Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tJuK1-0GECppIcJw2n1e4EBV8fk.roa
File: tJuK1-0GECppIcJw2n1e4EBV8fk.roa (raw, json)
Hash identifier: hBmEKLyb08b3P1OPAJranH15CMxONcgvN6X8frBRneE=
Subject key identifier: B4:9B:8A:D7:ED:06:10:2A:69:21:C2:70:DA:7D:5E:E0:40:55:F1:F9
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018F68F1A1646AA5E7CBE33BFD5F5B0E2140
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tJuK1-0GECppIcJw2n1e4EBV8fk.roa
Signing time: Sat 11 May 2024 18:36:56 +0000
ROA not before: Sat 11 May 2024 18:36:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 10:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:68:f1:a1:64:6a:a5:e7:cb:e3:3b:fd:5f:5b:0e:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 11 18:36:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b49b8ad7ed06102a6921c270da7d5ee04055f1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:f5:5b:5e:c1:6e:8c:92:2f:27:fb:49:a9:
bd:60:5d:1a:3e:7d:d3:2d:5c:4c:e3:04:c0:38:9d:
57:e0:03:28:3c:c6:a4:2b:a3:ca:45:fb:09:e2:e3:
c3:09:60:53:74:a4:fe:e6:91:82:b1:81:cd:a9:c1:
ac:70:a5:7a:45:8f:55:2a:2a:72:fa:f4:1a:63:43:
44:cb:0b:86:b1:1f:71:62:5b:66:45:93:a6:3f:50:
ce:48:e7:73:c6:48:e9:4a:1d:de:b4:2c:3b:6b:88:
ef:22:58:49:46:91:f5:6f:84:66:77:d0:a1:35:38:
82:62:d5:1b:6a:85:17:a3:5f:55:47:97:a4:25:ce:
90:8f:c3:1c:42:fd:7c:23:10:56:67:20:76:6b:98:
2a:72:7f:26:15:a7:63:13:46:0f:6d:39:f3:96:f6:
d2:15:0f:97:c8:e5:1e:ab:11:d4:87:6d:ac:a8:5f:
bb:6c:87:15:fa:b6:f6:58:8a:53:56:40:63:f6:61:
dc:5c:e6:75:e2:4b:85:90:96:40:e0:02:97:0d:a7:
8e:2e:fb:cf:34:ae:3f:99:63:91:d4:6b:19:bf:33:
91:9b:19:98:47:3d:53:c1:b3:70:b7:47:ef:e1:5f:
01:b7:d2:e4:cb:fa:e4:70:68:a1:70:95:91:29:9f:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9B:8A:D7:ED:06:10:2A:69:21:C2:70:DA:7D:5E:E0:40:55:F1:F9
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tJuK1-0GECppIcJw2n1e4EBV8fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6c:61:5e:38:94:78:e7:40:9b:10:f7:43:e7:ab:d9:d0:fc:
e7:9e:3a:bb:86:df:c9:78:3b:b7:8a:5b:36:3e:c5:46:f6:54:
02:d1:55:0c:47:9b:e8:a6:e2:86:dd:50:59:f4:48:51:aa:56:
5a:14:51:14:01:0e:9d:b9:5e:b7:16:b4:c7:64:54:a7:ea:ca:
c6:0e:d2:f5:b9:a9:c6:4b:ac:02:36:d7:f9:b0:06:0b:bb:ce:
36:c0:b4:1d:fb:1b:88:3e:da:40:d9:61:ce:2e:64:ec:09:9a:
b8:df:c1:17:c9:d5:7a:90:ce:0d:bb:62:4f:52:39:f0:2d:43:
18:12:89:a8:9a:19:4c:0e:dd:65:e6:36:ec:ad:c9:26:26:b9:
b7:eb:b0:c2:27:e6:b1:e6:15:70:bf:e3:c9:b0:f7:0d:88:c6:
17:2e:45:a8:01:b2:0f:a7:6b:ab:aa:43:ab:aa:6d:6f:32:d2:
80:2d:88:e3:0f:1d:4b:96:f6:56:8d:a5:37:7f:21:8d:33:06:
aa:57:33:1f:05:36:7a:80:32:6d:0b:b7:cd:cf:de:80:1f:14:
47:59:03:c3:a3:a2:f0:81:36:e9:98:e4:18:c7:ed:fe:34:1a:
ad:13:63:dd:e0:b4:7a:94:d3:ee:b2:82:37:2b:f3:1e:9a:39:
3d:cd:f1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org