Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F0p0z-1KFGmZxskKnBeBieNbEG8.roa
File: F0p0z-1KFGmZxskKnBeBieNbEG8.roa (raw, json)
Hash identifier: uMWEo73bkea6QCr0WtlW68Zju0ijleyhQz3EaPt3Cts=
Subject key identifier: 17:4A:74:CF:ED:4A:14:69:99:C6:C9:0A:9C:17:81:89:E3:5B:10:6F
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01922A9A9D17D5FE3BE6B5721B9B66737961
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F0p0z-1KFGmZxskKnBeBieNbEG8.roa
Signing time: Wed 25 Sep 2024 19:13:48 +0000
ROA not before: Wed 25 Sep 2024 19:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 09:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2a:9a:9d:17:d5:fe:3b:e6:b5:72:1b:9b:66:73:79:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 25 19:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=174a74cfed4a146999c6c90a9c178189e35b106f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:e7:41:2d:35:d0:71:cf:09:0a:aa:03:e4:
8c:27:71:61:e8:43:39:ad:27:d2:b4:d1:80:f9:92:
92:cc:39:d8:e8:c2:42:ab:59:87:c1:ae:c3:ff:96:
23:0a:2c:80:d3:13:e6:cc:c7:ad:1d:34:c3:5b:bb:
4a:ac:02:10:19:a0:46:be:4d:88:ec:cd:e8:28:29:
0f:21:76:fa:88:a0:d5:55:5b:68:a3:3b:64:91:dc:
35:1b:77:64:d3:d0:e5:f8:c8:69:28:44:32:bc:de:
04:1d:ab:87:ef:48:87:34:19:86:bb:13:4e:14:89:
d7:ff:52:32:3a:e1:1a:04:dd:42:f8:2c:a8:4c:ff:
2e:11:d9:25:c8:ea:bb:ca:87:21:32:81:de:71:91:
5a:62:32:c4:0f:19:f3:e5:6b:11:da:11:05:8c:be:
c5:09:cc:0f:d2:bb:6e:d8:a4:f2:7a:1a:60:94:0c:
12:f2:5f:5f:85:7c:81:e2:dd:5c:bb:6a:80:1b:13:
9f:e3:ce:8e:7a:3d:93:77:a5:d4:00:38:b4:6b:ac:
27:96:60:2a:f7:3b:5d:2c:d9:4a:a9:06:26:cd:92:
93:d7:53:36:96:30:9a:eb:39:a8:3e:75:e8:2a:67:
27:b6:89:dd:e8:7f:a3:5a:00:8b:d5:16:eb:05:9b:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4A:74:CF:ED:4A:14:69:99:C6:C9:0A:9C:17:81:89:E3:5B:10:6F
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F0p0z-1KFGmZxskKnBeBieNbEG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
69:58:70:50:00:f5:ef:7b:2a:c7:f3:84:9b:00:7b:5e:75:b6:
0e:ee:ed:d6:eb:a7:e8:c6:ec:d6:8a:89:ea:1c:25:48:86:eb:
0e:ea:90:7c:b6:5e:6b:37:36:8a:68:d1:ab:dc:c9:7f:0e:f5:
01:79:59:50:d0:4b:a7:e0:0b:03:70:88:b9:42:1f:a6:7a:ee:
30:31:13:34:7a:53:78:de:40:df:01:6f:12:16:64:c0:3c:69:
b2:1d:91:a9:eb:f5:af:95:4e:4b:74:25:45:89:8a:94:de:3e:
63:3b:07:43:6e:9e:b1:8d:8b:63:e1:cc:ad:7f:b6:2f:75:51:
42:16:43:09:bf:3e:97:6d:76:71:99:58:86:52:f9:39:47:8a:
c3:8e:e1:b2:c6:42:d5:c8:30:01:0c:0a:88:9f:d1:a8:5f:f7:
1a:53:cc:cb:d5:b8:38:a3:f0:d4:f1:62:e1:31:fe:f6:6e:7c:
29:8c:5e:29:d6:f0:24:30:cb:0e:34:81:62:14:87:bf:73:3a:
95:0d:fe:f3:56:f6:9e:8a:b8:66:54:83:32:e6:87:28:65:c7:
cc:31:c6:8a:2f:7c:da:66:d2:53:7d:20:b6:66:fa:7a:ae:37:
94:21:2b:4d:99:83:cf:cf:75:25:0a:4a:de:bf:23:e2:c0:6b:
e7:c8:16:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 10:49:53 2024 by rpki-client on console-fra.rpki-client.org