Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/0AkjneKKY3p6hR0OnCw4QTiBwd0.roa
File: 0AkjneKKY3p6hR0OnCw4QTiBwd0.roa (raw, json)
Hash identifier: T7ipfPf2gbkL22r7/iKxHIGKqSbudnV5SPSWMFY6VrQ=
Subject key identifier: D0:09:23:9D:E2:8A:63:7A:7A:85:1D:0E:9C:2C:38:41:38:81:C1:DD
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 01856F0B67D19309F4654A44E53FD6FC8BA8
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/0AkjneKKY3p6hR0OnCw4QTiBwd0.roa
Signing time: Sun 01 Jan 2023 20:34:56 +0000
ROA not before: Sun 01 Jan 2023 20:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198973
IP address blocks: 109.236.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:67:d1:93:09:f4:65:4a:44:e5:3f:d6:fc:8b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 20:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d009239de28a637a7a851d0e9c2c38413881c1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:be:7b:c3:2e:ca:c9:d6:76:d6:59:d7:7b:
85:8e:97:95:6c:51:47:36:cf:20:ad:23:7a:59:6e:
6c:52:ba:ae:94:65:be:f7:fd:74:f7:07:0a:cd:fc:
86:d0:a1:21:30:fe:f1:ed:ca:db:b4:71:9d:d6:f7:
c7:db:23:0f:11:e7:b9:21:59:01:d5:18:14:3e:0c:
ac:91:12:52:33:e7:09:93:08:6b:bd:98:f3:9f:b9:
59:88:ca:03:34:ce:d6:b6:c7:81:c5:d8:71:17:9c:
6d:ab:2e:05:93:6b:30:7a:85:98:13:3c:31:f5:88:
27:2a:62:49:ea:64:89:e0:42:25:f7:c8:ec:b0:43:
17:eb:b4:66:c4:5d:d4:82:cb:99:12:cb:05:a2:5c:
55:14:39:04:92:0c:b5:9e:d3:9e:a7:7d:87:9a:28:
ca:f9:be:e9:ca:a5:3c:81:2f:58:fe:f6:6c:87:1a:
eb:00:f9:ec:8b:59:f4:e8:ee:64:1f:3b:91:07:b6:
32:b4:50:d2:55:d0:33:85:08:98:d8:74:ab:64:ad:
95:89:4f:fe:a9:16:f6:2b:dc:c5:5d:84:d3:c3:39:
e0:37:23:c9:11:b3:dc:98:43:d9:84:84:fa:68:1e:
75:94:44:b6:eb:7b:f3:d7:70:15:44:f7:b2:ff:fe:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:09:23:9D:E2:8A:63:7A:7A:85:1D:0E:9C:2C:38:41:38:81:C1:DD
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/0AkjneKKY3p6hR0OnCw4QTiBwd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:55:ed:8a:d6:8b:db:a2:b7:3c:f3:92:e8:b0:d2:48:4d:cc:
6f:f9:1d:ae:f9:73:d9:1b:5c:f7:ec:5c:5e:56:11:2c:37:f3:
65:7e:06:1f:5e:40:17:e4:f1:a5:7f:fd:34:60:8a:b7:58:f7:
07:8c:23:bb:8d:75:9f:73:15:ff:c8:6a:ec:a8:ea:46:98:eb:
cc:05:da:78:a9:8e:e2:7b:cc:7f:8a:a2:64:b3:13:69:40:2a:
4c:79:60:4f:c9:f5:02:15:27:5a:9b:2f:df:96:6a:3a:9d:a2:
52:1f:ce:6f:cf:5e:0d:66:d0:a0:df:b9:e9:79:bd:0a:78:d9:
38:9f:d9:d7:1c:27:45:e9:03:33:d3:87:c3:eb:18:0e:45:f3:
7e:9a:c9:eb:f5:7f:84:05:9a:fb:3e:d8:da:5d:bd:87:b1:d6:
94:51:1e:7e:9f:42:49:45:7a:f0:66:ff:b4:8f:f5:16:d5:fc:
0f:1e:1a:32:18:6c:3c:8b:22:bb:64:31:8f:1a:cf:8f:84:e4:
3d:82:7d:14:39:05:71:f9:a0:8f:4a:b5:74:9d:8e:b9:2d:a3:
12:36:50:4c:0f:2c:f0:c4:70:1f:0d:72:7c:86:73:8c:68:d9:
32:e4:b7:68:f0:63:d5:ab:ec:3a:82:a3:79:e7:1c:f5:1f:e0:
fd:d2:b7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:54 2024 by rpki-client on console-fra.rpki-client.org