Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9EA888npyZIluzkH6KJI-V3Vbk4.roa
File: 9EA888npyZIluzkH6KJI-V3Vbk4.roa (raw, json)
Hash identifier: H05qci+yjtxVFXEhoAAUwGmDh6aUXbPb466Raje/wy0=
Subject key identifier: F4:40:3C:F3:C9:E9:C9:92:25:BB:39:07:E8:A2:48:F9:5D:D5:6E:4E
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01856ED4DEB158A5EA333871F001D63EF2F4
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9EA888npyZIluzkH6KJI-V3Vbk4.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.41.0/24 maxlen: 24
109.122.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jan 2023 20:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:de:b1:58:a5:ea:33:38:71:f0:01:d6:3e:f2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4403cf3c9e9c99225bb3907e8a248f95dd56e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:ce:ee:c3:dc:46:fe:ac:c1:bd:a2:86:18:
7a:59:f2:11:1e:e5:06:cd:10:04:3e:3c:d7:60:c8:
27:de:3b:c3:b9:5a:2b:c4:69:67:c7:6f:ef:06:6f:
70:50:33:76:e6:e5:cd:e8:1f:9e:c8:00:61:c8:58:
2b:96:81:96:31:19:8a:6c:c5:b0:4a:8a:85:fb:5f:
35:0a:8c:48:5f:39:d1:f9:fa:f7:97:07:11:4a:e6:
08:6b:70:39:a7:83:3e:b2:83:4f:a1:c8:bc:a2:e4:
45:fd:25:7e:72:51:78:f6:58:61:b8:21:4a:32:c6:
e3:db:d9:4d:27:08:28:2f:bc:e9:51:23:04:1f:3a:
e4:64:be:82:58:da:ab:c8:49:87:9f:18:0c:1d:42:
b7:90:df:8c:17:3a:ae:4a:6d:32:af:c9:4c:87:39:
c0:65:af:0d:9c:49:ba:ef:7a:a2:31:6c:1b:66:be:
fe:e8:9c:2b:0f:e8:c3:29:33:60:3c:a6:67:03:e5:
ce:be:b4:d2:f7:86:35:ec:c7:5f:5c:a6:de:d0:8b:
24:3b:e5:df:d3:fb:98:37:13:bc:d1:79:d4:a2:2a:
2a:6f:d3:03:1e:87:f4:0f:e0:bc:5c:9b:3f:0e:e1:
ef:5d:56:c1:77:96:e4:dc:3a:f9:45:5f:65:7c:f5:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:3C:F3:C9:E9:C9:92:25:BB:39:07:E8:A2:48:F9:5D:D5:6E:4E
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9EA888npyZIluzkH6KJI-V3Vbk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:a8:94:df:27:c8:1c:99:c8:d1:68:12:10:74:2b:a6:ee:45:
bd:90:2f:96:3c:fe:36:92:4e:81:7d:da:be:11:97:bb:7f:f5:
50:c9:da:d8:2f:67:98:51:70:5e:61:e3:be:6a:37:0f:da:b9:
ab:37:75:4d:0b:9e:07:48:0e:9a:95:80:2d:bf:d1:ac:36:b4:
47:5a:e3:b8:66:e2:f7:a8:a9:98:63:ab:2d:60:48:eb:f0:67:
b7:3d:a4:35:5d:bc:19:4a:54:c3:43:ba:46:1c:c2:20:6e:24:
09:f0:2d:f8:74:af:aa:1f:11:5d:39:13:7a:9e:83:87:80:5a:
75:9f:1d:ce:a6:5b:e5:bf:8c:aa:cc:88:72:d2:57:f9:fe:eb:
2f:3d:42:41:18:14:df:8a:2e:52:4e:b9:2d:84:93:d3:d5:8b:
bb:44:1f:55:d8:6d:fd:fa:0c:59:4b:e9:6a:bf:14:4d:27:28:
3b:83:68:fb:f5:fa:a9:a1:8a:7d:3c:e8:e8:a7:c3:0e:c6:80:
06:27:11:57:a8:29:52:b3:73:3b:01:34:61:3b:17:7c:8e:4c:
80:31:e6:81:8f:67:d0:8c:bd:fe:2b:af:95:62:4d:93:ab:87:
02:61:4e:90:ce:25:3c:3f:e8:49:04:14:cb:99:4a:00:f9:f7:
7a:1e:f5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org