Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/rqnRo6GC6k0Z2i2V9cu7ZPJpHpE.roa
File: rqnRo6GC6k0Z2i2V9cu7ZPJpHpE.roa (raw, json)
Hash identifier: bw0DlZC2HWmK6TIkNR5DlT3gvSROmxRCGs1vGx5wj6E=
Subject key identifier: AE:A9:D1:A3:A1:82:EA:4D:19:DA:2D:95:F5:CB:BB:64:F2:69:1E:91
Certificate issuer: /CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Certificate serial: 018EAD92CC11EDFD4A0949B6D88AD460314B
Authority key identifier: 1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/rqnRo6GC6k0Z2i2V9cu7ZPJpHpE.roa
Signing time: Fri 05 Apr 2024 09:24:22 +0000
ROA not before: Fri 05 Apr 2024 09:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59545
IP address blocks: 109.205.192.0/23 maxlen: 24
109.205.192.0/24 maxlen: 24
109.205.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ad:92:cc:11:ed:fd:4a:09:49:b6:d8:8a:d4:60:31:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Validity
Not Before: Apr 5 09:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aea9d1a3a182ea4d19da2d95f5cbbb64f2691e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:47:d5:4c:63:9b:6c:ca:41:c6:e9:c3:06:
1c:4e:bc:42:f2:80:3d:e4:0b:fa:fe:a7:95:06:a0:
1d:e1:83:d5:30:ea:8d:7e:ec:6a:55:aa:f3:78:cc:
7c:22:85:15:63:7c:6e:4a:dc:1c:93:32:a2:7f:b0:
71:99:a0:2a:93:f7:80:16:a5:64:7e:13:ef:a4:a8:
22:d2:5b:11:61:fb:d6:b1:d8:98:12:a0:09:10:5d:
80:0e:1b:6a:f2:ac:35:d0:c7:f0:9a:d5:21:62:90:
51:c8:d9:25:97:c1:71:87:2b:ad:ff:b3:ad:d6:cb:
56:af:ec:a4:76:a1:0a:20:56:b9:ce:f7:f3:f9:a8:
8e:91:99:88:0f:00:0d:57:bb:88:a1:6d:7b:ef:77:
f2:0c:2a:70:39:1f:3b:02:62:ff:68:bd:af:e1:cf:
f1:78:7b:0e:54:96:60:6f:3a:34:74:cc:12:39:b3:
c7:32:2f:7f:47:36:d8:85:76:16:50:4e:ee:29:5c:
53:78:da:8e:3f:ea:99:68:9c:24:85:9e:0f:47:6c:
3a:44:b6:25:aa:d7:2e:f1:b6:e9:71:f9:4c:97:fb:
0a:f9:be:12:36:20:36:b1:f9:22:79:40:af:d8:c9:
4e:d7:9f:78:82:00:e2:50:23:2b:57:09:35:1d:2e:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A9:D1:A3:A1:82:EA:4D:19:DA:2D:95:F5:CB:BB:64:F2:69:1E:91
X509v3 Authority Key Identifier:
keyid:1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/rqnRo6GC6k0Z2i2V9cu7ZPJpHpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.192.0/23
Signature Algorithm: sha256WithRSAEncryption
85:5d:ba:96:7d:d4:42:c7:db:3e:d0:86:85:53:91:61:93:54:
03:3a:53:21:fc:fd:54:2f:b8:7e:55:58:30:0f:14:ca:26:40:
94:21:aa:c9:1b:2e:8e:53:b5:6e:c6:d0:64:69:09:9a:03:57:
6f:aa:fe:48:6d:cf:c0:ee:c8:a2:b2:20:dd:c2:12:61:46:4c:
6c:c9:d4:32:36:1c:c5:7e:7f:3f:1f:54:5e:85:c9:14:59:e6:
35:a6:8e:85:0f:ed:af:3e:d2:d8:bd:49:77:5c:f1:c6:49:63:
e5:23:0d:33:2f:77:3d:79:df:8a:89:d1:41:83:a7:b4:8a:47:
30:2e:cf:ac:e5:eb:8f:23:c6:02:23:7e:81:e2:eb:52:4f:5b:
f7:38:2b:94:59:76:cb:81:d1:9b:f2:52:cb:f2:7a:cf:0f:88:
af:84:eb:c0:56:6a:f2:fc:8c:9d:02:fd:39:bd:b2:51:8a:cf:
b1:3c:8c:f8:1e:62:bc:ff:4c:8f:a0:b1:10:1b:e1:0c:a8:66:
55:7f:ea:84:69:63:cc:35:8a:53:c9:24:66:95:e1:59:d2:f2:
4d:d6:7c:e0:34:5e:fe:c2:89:a8:81:c0:24:45:af:19:50:b6:
fd:8f:13:e9:a4:fb:91:88:16:10:34:ad:8e:91:9c:88:86:3d:
e1:d5:f0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:44 2025 by rpki-client