Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/J-5pwpwyRP_xqjZVDgazftiE5ww.roa
File: J-5pwpwyRP_xqjZVDgazftiE5ww.roa (raw, json)
Hash identifier: Yk2poW+XZIUGjunP3YQ+Rdl0nFnUwx6dHhRo2cEcu3w=
Subject key identifier: 27:EE:69:C2:9C:32:44:FF:F1:AA:36:55:0E:06:B3:7E:D8:84:E7:0C
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 018571279536ABC30F52D9B379994AE84118
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/J-5pwpwyRP_xqjZVDgazftiE5ww.roa
Signing time: Mon 02 Jan 2023 06:24:57 +0000
ROA not before: Mon 02 Jan 2023 06:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8747
IP address blocks: 109.235.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jan 2023 14:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:95:36:ab:c3:0f:52:d9:b3:79:99:4a:e8:41:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 2 06:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27ee69c29c3244fff1aa36550e06b37ed884e70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8f:e0:74:03:f4:9c:94:95:80:e3:45:dc:75:
be:6c:a6:3e:43:dc:04:0a:aa:bf:0b:1f:8c:d8:a4:
ec:8f:53:06:82:01:23:f1:21:c2:13:2c:62:c9:0c:
ac:e2:9c:4c:ca:8d:00:f4:06:d3:79:9d:a9:70:4f:
05:4b:4b:b8:2b:52:c1:0d:79:15:7e:cb:42:de:f4:
ff:e2:67:b5:f6:ce:8f:8a:a7:8f:a8:12:74:eb:6a:
ee:90:34:a6:b5:84:13:79:ea:cb:e6:27:55:6a:02:
3c:de:db:f6:cd:8c:d1:83:c0:78:f0:f2:28:f0:b6:
85:65:16:0d:58:71:42:46:57:a3:be:27:04:b9:1b:
8d:63:b8:87:23:78:e2:79:6c:f4:db:b5:be:68:50:
40:19:bf:5c:1f:65:c1:ca:65:5f:14:12:69:79:49:
4d:da:9a:07:98:c2:7a:6c:d2:c4:12:e2:e0:9e:e3:
f6:51:05:8d:07:97:9c:4b:58:fa:eb:91:eb:37:05:
05:ba:ac:59:ab:50:fc:df:e0:9d:6c:f5:0c:2e:b0:
4f:ce:78:d3:08:78:d7:70:98:f6:1f:39:33:f4:5d:
4b:06:dc:b7:9a:63:ca:c4:48:8b:13:b2:73:94:ae:
4c:21:d3:7a:dc:bb:0d:15:fc:7c:db:77:40:91:5e:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:69:C2:9C:32:44:FF:F1:AA:36:55:0E:06:B3:7E:D8:84:E7:0C
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/J-5pwpwyRP_xqjZVDgazftiE5ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.180.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:55:e0:f7:a0:61:09:3a:5a:92:c4:89:3d:2d:8e:42:00:64:
cd:fb:02:d2:f7:ad:75:33:71:b5:f8:dc:14:82:15:40:4a:f1:
83:d4:2b:25:8f:10:89:56:1e:e5:81:dd:c3:46:41:7a:ea:f8:
22:6c:36:f1:c1:2d:ef:da:55:2e:10:de:6b:b0:00:85:54:a3:
c5:ce:b7:46:8b:67:e9:5e:fb:cc:4c:d8:e8:cf:6e:b0:31:22:
07:fd:2b:4a:c5:6f:18:10:56:b8:9d:34:3f:d2:37:4b:b3:98:
d0:c0:da:83:4b:de:ad:0b:d7:b2:94:e7:fe:bf:b4:c9:05:7c:
bb:07:a7:a9:77:a5:f0:9e:9f:b7:9f:d2:b5:ea:4e:92:9a:b2:
f8:15:1e:fb:81:f2:fc:9a:d3:6d:11:db:88:bc:54:d9:47:96:
82:d0:c5:e7:84:53:39:ef:21:db:63:d6:7e:a0:da:97:d5:e9:
d4:da:6f:8f:9d:92:ec:03:cf:66:39:e5:02:5a:b7:61:6a:1b:
34:bb:f3:86:c7:a8:96:e7:9b:88:b5:e1:3e:c1:58:0e:4d:9c:
45:3a:e0:0d:90:6d:87:ae:73:cb:12:21:25:35:cc:8e:a8:2f:
4d:0a:89:d1:9c:94:b9:0b:18:a3:30:b0:a8:70:f9:5a:0c:23:
00:fe:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org