Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/n7AVX9aw8ClBsjH4H_JagwCsdtg.roa
File: n7AVX9aw8ClBsjH4H_JagwCsdtg.roa (raw, json)
Hash identifier: Bxzd2uzxcp/QPdT7kuYVJ1BONExOLsX5HOWqlDXRMN0=
Subject key identifier: 9F:B0:15:5F:D6:B0:F0:29:41:B2:31:F8:1F:F2:5A:83:00:AC:76:D8
Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial: 0192E701B4AF203FC07F2A3A0276A9146616
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/n7AVX9aw8ClBsjH4H_JagwCsdtg.roa
Signing time: Fri 01 Nov 2024 09:15:01 +0000
ROA not before: Fri 01 Nov 2024 09:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 109.245.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 14:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e7:01:b4:af:20:3f:c0:7f:2a:3a:02:76:a9:14:66:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Validity
Not Before: Nov 1 09:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fb0155fd6b0f02941b231f81ff25a8300ac76d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:39:ed:39:79:9a:5e:4b:cf:ae:b4:be:08:
f5:fa:25:a9:b8:7e:ed:12:ed:8f:2a:a4:13:2b:31:
1d:cf:1c:48:5c:7f:1e:a6:ef:92:bd:9a:5d:25:c9:
25:a2:49:4a:f9:89:8a:37:32:1d:60:c4:f3:42:86:
56:17:82:54:a1:95:36:e0:0d:2c:1e:1a:0f:4c:ac:
b1:83:3d:f0:f8:0d:6f:64:62:34:3c:f9:5a:19:00:
8d:91:cf:f5:07:fc:d7:fe:91:44:1d:59:4e:e8:5b:
13:2a:ad:4b:c7:18:bc:29:06:d8:62:6f:59:e4:e4:
bb:3e:3a:38:9f:bf:8d:fc:ff:03:a4:8f:f6:2e:50:
49:1f:58:d4:d6:ae:17:f7:83:c0:2a:e0:44:ba:7d:
2a:32:81:89:6b:da:36:9e:7b:33:fd:59:21:d7:60:
ce:70:cc:55:09:55:77:73:5d:c9:7a:2f:9c:e3:72:
23:6f:1f:59:eb:65:4c:2b:08:15:62:27:b4:24:50:
8c:fe:72:bc:da:13:15:5a:87:36:93:24:b9:06:bd:
c4:90:cf:09:04:19:c3:e9:0d:b7:63:b6:d0:3d:fa:
df:00:55:89:ef:3e:b9:d6:b5:65:14:ac:06:04:1e:
d7:84:ee:85:f9:07:ca:c5:cb:6b:c8:18:66:d2:ae:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B0:15:5F:D6:B0:F0:29:41:B2:31:F8:1F:F2:5A:83:00:AC:76:D8
X509v3 Authority Key Identifier:
keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/n7AVX9aw8ClBsjH4H_JagwCsdtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.245.112.0/24
Signature Algorithm: sha256WithRSAEncryption
04:74:8e:47:2b:5d:19:65:50:4b:ac:b1:c7:ef:f8:c3:a1:5d:
81:15:58:7f:b2:2a:3a:61:6c:5f:71:8d:e1:fb:d9:9e:d0:45:
13:5c:97:35:40:c8:58:97:fd:4c:e8:9c:a0:6b:b9:cb:88:91:
60:fc:60:84:c5:1a:ab:0c:90:3f:f3:22:31:da:f9:0c:2a:11:
99:1a:a0:1c:2d:f7:0a:db:79:c0:19:5e:d6:a0:a5:e9:02:7c:
bf:b0:d9:b5:57:c1:00:02:4c:98:5a:b8:4a:f2:a2:5b:99:09:
4a:54:cc:f7:9e:ba:fc:60:99:5f:30:34:c6:d2:f8:8e:30:4d:
a5:80:03:dc:89:05:94:7f:e7:e3:97:05:ba:dd:0a:7e:90:52:
fb:e9:00:b7:62:36:8a:3e:cc:d8:9b:de:89:00:47:0b:90:36:
53:65:17:70:b5:67:62:9c:1a:e5:42:de:a3:1f:35:1c:1c:ad:
50:8d:5a:79:e7:1d:d7:22:9a:dc:58:53:36:65:53:c3:f3:c7:
87:50:d9:ac:4e:be:8c:a1:dc:26:f6:f0:df:56:13:85:ca:42:
52:2d:86:7a:23:be:e0:c4:ea:71:25:ca:7e:bc:ce:3a:64:2c:
59:54:e8:1b:b8:39:4e:95:29:78:57:74:56:33:a1:c0:db:da:
25:39:a4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:33 2025 by rpki-client