Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/PG95mNJwgDGHhyTwn-aHZMVhWk0.roa
File: PG95mNJwgDGHhyTwn-aHZMVhWk0.roa (raw, json)
Hash identifier: lbtJrxZSNUBJ3t/lFTKQKYIhjrsIcyx8J7sRFmQXUsY=
Subject key identifier: 3C:6F:79:98:D2:70:80:31:87:87:24:F0:9F:E6:87:64:C5:61:5A:4D
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0193545EA9228EE71490D601F7E6C57865E6
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/PG95mNJwgDGHhyTwn-aHZMVhWk0.roa
Signing time: Fri 22 Nov 2024 14:55:10 +0000
ROA not before: Fri 22 Nov 2024 14:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213816
IP address blocks: 109.196.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:5e:a9:22:8e:e7:14:90:d6:01:f7:e6:c5:78:65:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Nov 22 14:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c6f7998d2708031878724f09fe68764c5615a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:41:5e:1e:90:67:2f:cb:86:68:b1:dd:fb:
cc:ec:79:dc:a0:2d:89:52:3b:df:68:b4:98:72:ae:
5c:f8:39:1a:41:db:9e:27:8b:23:e1:c2:f0:bd:9c:
2e:d5:57:ee:1e:41:2d:bf:3c:69:c4:34:06:53:3a:
f1:a8:05:4d:ac:35:07:b0:57:3d:48:e1:96:b8:65:
ae:41:aa:7d:0b:88:59:fe:42:9e:53:cb:7f:9c:21:
49:b9:25:59:61:8c:2f:b9:68:9e:91:34:12:82:1f:
53:13:32:97:e1:b6:a1:3e:eb:65:cf:fb:50:20:4d:
09:c6:c2:6e:35:c8:e0:5c:21:5d:d1:f8:09:73:34:
de:90:36:42:b7:06:e0:4d:2f:81:ba:ad:8c:ea:2a:
21:fa:ae:df:b4:e1:2f:72:d9:88:4e:cc:ab:02:89:
6a:63:c4:ea:de:e6:bc:10:b0:cd:ec:9f:4d:79:74:
f8:ec:74:35:47:d8:b1:aa:ab:c1:c1:d1:5d:be:d7:
1b:5d:a0:5b:8a:ab:ce:c8:fb:80:ae:8f:6f:13:3a:
1c:c8:97:a8:02:8a:8b:e6:3c:ad:84:33:44:a0:65:
3e:2e:c6:8d:80:66:ba:5a:d2:2f:82:16:1c:f1:fd:
01:9e:28:81:2f:b4:b0:03:68:2a:ae:2d:cc:07:42:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:79:98:D2:70:80:31:87:87:24:F0:9F:E6:87:64:C5:61:5A:4D
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/PG95mNJwgDGHhyTwn-aHZMVhWk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:14:94:2a:43:8c:42:92:7e:72:61:02:b5:f8:3c:86:df:74:
89:b3:67:49:ee:81:59:5e:32:f2:ee:1b:b2:cd:76:44:b4:e2:
3b:83:55:5d:dd:10:98:02:b0:b3:64:5d:c7:15:8c:9a:f0:f7:
43:55:cd:b2:21:5e:28:6c:24:5d:9f:c8:3d:9b:6e:61:ff:76:
e6:41:8a:8b:89:85:5d:6c:b8:8a:84:8d:d8:e7:47:ca:51:13:
ec:ca:0b:2f:bc:b7:52:e8:23:c2:71:8f:9a:ba:1b:b1:7b:d5:
2a:1c:f5:d3:74:b3:dd:1f:88:ab:89:f6:10:2d:13:7e:2d:41:
fe:4a:23:4c:48:bd:f5:98:2e:8d:5f:df:eb:3e:b7:a6:89:d7:
30:84:24:b1:86:0a:82:e9:af:c7:fb:ff:19:97:e6:d4:15:8f:
67:fe:08:34:27:6c:c9:08:73:da:26:b3:ac:63:8e:0b:af:32:
a8:de:92:7d:d5:7f:ac:5f:7e:19:7d:d6:57:b7:f3:66:d3:0e:
1f:c5:d4:d5:51:98:f1:3b:22:85:f5:18:60:6a:20:30:f8:84:
f7:76:84:fd:e4:b5:c2:16:4d:ef:74:2e:08:20:cd:6e:d9:f3:
aa:6c:50:77:57:02:4b:87:d4:db:ec:6d:2a:b7:ad:1a:3f:c6:
5a:8d:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:29:11 2025 by rpki-client