Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/o58KE43zDRkwvFfeJKCO9rDiouo.roa
File: o58KE43zDRkwvFfeJKCO9rDiouo.roa (raw, json)
Hash identifier: AIkAP0L8pfFbRt6TW6ADb0Lu7AwAznh81BSAXOFQMLg=
Subject key identifier: A3:9F:0A:13:8D:F3:0D:19:30:BC:57:DE:24:A0:8E:F6:B0:E2:A2:EA
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018B5C0901AE56E66E13827A689E2AB9E809
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/o58KE43zDRkwvFfeJKCO9rDiouo.roa
Signing time: Mon 23 Oct 2023 10:16:15 +0000
ROA not before: Mon 23 Oct 2023 10:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 109.107.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:09:01:ae:56:e6:6e:13:82:7a:68:9e:2a:b9:e8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Oct 23 10:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a39f0a138df30d1930bc57de24a08ef6b0e2a2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:b1:30:86:32:50:b6:e9:78:bf:6a:c1:0c:
92:9f:78:10:02:75:bc:bc:34:5f:bc:1b:4f:08:23:
a8:7b:fe:8e:86:e7:bc:56:d4:1f:1a:45:39:bd:4c:
ff:bb:aa:17:f7:0a:65:bd:61:84:29:50:86:ed:08:
36:39:85:ed:96:7d:f6:3d:8a:7f:9d:1b:0c:7f:2a:
bd:98:4e:92:0a:6f:7f:95:68:39:a5:e7:97:7d:a6:
7e:40:68:33:2d:0f:e9:ff:39:bd:33:34:ea:3f:8f:
e9:e8:b6:72:fb:b2:34:21:08:59:e4:ea:b9:a5:1f:
fe:d8:ad:9f:08:c5:96:7a:f1:63:d9:73:7a:d1:f8:
70:e5:58:b3:02:0d:20:dc:c1:1f:d0:fd:d8:d4:c8:
d0:8c:9d:01:35:51:1f:3d:80:f3:e3:3a:d3:f5:3e:
87:cb:f0:af:36:fd:a6:61:44:5a:bc:d5:4d:08:5b:
58:47:d3:d8:b0:72:95:c3:55:04:8a:42:3a:d5:0a:
93:59:40:97:0a:27:94:cf:25:64:be:9c:78:98:ca:
57:f5:47:3d:78:3e:c6:8f:8f:62:f4:e5:47:4f:eb:
79:cf:b9:28:46:03:5e:11:0f:8f:9e:81:ca:ee:b7:
3f:a4:32:b2:de:53:ca:b9:42:f2:3b:44:1c:53:4e:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9F:0A:13:8D:F3:0D:19:30:BC:57:DE:24:A0:8E:F6:B0:E2:A2:EA
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/o58KE43zDRkwvFfeJKCO9rDiouo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.135.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e7:2c:6d:85:cb:63:92:84:02:79:99:e8:35:00:2e:94:64:
34:6e:f5:29:56:37:0e:5f:77:dc:a6:ea:e5:6c:1b:db:ec:87:
d7:47:58:fe:e1:91:b9:69:08:95:1c:0a:c6:68:7d:ab:01:f6:
cf:26:a4:ed:a3:4f:a1:55:2e:d1:4c:91:60:48:ad:6d:46:f1:
56:de:11:6b:be:b7:b8:e7:0b:1a:62:07:19:fc:5b:9d:4e:a2:
83:34:d3:97:f4:a9:29:a0:83:6b:4c:73:e7:06:00:5e:67:4c:
c1:8f:f7:2a:e6:93:c6:15:85:ea:cd:31:f4:ce:d0:1e:03:3d:
fa:c8:5c:3e:97:f6:65:74:a8:d5:a8:33:12:b6:22:69:97:78:
f3:17:20:db:ff:37:05:41:92:3b:e6:a2:fd:1b:1a:22:26:03:
e6:a7:e4:55:20:78:1c:da:32:42:5a:df:49:13:8d:17:40:1f:
39:ff:66:01:b2:97:d1:32:3a:16:0f:33:26:53:cf:3f:57:f1:
8c:bd:67:61:cb:57:ee:6e:25:a9:33:69:17:a8:bb:5c:4c:c8:
75:3b:4a:e3:b2:4c:58:ff:43:19:6a:d8:d6:fd:f0:a7:fc:05:
52:8f:26:d9:1a:f2:0d:d9:35:42:18:14:f3:91:7d:f3:8e:41:
92:59:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:59 2024 by rpki-client on console-ams.rpki-client.org