Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/sZnne0ls3l_jVxGDrd_xELJqNZs.roa
File: sZnne0ls3l_jVxGDrd_xELJqNZs.roa (raw, json)
Hash identifier: 9gD5KbtPmpNFYE6Kms/7UPgecHrHbb6AiTWrjqY8ZB4=
Subject key identifier: B1:99:E7:7B:49:6C:DE:5F:E3:57:11:83:AD:DF:F1:10:B2:6A:35:9B
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 0185F38C7A290FEC236A1E66A17711C26C6A
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/sZnne0ls3l_jVxGDrd_xELJqNZs.roa
Signing time: Fri 27 Jan 2023 14:05:47 +0000
ROA not before: Fri 27 Jan 2023 14:05:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8747
IP address blocks: 109.235.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:8c:7a:29:0f:ec:23:6a:1e:66:a1:77:11:c2:6c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 27 14:05:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b199e77b496cde5fe3571183addff110b26a359b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:6f:fe:f8:bd:47:7d:7c:b3:e0:11:f5:ee:
12:c8:fa:33:97:7f:ec:4f:3c:50:a2:40:19:ff:48:
0f:99:70:b1:62:3d:6c:09:ff:32:e1:aa:38:78:9e:
27:8b:e8:5b:3b:db:84:11:77:ef:d8:10:56:e5:0d:
de:bf:e5:79:17:5b:00:cf:16:9e:ef:71:02:af:f9:
55:bd:18:a7:b9:e4:54:54:b6:7c:ea:71:48:a4:a4:
aa:f4:57:1d:29:a5:f9:ea:25:ae:08:38:88:32:29:
07:f6:ea:80:8c:43:92:2e:cf:18:20:f5:cf:ee:48:
e4:34:9a:04:0c:f3:ed:ee:d3:ab:61:aa:d0:59:85:
4c:bb:bc:e1:0c:b9:10:bd:60:d9:e2:39:1f:7f:ab:
48:1f:fd:76:95:f8:22:89:19:93:d5:97:0f:4d:b3:
ba:c4:1d:d5:63:1d:04:ff:60:4f:e8:a0:e2:e8:a5:
8a:b3:35:8e:98:5b:82:f1:4f:0e:67:f9:81:46:5a:
10:f7:14:84:bf:0c:1c:e2:02:d0:ba:fc:bd:16:e4:
57:1c:b0:64:28:d1:66:8d:a6:ad:fc:f6:08:74:75:
49:ee:64:ec:cf:3f:05:e7:d3:c5:4f:d5:03:88:24:
78:e3:1c:a6:87:ed:a9:73:ab:92:14:3c:e9:fe:eb:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:99:E7:7B:49:6C:DE:5F:E3:57:11:83:AD:DF:F1:10:B2:6A:35:9B
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/sZnne0ls3l_jVxGDrd_xELJqNZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.180.0/24
Signature Algorithm: sha256WithRSAEncryption
ea:21:d0:6c:2f:d3:7e:11:4d:e1:55:0b:fb:f9:ac:1f:68:97:
a4:9d:e7:66:a5:11:83:9e:d8:08:8a:d2:31:b7:9a:96:24:4b:
44:54:f8:df:af:60:1f:c6:5b:9a:02:d1:96:d0:fc:71:4a:66:
46:47:61:e7:02:a9:72:cb:b6:32:3f:ff:2a:fc:b4:1b:20:c3:
56:0b:8f:2c:7c:dc:dc:55:c5:15:39:9f:8f:90:6f:e3:b4:69:
7a:82:e4:90:d0:99:32:78:8e:f1:23:0e:a8:a2:fc:4b:c9:ef:
4b:90:72:8e:d2:59:33:b5:70:4a:91:09:ab:3f:fd:16:ff:d9:
37:89:3d:0d:5d:e8:52:96:3d:fc:f2:42:a0:69:24:52:ea:9f:
bf:0b:55:b2:ce:ca:46:01:ba:37:71:58:fb:3a:f4:cd:95:37:
6a:ef:dd:52:5a:e9:5d:aa:46:e3:56:0e:fc:c4:76:58:cf:3c:
7f:f8:2c:81:f0:c5:bf:7d:c6:00:9a:9e:9a:3d:92:42:d9:64:
64:ee:fc:3f:51:e0:22:4e:69:70:f8:c2:23:78:5a:8a:da:64:
63:a5:e2:99:fe:d5:bf:69:4c:7c:0b:1d:61:d7:98:b8:c4:ce:
95:a6:6d:f2:4a:51:83:81:5c:03:92:de:49:bd:66:4d:13:f1:
5b:08:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org