Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/57eXohnjyTJogoKCyFFsr0tTyBU.roa
File: 57eXohnjyTJogoKCyFFsr0tTyBU.roa (raw, json)
Hash identifier: IUZF4rTJg8QyOKSMXzQUNgnxnqPph72OvIf+y8y0+9Y=
Subject key identifier: E7:B7:97:A2:19:E3:C9:32:68:82:82:82:C8:51:6C:AF:4B:53:C8:15
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018F60524AAB8C64EDA1332C2D4D16D05D98
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/57eXohnjyTJogoKCyFFsr0tTyBU.roa
Signing time: Fri 10 May 2024 02:25:56 +0000
ROA not before: Fri 10 May 2024 02:25:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.40.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 18:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:60:52:4a:ab:8c:64:ed:a1:33:2c:2d:4d:16:d0:5d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 10 02:25:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7b797a219e3c93268828282c8516caf4b53c815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:21:91:ca:b5:43:65:fd:6b:68:96:61:80:
ea:3c:b6:b8:4d:bf:86:64:c0:7b:2b:e4:c5:77:d5:
dd:ab:43:31:69:02:5d:14:1b:19:fa:90:05:bd:1f:
cf:f7:fb:c5:65:a8:2d:c5:9c:a2:56:01:5d:be:94:
f7:ab:69:3b:05:1d:2f:f0:b1:e2:ce:ef:27:47:6c:
79:41:36:b5:be:a6:ba:ca:8d:ad:66:bb:cf:de:be:
f4:12:63:13:13:34:8e:7b:6e:9d:9c:77:4d:61:bc:
1b:b6:69:2c:b1:23:b1:dd:e3:14:4e:e9:06:33:70:
27:ba:70:1c:a4:9a:ef:7e:dc:20:48:56:98:15:fa:
86:30:63:e5:8d:98:57:5c:ef:76:8a:3f:ad:92:1c:
6b:05:c8:b6:ef:59:da:84:6c:a7:d2:a4:9b:eb:7e:
c3:55:20:60:ef:77:50:82:54:86:6b:79:09:7e:ef:
79:78:ee:01:d6:67:64:e6:46:e2:d8:20:3e:52:8a:
c7:e6:ff:f1:44:71:6e:d6:5c:4d:7e:30:68:92:53:
79:5d:6d:66:5d:2a:af:14:b0:a6:96:7a:40:19:7a:
b2:d1:10:83:ab:05:c8:20:70:5e:f7:b8:f1:60:ef:
ce:36:a5:4e:94:c2:e0:97:d3:2c:b6:e0:75:74:9c:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B7:97:A2:19:E3:C9:32:68:82:82:82:C8:51:6C:AF:4B:53:C8:15
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/57eXohnjyTJogoKCyFFsr0tTyBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:11:fe:e9:0c:eb:22:f0:09:26:13:6f:cf:28:fa:88:56:9d:
81:5d:55:a4:4b:30:19:3a:dd:f0:0d:cf:01:b8:6e:44:24:d7:
1c:9c:a3:b7:35:0c:57:ff:a8:b9:8f:e5:4d:a8:5b:10:e0:6d:
fc:07:28:96:0d:90:ae:d2:44:39:8b:c5:d9:ed:b7:3d:8a:97:
c4:b3:fc:44:18:5d:b8:92:69:96:a8:6e:fd:ce:8c:e6:45:20:
1c:65:40:4e:58:32:87:99:d1:d0:ec:37:8e:74:2b:7d:27:2d:
3e:de:1a:7b:0d:d1:7d:59:b8:0e:6d:0f:59:81:4d:1f:a8:35:
0f:ee:71:b9:8d:f3:ce:2b:e2:30:e1:20:d2:f4:28:a9:b0:54:
1f:90:ed:54:8f:cb:25:f9:ca:6a:a1:58:05:54:21:86:d9:87:
27:eb:9c:4f:01:34:80:15:a7:ef:d0:46:25:c8:59:3e:b9:23:
68:8f:5f:4b:a3:c5:30:22:15:a7:92:82:f8:cd:21:64:b2:97:
60:2e:98:70:b8:44:89:d4:38:6d:0b:21:4d:e9:7a:a0:cd:97:
22:20:3a:af:04:91:17:8d:41:88:89:e8:07:95:52:09:38:af:
55:00:a5:10:99:05:b7:32:23:73:c5:23:ac:92:d3:4d:ce:58:
9c:e2:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org