Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/1n9XiDP5SbBFLSil60deukRfjns.roa
File: 1n9XiDP5SbBFLSil60deukRfjns.roa (raw, json)
Hash identifier: Jo5S426V+p52XoiiBMww2uFtQaYLXVIgSDqyvZkEnXY=
Subject key identifier: D6:7F:57:88:33:F9:49:B0:45:2D:28:A5:EB:47:5E:BA:44:5F:8E:7B
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 018CF90DCE5A7A57FD57F39BD3A5CDF3C1AC
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/1n9XiDP5SbBFLSil60deukRfjns.roa
Signing time: Thu 11 Jan 2024 15:04:40 +0000
ROA not before: Thu 11 Jan 2024 15:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51500
IP address blocks: 109.235.13.0/24 maxlen: 24
109.235.12.0/24 maxlen: 24
109.235.12.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:0d:ce:5a:7a:57:fd:57:f3:9b:d3:a5:cd:f3:c1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Jan 11 15:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d67f578833f949b0452d28a5eb475eba445f8e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:2b:7b:c7:ec:25:0a:6a:4e:82:4d:cb:1e:
5b:2a:0c:75:b5:5e:86:db:62:a7:16:a2:40:c4:3f:
5e:d9:a5:2b:d6:2c:a7:ad:03:86:e2:ab:09:9f:18:
51:a1:50:d0:02:ad:6b:ec:3e:bb:2c:18:37:21:38:
24:46:56:1d:8a:1d:44:ba:c1:bf:08:e8:ce:d8:9e:
ba:ff:c0:ba:73:4e:ac:4d:47:3d:60:18:92:ff:49:
df:5e:f0:1e:dd:b8:a1:1f:6d:eb:51:af:d2:73:62:
a2:78:29:d6:a7:1c:50:da:bd:48:29:14:32:8f:f7:
0e:35:d4:f3:25:23:3a:00:66:1c:c6:aa:0d:89:10:
53:f4:11:8d:f2:e3:e9:2a:e7:d0:84:d0:93:a6:a7:
6b:ba:68:d6:f7:3d:8a:77:63:cb:2f:1c:28:f2:33:
4b:37:f7:9c:03:de:8d:87:35:ca:87:53:d9:d2:37:
c4:c8:ca:f8:0c:1c:06:19:93:99:b2:10:d2:e6:e0:
b3:eb:52:1f:95:b3:43:25:4d:02:d5:76:cd:81:43:
5b:25:00:b4:b3:65:f6:79:ef:a0:57:bd:c7:86:d8:
7d:89:5d:5f:7c:01:25:db:9c:16:30:8e:45:09:70:
a8:c2:2d:56:11:8a:c7:7e:32:36:4a:04:35:14:ac:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7F:57:88:33:F9:49:B0:45:2D:28:A5:EB:47:5E:BA:44:5F:8E:7B
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/1n9XiDP5SbBFLSil60deukRfjns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.12.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:0e:7b:d2:8d:e4:19:e2:27:a4:37:f4:25:97:28:c2:89:c9:
0a:67:0b:d4:5c:63:05:94:bf:15:4d:83:c5:ab:17:dc:a5:0e:
38:66:4d:4a:43:d6:f9:58:78:7b:b8:1e:ec:0e:69:5b:f3:f5:
b3:3b:f1:ca:c7:cc:d5:f7:fe:07:40:04:3b:0e:cb:2e:8a:82:
1e:43:02:ff:97:8e:f0:4c:d4:2b:c9:12:6b:d7:d5:aa:d4:2d:
47:ad:9b:84:a4:fa:9b:06:41:d7:d3:12:77:fe:40:f9:db:a9:
39:4b:2a:a9:38:30:40:46:ca:2a:7a:40:55:89:37:08:af:b7:
ad:2c:3c:82:50:2d:4d:99:03:a6:32:0d:32:15:d8:60:8b:41:
57:84:07:5d:98:b7:62:6e:1b:d9:69:ae:52:5e:5f:10:30:96:
bd:2a:4a:5a:d6:3a:56:07:ef:91:1d:ac:c9:b0:66:16:62:37:
13:a9:59:fa:1b:ae:f5:2a:fd:40:80:ee:13:72:c7:be:4b:f3:
b0:02:59:09:9b:25:50:88:0a:9f:41:6d:6a:87:1a:0c:c2:d6:
20:3d:0f:ee:8f:2d:47:e0:a8:35:58:8c:46:cb:f7:8e:94:19:
11:a2:d2:5d:fd:fa:a5:80:a1:54:db:bb:85:f3:83:67:78:3a:
b5:5d:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:37:39 2025 by rpki-client