Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/v4uIoq6Txm0FhgI2RxW9m-f7YCs.roa
File: v4uIoq6Txm0FhgI2RxW9m-f7YCs.roa (raw, json)
Hash identifier: msBERZrPnyY5Rj9D7DPmnsu9PL6b86GJJ4sw9t1xIyQ=
Subject key identifier: BF:8B:88:A2:AE:93:C6:6D:05:86:02:36:47:15:BD:9B:E7:FB:60:2B
Certificate issuer: /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial: 01857094F81B954E422CD221DF0A2F7346A3
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/v4uIoq6Txm0FhgI2RxW9m-f7YCs.roa
Signing time: Mon 02 Jan 2023 03:44:49 +0000
ROA not before: Mon 02 Jan 2023 03:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196956
IP address blocks: 109.71.232.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f8:1b:95:4e:42:2c:d2:21:df:0a:2f:73:46:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
Validity
Not Before: Jan 2 03:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf8b88a2ae93c66d058602364715bd9be7fb602b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:95:08:1c:3f:cb:29:a1:90:a5:39:c0:35:
f8:99:8b:7a:8b:b4:55:30:80:95:ce:78:56:3a:55:
04:a8:34:6a:09:49:fd:a0:ec:73:56:58:bb:f2:d5:
64:ef:f4:04:b9:0e:04:02:a8:98:cd:14:2e:5c:a7:
cd:c1:a3:3d:60:b1:40:02:29:73:7f:82:82:cb:e9:
8f:44:99:b2:e4:78:d9:6d:ac:1b:fa:60:fd:cf:57:
7a:16:95:12:8c:dc:10:1b:f8:ea:a9:34:12:87:65:
4b:63:3a:21:e7:5e:c7:a1:80:be:13:c7:4e:c2:e2:
6a:c9:f5:74:6c:a6:ed:61:db:11:e4:22:cb:1a:e5:
24:f6:93:84:8c:1b:cf:d8:fa:4a:2d:2c:ce:19:68:
42:c9:1a:87:d0:70:25:36:7f:a7:36:aa:b7:e3:6d:
f6:49:b4:2d:63:e0:df:44:3a:6a:9e:d1:02:c1:d7:
0d:7f:03:df:63:1b:32:7e:a5:66:9c:c2:aa:db:a6:
2d:e2:31:0f:b8:91:37:3c:ed:80:39:41:4c:cb:a7:
18:1d:51:b8:13:e5:94:95:b5:82:52:6f:0e:2c:4c:
17:f4:00:1f:e5:85:15:16:63:58:2f:08:92:6d:0e:
a4:9e:ff:98:f5:8b:c6:65:c0:50:16:0d:87:73:2c:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:88:A2:AE:93:C6:6D:05:86:02:36:47:15:BD:9B:E7:FB:60:2B
X509v3 Authority Key Identifier:
keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/v4uIoq6Txm0FhgI2RxW9m-f7YCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.232.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:9b:8f:46:e4:7a:18:df:45:5d:f8:c8:a6:fd:d3:9d:f2:52:
b0:cf:b4:aa:3d:d4:36:8b:c6:5d:14:b8:8e:75:31:de:74:fc:
fc:16:e1:a3:87:4e:6a:ea:6e:03:e1:3d:49:fc:eb:a0:01:57:
6d:83:26:82:7a:23:e6:ca:0d:8a:b8:24:c7:76:76:92:dc:ce:
fa:17:b5:c1:81:23:97:82:c2:28:62:3d:23:11:c3:e8:e5:3e:
d2:f2:e1:65:db:fb:5d:f9:c5:0a:cb:79:04:4d:24:bb:e8:9c:
ec:da:a7:6b:a5:c5:ac:1d:9d:0d:45:e4:c6:21:a9:67:f7:ca:
cb:14:7d:68:2e:17:a4:e6:a6:0f:ef:4f:f6:c9:9e:af:4f:bd:
81:b0:e7:15:e3:f6:76:9c:50:55:99:09:f2:c6:91:9d:36:56:
df:83:5f:42:46:3f:94:9d:78:77:40:95:b8:07:5f:aa:30:3e:
94:a4:fa:99:54:fa:0f:aa:5b:ff:78:0b:2f:4f:93:2d:48:df:
b9:26:ee:2b:1c:f7:91:f1:bf:3b:c0:9a:20:7c:65:4b:79:09:
89:5b:27:75:88:bc:43:d5:1f:2a:fa:61:6f:83:b6:a3:63:91:
cf:32:6d:9b:cd:7f:ba:0e:6e:08:de:c8:49:7b:30:00:b5:91:
1e:d7:17:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:07 2024 by rpki-client on console-ams.rpki-client.org