Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1-x-s9XAwxtHJh5AKhVmxQRUBRD0.roa
File: 1-x-s9XAwxtHJh5AKhVmxQRUBRD0.roa (raw, json)
Hash identifier: Ahkni1WzHScTFo9HrETRNEN6VD6T34EqYdGAU/zA58Q=
Subject key identifier: FB:1F:AC:F5:70:30:C6:D1:C9:87:90:0A:85:59:B1:41:15:01:44:3D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0188E1607C600239EB629CA6B7781F577328
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1-x-s9XAwxtHJh5AKhVmxQRUBRD0.roa
Signing time: Thu 22 Jun 2023 04:32:56 +0000
ROA not before: Thu 22 Jun 2023 04:32:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.42.0/24 maxlen: 24
109.122.45.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Jun 2023 10:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e1:60:7c:60:02:39:eb:62:9c:a6:b7:78:1f:57:73:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 22 04:32:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb1facf57030c6d1c987900a8559b1411501443d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:3b:af:09:56:5c:85:32:29:ef:2a:16:e9:
7b:44:ed:64:50:c6:ad:91:33:d2:ea:71:c1:e0:d1:
59:f9:09:93:31:12:a2:5f:01:12:1d:3d:8c:5c:8b:
0d:25:84:5f:a9:fb:ee:62:51:5a:1a:38:9e:a9:f6:
ac:39:c2:70:c6:39:26:0b:b4:52:d3:87:98:6b:43:
97:af:6b:f8:d1:c2:67:13:28:94:e8:d8:98:83:e1:
72:06:16:61:dd:69:f1:20:f8:ad:e9:99:d4:0b:b7:
90:ed:f8:20:96:71:5f:6e:95:7f:c4:9f:88:13:71:
b0:68:31:dc:94:01:17:e4:56:13:3e:83:83:6e:07:
6e:31:8a:ec:f8:c2:b9:9c:fa:62:4e:91:9c:ee:00:
c5:72:1e:6f:80:d6:d2:f6:9a:73:8b:ab:b7:06:02:
a8:9c:fb:20:0b:78:89:d3:05:34:50:91:b8:82:a5:
ab:6e:2b:1b:71:3c:f9:e6:9a:73:6b:26:70:8d:7d:
c7:b8:12:3c:c8:bb:ac:82:35:bf:63:38:2c:52:bd:
6f:7f:ad:73:b5:e9:7f:f2:82:3a:a3:12:e4:e9:fa:
d0:43:dc:fe:f2:32:e9:6b:07:fe:f9:8d:06:d6:1c:
8e:60:bc:02:ee:e7:90:e2:8c:10:15:78:41:98:50:
ed:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1F:AC:F5:70:30:C6:D1:C9:87:90:0A:85:59:B1:41:15:01:44:3D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1-x-s9XAwxtHJh5AKhVmxQRUBRD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
109.122.45.0-109.122.46.255
Signature Algorithm: sha256WithRSAEncryption
44:c1:0c:22:f2:85:46:fe:73:9f:2e:61:f7:ef:05:d9:21:b7:
75:b3:f1:9f:11:1c:61:29:7f:b1:b8:a2:3d:e0:71:85:3d:c3:
21:41:f5:b7:a6:3f:4e:c5:8e:ef:7b:d8:bf:33:78:6e:4b:97:
87:9d:c4:15:75:48:67:6a:76:7f:65:aa:d2:e8:1f:48:de:41:
fe:57:1f:bd:a8:da:71:e5:2d:7e:bf:eb:12:3b:19:0f:68:53:
48:5c:ec:b0:8e:51:1e:32:4d:ae:b3:3a:c7:8e:5b:6f:8e:44:
de:a0:01:aa:33:24:3b:99:45:5d:1e:6d:f4:2e:3a:b1:5d:fe:
be:5b:72:69:92:d4:a8:25:4b:fe:aa:49:f8:e6:9a:54:18:f1:
16:c0:89:be:f5:7d:15:a9:89:0c:52:5b:a6:d5:ac:f2:76:71:
6b:c7:e6:2a:16:2d:aa:87:5a:b2:bc:28:bd:e9:32:82:92:d4:
b5:8b:e3:d1:68:fd:69:56:8b:c9:5c:1b:de:c8:16:07:0a:99:
8f:23:f9:36:80:02:7e:ce:03:36:d7:a2:31:5b:f4:86:f7:20:
a7:2b:f7:a0:fe:c7:20:3a:34:45:16:e9:7d:6a:1d:a4:8a:bd:
6a:16:68:5f:91:c7:54:09:03:7c:1b:90:f6:26:72:76:f6:36:
24:0c:1c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org