Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/y4R9NNxehc-YqMW8HGnAMbHbKwE.roa
File: y4R9NNxehc-YqMW8HGnAMbHbKwE.roa (raw, json)
Hash identifier: KGRuFIdp3VzMy2+k3MSyFCZSLnfiTSKorulMHEWS/+U=
Subject key identifier: CB:84:7D:34:DC:5E:85:CF:98:A8:C5:BC:1C:69:C0:31:B1:DB:2B:01
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E845BAFE847DC89AE4339266F629537A5
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/y4R9NNxehc-YqMW8HGnAMbHbKwE.roa
Signing time: Thu 28 Mar 2024 09:19:45 +0000
ROA not before: Thu 28 Mar 2024 09:19:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196747
IP address blocks: 109.207.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:5b:af:e8:47:dc:89:ae:43:39:26:6f:62:95:37:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 28 09:19:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb847d34dc5e85cf98a8c5bc1c69c031b1db2b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f1:2d:67:3f:6c:d5:f9:52:81:b5:08:2a:41:
06:f7:7c:ff:f9:b8:f0:f3:49:f8:3b:51:c7:4d:5a:
c9:fb:99:e4:25:f0:9a:15:e7:6e:a5:f0:ba:e6:85:
c5:a7:bc:7f:0d:49:27:21:15:3c:db:d9:bf:36:63:
d1:6e:7a:63:ca:08:1c:a6:13:8c:56:5d:f6:f4:df:
2a:e9:e4:32:24:1b:95:e1:59:19:1e:08:67:92:de:
20:a4:b2:79:66:2d:d9:81:f2:19:72:94:2e:71:de:
01:75:17:7a:f7:84:12:9f:d3:59:b3:94:48:42:ff:
19:ad:36:68:c6:74:d5:09:30:5e:cf:90:19:af:4c:
ac:a6:2b:bc:7d:20:18:35:7f:9e:22:e3:7b:09:50:
58:9a:3f:fe:8b:b1:ac:96:be:55:b3:b3:bf:2d:af:
44:30:77:89:98:b3:f7:58:b9:65:7e:d0:06:4f:33:
e2:2a:31:dc:08:38:c9:97:5a:3f:b1:e5:c8:73:e1:
eb:1e:16:c8:1e:83:bf:29:eb:f4:03:e3:9f:3a:2a:
29:a9:9a:b2:33:60:85:0e:46:4d:1d:6f:5b:39:e6:
f4:a8:dd:7e:d1:ae:41:a6:fa:15:f8:b1:fc:90:13:
16:b8:7e:5e:4c:24:b8:e7:ff:b9:85:76:db:38:55:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:84:7D:34:DC:5E:85:CF:98:A8:C5:BC:1C:69:C0:31:B1:DB:2B:01
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/y4R9NNxehc-YqMW8HGnAMbHbKwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:14:22:7d:db:51:62:f9:e9:5f:ef:bc:87:fa:36:22:dd:14:
45:7a:50:3a:3e:df:50:45:8d:7e:35:56:83:14:f2:47:b3:b1:
1f:c2:c6:21:68:8a:b7:66:03:b6:36:a6:26:df:58:52:7c:2d:
e0:35:56:a4:e4:ad:7f:11:85:9f:f0:58:a2:51:57:b7:99:b9:
48:fd:51:f0:37:26:91:6b:b7:55:6a:d4:0b:a8:07:d7:55:f8:
3e:b7:4e:3f:90:7e:90:49:40:d9:46:6f:cb:0e:65:d8:20:87:
33:b6:19:dc:73:9c:fe:78:4f:c4:36:61:d4:53:86:99:b6:f4:
31:61:27:b1:0a:0b:67:e4:81:06:89:a7:5f:22:d6:a4:76:4a:
a9:8e:80:82:2e:69:51:ea:1d:61:8a:4e:a0:9b:f5:9c:5b:3b:
63:a7:4f:d8:3c:24:83:f5:74:fe:87:ec:77:97:d9:7a:cc:40:
63:ba:0a:8e:c0:bf:fe:cc:4e:d5:cf:df:fa:32:98:72:b0:76:
dd:e3:90:86:5e:b5:73:b3:30:58:b1:4b:42:1a:32:b6:66:06:
ed:ff:dc:89:0b:ee:da:39:c3:dd:1a:1e:9b:37:68:d2:cf:66:
c9:10:cd:fd:53:6b:74:4d:0e:36:1a:ad:20:43:cd:cc:7d:e9:
bf:67:2f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:13:10 2025 by rpki-client