Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/9KUKC6uFuWLC0F_7LD223u9irDs.roa
File: 9KUKC6uFuWLC0F_7LD223u9irDs.roa (raw, json)
Hash identifier: h5WYpbw2FVbNZLFJY9yZC50sx2ihBkLJaxrVvVAbKyo=
Subject key identifier: F4:A5:0A:0B:AB:85:B9:62:C2:D0:5F:FB:2C:3D:B6:DE:EF:62:AC:3B
Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial: 01934F31E3D58FF124989CC9ECA255B914BC
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/9KUKC6uFuWLC0F_7LD223u9irDs.roa
Signing time: Thu 21 Nov 2024 14:48:09 +0000
ROA not before: Thu 21 Nov 2024 14:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 109.245.96.0/24 maxlen: 24
109.245.97.0/24 maxlen: 24
109.245.98.0/24 maxlen: 24
109.245.99.0/24 maxlen: 24
109.245.100.0/24 maxlen: 24
109.245.101.0/24 maxlen: 24
109.245.102.0/24 maxlen: 24
109.245.103.0/24 maxlen: 24
109.245.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Nov 2024 08:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4f:31:e3:d5:8f:f1:24:98:9c:c9:ec:a2:55:b9:14:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Validity
Not Before: Nov 21 14:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4a50a0bab85b962c2d05ffb2c3db6deef62ac3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:4e:09:a7:de:3f:39:e1:a7:5e:16:49:8f:
db:2f:d8:49:51:ce:df:f8:21:41:8e:32:02:84:9f:
fe:ce:dd:29:99:54:86:3e:ec:20:9d:a1:4d:31:3a:
60:49:a2:a0:4d:72:aa:79:b8:d8:64:35:1e:51:22:
9a:00:87:da:68:d7:2d:66:c8:28:39:4f:7b:71:d5:
f8:d3:5f:74:4b:fa:f9:f5:be:d4:cf:a9:7f:4f:b4:
99:ef:35:67:66:d4:e3:f4:13:bb:42:fd:82:5b:2d:
69:48:e0:69:83:01:a4:54:57:21:c5:b6:58:c1:6d:
83:47:55:bc:b5:71:26:be:5b:73:e8:db:51:59:81:
f6:61:d2:dd:2c:ec:bf:b4:af:8d:0f:44:cf:12:e5:
9f:9b:67:51:21:fc:78:a4:d2:d7:b8:76:0f:98:57:
f3:20:ce:e9:bf:1f:3e:c9:42:de:13:7e:d5:ed:56:
4d:c4:3c:ff:94:21:2d:5a:e9:b0:de:58:30:71:14:
50:c8:1d:19:1a:4e:e5:c4:60:a1:02:e6:7c:3a:f0:
b4:e5:be:bd:ee:24:26:67:2c:a4:18:0f:e5:b9:8a:
cc:c8:21:ca:b8:36:d4:70:33:d1:31:e9:0f:7e:b4:
f7:1b:8e:21:9e:23:53:72:ef:6a:d8:71:24:94:30:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A5:0A:0B:AB:85:B9:62:C2:D0:5F:FB:2C:3D:B6:DE:EF:62:AC:3B
X509v3 Authority Key Identifier:
keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/9KUKC6uFuWLC0F_7LD223u9irDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.245.96.0/21
109.245.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d0:3b:f9:13:89:23:6d:9c:3e:09:07:19:7d:77:18:5f:94:
4e:91:26:29:3e:06:37:2b:e6:17:10:83:c7:d1:c0:08:59:23:
35:b8:fd:34:e8:69:e9:34:8c:44:3e:c5:74:aa:4a:1e:64:33:
62:a7:cf:20:53:b2:3d:52:de:72:44:c8:17:eb:7b:6e:a0:24:
20:02:b3:d4:69:81:89:91:75:9c:3c:cc:79:35:b5:79:b7:cc:
3c:62:e7:fb:d7:c8:46:2b:17:5b:f1:88:f8:af:97:0e:69:11:
f0:90:24:32:a8:76:91:d3:32:d7:1d:18:f7:23:49:6a:dd:a7:
30:08:d5:f0:16:4f:a9:99:6b:6c:cd:37:ef:d3:fe:66:a1:b7:
44:5e:68:b3:9b:6f:2a:28:ef:dc:47:29:9d:03:6d:9b:a0:0b:
9f:e2:20:53:cb:ed:08:db:d0:96:84:66:3c:ef:a8:43:0f:22:
18:78:81:2c:3d:47:6b:25:ee:f2:aa:5f:b2:52:94:fd:19:cf:
4a:81:98:59:81:79:52:ef:42:14:96:89:f7:8f:ea:4b:28:94:
fe:84:a3:76:1f:a1:85:ed:6e:69:9c:dd:f1:13:3e:d4:38:50:
2f:f4:5a:78:fa:62:ce:72:09:f6:c5:11:c9:46:2d:08:d8:3a:
38:ce:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:36 2025 by rpki-client