw, json)
Hash identifier: 09OvuBFYoTMhXXrfw4xRWlW0jOqkL8IspzF3ER0ud8I=
Subject key identifier: 9E:03:AD:56:7B:FB:1E:27:8E:C6:5B:33:B7:98:48:DA:1E:8B:8D:0A
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0192917190D63DD6B8EDB8C95A3721E29FC4
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ngOtVnv7HieOxlszt5hI2h6LjQo.roa
Signing time: Tue 15 Oct 2024 18:29:51 +0000
ROA not before: Tue 15 Oct 2024 18:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 263702
IP address blocks: 109.72.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:91:71:90:d6:3d:d6:b8:ed:b8:c9:5a:37:21:e2:9f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 15 18:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e03ad567bfb1e278ec65b33b79848da1e8b8d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:e0:4f:b0:0e:66:99:af:91:77:b3:98:be:
cd:c3:51:6c:e9:2b:e6:0c:0f:2c:46:61:e4:69:28:
5b:41:a0:94:8b:e0:22:f4:a5:8d:cd:29:a3:72:8c:
38:20:2f:56:0e:04:31:a1:a8:39:bf:d4:16:23:63:
8b:95:b3:50:db:4c:ff:38:14:d3:2a:0b:22:fd:21:
97:c1:14:5c:a7:1e:30:dd:8c:e8:1b:ad:94:9e:11:
3b:c6:99:59:f2:db:03:c3:33:22:b7:57:03:f1:8d:
b6:36:c0:38:91:8f:a8:5b:77:9c:88:8d:5f:ca:7f:
8c:4d:2d:33:36:28:ab:44:e3:94:ed:6b:1b:9a:99:
53:b3:de:df:b4:98:dc:ad:49:fc:ba:7f:11:d4:ef:
cb:5c:b6:9e:3e:34:a6:65:1d:74:70:5a:55:af:b0:
87:b0:46:80:05:c4:f1:70:20:50:05:77:d0:b5:01:
06:0d:e1:22:5c:36:e1:34:27:7e:47:49:28:11:36:
be:a0:f0:81:f7:24:7a:d8:bf:7c:0b:9c:2d:1e:e4:
2e:f9:6e:29:c2:6e:62:95:39:c7:f9:dd:0c:a1:26:
96:04:15:42:2c:24:22:d6:8a:d0:a1:65:af:c1:71:
7f:2f:f0:c3:f5:f5:e4:5d:84:aa:07:be:4b:60:fe:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:03:AD:56:7B:FB:1E:27:8E:C6:5B:33:B7:98:48:DA:1E:8B:8D:0A
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ngOtVnv7HieOxlszt5hI2h6LjQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:80:19:05:85:b4:a3:e8:d0:f9:10:ea:0c:2b:6a:4a:ff:8c:
6c:ab:54:14:a7:4e:94:69:c6:2a:ea:ed:e3:61:fc:bd:42:60:
3f:6d:a2:d1:3b:bf:89:67:2f:6f:56:75:82:7a:41:f8:30:81:
9d:09:cc:85:a7:e9:ab:04:74:15:eb:68:ef:a3:f0:df:f1:d1:
10:dc:9b:ad:f9:84:58:94:17:76:af:81:56:4b:74:bc:aa:2e:
eb:eb:b5:30:16:7b:cf:95:d4:49:ba:8a:46:38:80:0a:61:ff:
17:69:60:a4:6d:86:bc:fc:03:ba:38:58:1d:15:f9:9e:33:10:
44:3b:20:16:08:ef:51:1d:8f:87:10:6a:33:ab:09:2d:38:9b:
09:ab:26:b3:2b:d8:a9:d1:19:ef:f4:60:f2:0b:94:b4:dc:e6:
a7:39:7e:9f:33:b5:2f:99:df:5f:e0:a9:34:58:87:d9:0d:13:
d6:49:38:9f:7f:34:ab:19:43:38:06:2d:14:03:ee:4e:12:2b:
92:a9:b5:ec:66:d3:d3:0e:30:d0:f2:27:74:6a:56:b4:fd:d0:
d4:5a:ce:ef:c5:8e:0f:71:86:1f:29:88:72:cf:99:e7:69:83:
55:2d:3d:5b:60:4a:47:42:c9:c6:ea:4d:bc:cc:90:ed:b6:71:
1b:69:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:15 2025 by rpki-client