Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/H7QgOa_i6SQPHjgz8pmClrTmk2M.roa
File: H7QgOa_i6SQPHjgz8pmClrTmk2M.roa (raw, json)
Hash identifier: QRA6pRPv/usz+5khruDaiSFplmFr4MkfETSIvO3UQqw=
Subject key identifier: 1F:B4:20:39:AF:E2:E9:24:0F:1E:38:33:F2:99:82:96:B4:E6:93:63
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 0192B5CB5FE475CEA143E41DF5FAB06B24D2
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/H7QgOa_i6SQPHjgz8pmClrTmk2M.roa
Signing time: Tue 22 Oct 2024 19:54:17 +0000
ROA not before: Tue 22 Oct 2024 19:54:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58181
IP address blocks: 109.202.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 09:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b5:cb:5f:e4:75:ce:a1:43:e4:1d:f5:fa:b0:6b:24:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Oct 22 19:54:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fb42039afe2e9240f1e3833f2998296b4e69363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:d7:59:2d:3d:c1:6e:62:0c:a4:36:2f:07:
8b:22:dd:63:87:53:d6:45:ae:5e:2c:82:3f:24:21:
e0:e4:9f:b5:0a:4e:c5:2b:b0:c9:f3:34:a3:b8:02:
2b:d1:2f:d8:ec:ed:0a:c3:45:00:4a:41:97:b7:57:
fb:89:65:e8:3a:65:a7:f3:41:0b:17:0a:3a:62:49:
b4:8f:d0:22:09:0d:c9:0a:29:45:84:ab:ac:73:4f:
a6:f0:4e:37:88:9e:09:d8:36:95:5a:92:25:f5:46:
ac:c5:bb:86:06:ce:8d:4f:30:d4:36:18:ca:21:b8:
4e:c0:1e:d0:49:36:70:1d:ed:72:5e:e6:6d:e6:12:
1a:44:f3:8e:3c:7b:dd:a0:f0:c1:91:df:c9:cf:04:
15:55:01:0c:f2:94:48:66:92:61:1a:ea:f4:0c:fe:
6a:d1:3d:b8:8e:d5:28:4a:10:b8:31:47:a1:79:e5:
80:12:ff:b8:31:0d:d8:07:d5:13:c9:e6:95:95:79:
9f:a5:4b:b1:9e:df:7c:e4:94:71:e2:aa:f8:4f:f4:
60:ad:48:72:e2:bb:89:cd:43:e4:bb:eb:11:1b:90:
96:58:86:74:45:e0:29:48:a5:2a:5f:9c:7f:71:09:
f0:4c:bc:44:e1:8e:69:56:5b:bf:47:75:ec:fa:5c:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B4:20:39:AF:E2:E9:24:0F:1E:38:33:F2:99:82:96:B4:E6:93:63
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/H7QgOa_i6SQPHjgz8pmClrTmk2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.202.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:94:bc:e6:9b:82:a1:84:f8:cc:7f:b3:4e:c4:6a:38:57:0a:
62:bb:b7:c9:2f:48:f5:39:d3:65:51:a8:37:d3:30:0c:39:cc:
02:80:f8:5e:f7:c9:36:37:77:71:dd:e9:86:00:d4:d6:49:ee:
22:33:ad:3d:8a:ff:f3:42:cf:33:10:fc:95:43:96:17:a9:3d:
fb:0c:f1:52:d1:1a:c6:b1:d3:8a:e4:69:ac:e7:51:6c:6d:66:
31:a9:66:44:ab:c2:1e:e8:0b:47:b4:60:25:ff:2e:c8:f9:1d:
a1:f6:fe:8c:39:64:8e:e5:3f:b2:94:bc:0e:ea:04:cc:7d:87:
13:38:b6:f3:d1:d5:ca:93:b0:a4:ba:86:63:d3:12:d3:0f:76:
f4:17:82:93:ce:b4:14:79:9c:3a:94:04:fd:e7:6b:ae:9c:19:
9a:9a:9c:af:de:d3:f7:58:63:4f:cf:a3:cb:92:32:2e:19:b1:
7a:df:5a:03:32:52:3b:db:91:6b:ea:54:e2:f1:1f:f7:4d:ff:
99:49:0c:37:be:e1:17:9d:b9:0a:f8:7d:c5:41:4d:9f:7c:57:
cd:e1:9d:e8:fe:3a:e1:10:45:6b:d0:f4:7b:3a:96:75:f8:58:
a9:58:51:0a:91:aa:7c:0f:90:11:0e:d5:10:d9:44:ae:02:90:
3b:27:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:04:08 2025 by rpki-client