Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/ILHDGJLqlf2VKZzMvBmVVHXrEsI.roa
File: ILHDGJLqlf2VKZzMvBmVVHXrEsI.roa (raw, json)
Hash identifier: NK7GB6J5HYbLzeoWukbWb+gQuUL5DjOoaMAXV4xC6zc=
Subject key identifier: 20:B1:C3:18:92:EA:95:FD:95:29:9C:CC:BC:19:95:54:75:EB:12:C2
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 018572B420E2B8FDB374EB82876F43669EE3
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/ILHDGJLqlf2VKZzMvBmVVHXrEsI.roa
Signing time: Mon 02 Jan 2023 13:38:05 +0000
ROA not before: Mon 02 Jan 2023 13:38:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 109.232.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:20:e2:b8:fd:b3:74:eb:82:87:6f:43:66:9e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: Jan 2 13:38:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20b1c31892ea95fd95299cccbc19955475eb12c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:70:29:2f:00:c5:88:03:2f:90:c0:c4:b9:
e7:f5:cd:67:71:08:25:b3:8c:6a:a1:14:19:94:08:
b6:67:68:38:5c:50:a2:f9:12:1e:fe:8e:42:18:90:
fe:35:68:7c:2a:06:70:c1:75:38:86:34:a4:b8:2e:
f2:c0:d1:5f:16:1b:32:71:04:68:de:5a:85:60:20:
b9:12:28:e7:bb:8f:54:a6:27:32:80:16:b5:fd:46:
9f:60:b9:49:e8:fe:0e:cb:92:23:48:5a:18:86:a7:
02:29:5b:08:47:8a:29:cd:e8:3b:00:de:5a:4a:93:
5f:50:d3:04:02:79:2f:9f:97:ff:a9:52:e6:16:7f:
6a:b9:a1:a3:50:18:83:a8:4f:6a:b0:b9:9f:92:d9:
e0:28:74:6c:af:e3:53:33:b8:c4:47:8b:0a:86:45:
f6:91:6c:a5:95:f2:97:bd:db:38:e9:b9:f0:1e:cc:
95:b4:6e:20:38:e7:7c:12:1b:dc:49:b0:cd:24:bc:
e4:4a:24:d2:57:91:b4:46:66:54:1b:da:5c:7b:69:
20:0c:f3:11:ff:82:b8:ab:2c:b3:91:b5:de:7f:a2:
ae:26:25:3f:08:1d:51:6b:e9:57:82:c7:d1:07:74:
06:cc:cb:e9:91:91:27:a6:1e:db:f9:45:ec:3a:ab:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B1:C3:18:92:EA:95:FD:95:29:9C:CC:BC:19:95:54:75:EB:12:C2
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/ILHDGJLqlf2VKZzMvBmVVHXrEsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.88.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:4d:20:af:cd:25:1d:6a:59:73:37:51:75:97:1d:7b:9c:71:
ef:56:a5:c2:f1:0a:ea:a7:ec:3d:70:f3:76:74:51:ba:e8:df:
f8:dc:9d:4a:9c:05:fd:96:87:69:2f:86:61:2d:21:4d:41:4e:
4a:ae:ba:7c:c3:4a:ba:1a:11:53:77:2a:a7:7e:67:56:84:17:
c5:7f:44:df:79:37:bc:b5:5f:04:f2:a7:e9:7d:55:fd:50:8a:
84:91:76:8d:e1:aa:5e:15:5b:f5:eb:f0:1c:a3:de:6b:b6:28:
a9:e4:34:8a:c8:84:7e:9e:57:1c:05:8d:eb:7d:03:3a:4a:53:
d0:6c:7a:5c:18:3d:b4:c7:eb:81:64:79:a1:dc:49:d5:8e:7d:
0e:83:60:2f:56:b2:f1:d6:0e:98:af:87:db:ca:c0:64:5f:fb:
65:85:c5:14:2a:5a:03:2f:0f:72:b6:ab:9d:b5:23:bc:74:43:
20:84:5b:f8:d6:cc:e2:5b:9a:ad:d9:2d:60:36:3a:c2:16:32:
23:ab:69:b6:2e:cb:87:4a:33:c3:05:0a:f0:b2:de:50:7a:82:
b1:14:74:c7:d1:14:53:0f:e8:68:f6:f4:f4:da:aa:97:c1:65:
b2:77:be:4e:f7:15:81:83:48:81:db:19:b2:7c:b4:a6:01:2e:
de:b5:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:53 2024 by rpki-client on console-fra.rpki-client.org