Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8TMfsCycBR0jEDyMl2DMgfcxTHE.roa
File: 8TMfsCycBR0jEDyMl2DMgfcxTHE.roa (raw, json)
Hash identifier: 9t1aIgogvv5z+c0XjMseTkcK/HAVl921m2BgSA1JDnY=
Subject key identifier: F1:33:1F:B0:2C:9C:05:1D:23:10:3C:8C:97:60:CC:81:F7:31:4C:71
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018A2AEDC2262C0115D0DE774782BD79FB90
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8TMfsCycBR0jEDyMl2DMgfcxTHE.roa
Signing time: Fri 25 Aug 2023 04:22:19 +0000
ROA not before: Fri 25 Aug 2023 04:22:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.42.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 11:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2a:ed:c2:26:2c:01:15:d0:de:77:47:82:bd:79:fb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 25 04:22:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1331fb02c9c051d23103c8c9760cc81f7314c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:4f:e3:58:b1:13:14:11:3a:46:82:47:a9:
88:84:6f:7e:c6:a5:1f:7a:b2:75:89:cb:d4:5a:9d:
ed:e3:67:d5:7c:93:37:2b:fb:9f:84:fc:60:c2:5e:
3e:34:fb:d2:54:24:f9:5f:b5:ea:15:84:d7:77:2c:
68:7f:03:f6:ee:37:b6:29:24:5a:6f:d2:88:e2:69:
0a:09:96:ad:cc:51:c5:12:31:3f:87:43:e2:e9:72:
5b:ec:60:bb:cc:77:11:fc:03:3a:b2:10:49:e1:d6:
e0:28:76:d1:3e:aa:47:69:96:ea:2d:af:32:44:84:
fe:9c:8a:9c:59:f6:55:19:c4:a9:ed:ac:08:58:28:
e2:28:4d:ff:74:2f:55:88:d0:77:12:26:6c:a4:51:
24:49:a3:aa:db:b8:e9:f7:07:20:c0:fc:10:9f:dc:
47:b7:a9:c1:3c:30:c2:3c:ac:7d:0c:73:28:05:7b:
05:34:03:88:3b:c9:fe:30:0f:d0:b9:85:69:9d:fe:
4d:b1:86:4c:9d:1c:89:9e:88:34:41:b5:be:9c:1e:
a0:ca:90:ea:a6:78:8b:cb:f4:2c:90:9e:1a:3a:d6:
6c:2f:96:97:69:70:5c:27:49:71:9f:44:41:dc:a3:
e0:ee:54:12:19:97:aa:97:94:17:5d:7c:f4:ed:71:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:33:1F:B0:2C:9C:05:1D:23:10:3C:8C:97:60:CC:81:F7:31:4C:71
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8TMfsCycBR0jEDyMl2DMgfcxTHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:79:2b:9e:8a:f6:88:b1:a4:4d:eb:fd:bf:a5:96:a5:84:12:
c3:e5:c4:b6:98:15:90:82:e1:2d:82:8c:ec:5d:ae:92:d1:ba:
cf:89:7b:0e:c6:f1:b5:e2:f1:8a:42:c9:ce:4c:a5:2f:1f:51:
13:29:30:05:06:d9:55:a4:f0:18:7c:64:e7:ac:61:cf:0e:e2:
db:00:3e:8d:66:63:0b:f0:97:9d:1b:37:63:52:87:e8:4c:bf:
c3:92:c2:c8:26:49:be:2f:d7:a7:d4:aa:0c:81:45:88:31:8c:
b4:96:8e:5e:c3:ea:c1:b6:b0:f0:79:3c:3f:61:23:39:90:b3:
ce:3c:77:0d:be:53:e6:86:43:e6:9b:6d:cf:f9:1b:13:f4:a1:
6e:8e:c4:ba:6c:e2:bc:7a:9d:e7:f8:79:ee:2d:fd:6c:05:c0:
2c:b4:fe:59:88:bc:ef:a8:87:48:25:86:30:62:3b:dd:53:a4:
96:8d:c4:1a:21:f4:05:19:ac:b6:6b:cf:32:c1:fc:d9:e9:39:
a9:55:35:ce:04:f8:af:53:b3:29:8a:24:58:01:74:94:5b:da:
2a:c2:0b:45:5b:ab:1b:15:d7:65:b7:c9:52:80:27:df:8e:48:
02:70:59:d6:89:a6:cd:21:92:1e:55:64:de:94:fb:78:8e:55:
dd:9a:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org