Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F2ae-IO_iM55IfyaizXhMEF8ZNM.roa
File: F2ae-IO_iM55IfyaizXhMEF8ZNM.roa (raw, json)
Hash identifier: nwSFTqDzvcJpAdm5TcaOJUISbpLngIxok2q7mj3JFvM=
Subject key identifier: 17:66:9E:F8:83:BF:88:CE:79:21:FC:9A:8B:35:E1:30:41:7C:64:D3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018BF06967DF72FA674890941AF2225B0C39
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F2ae-IO_iM55IfyaizXhMEF8ZNM.roa
Signing time: Tue 21 Nov 2023 05:45:21 +0000
ROA not before: Tue 21 Nov 2023 05:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 109.122.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Nov 2023 06:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:69:67:df:72:fa:67:48:90:94:1a:f2:22:5b:0c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Nov 21 05:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17669ef883bf88ce7921fc9a8b35e130417c64d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c1:85:03:96:81:59:db:34:92:4f:a8:e8:2d:
20:db:3b:3d:50:0c:37:d4:2c:71:d6:34:31:e4:34:
f6:44:8a:0d:ba:40:22:de:17:01:a1:4e:0a:f2:a2:
67:f4:80:df:c0:df:7d:2e:66:d0:2a:b3:17:0b:f9:
0e:96:77:f2:da:e4:4a:57:13:16:72:3e:f3:b4:d8:
e8:52:ff:42:7c:e9:c0:54:28:28:e9:54:ed:f2:2d:
3a:28:09:0b:cd:6b:78:92:d2:e9:c8:84:ba:9b:c7:
20:75:f2:69:3d:84:98:81:8a:ec:b3:e4:e9:9e:ae:
f7:38:c4:8a:48:3b:60:c2:62:f4:cc:21:20:b0:8b:
ec:c4:52:79:99:d8:3e:3f:ed:df:1f:da:0d:76:30:
de:7d:23:6f:51:0d:9c:08:8c:b5:85:f8:1a:fa:8d:
c3:34:f4:36:23:f5:7e:b3:91:73:9b:75:cd:ba:85:
43:62:af:f1:86:c6:45:d3:da:ef:ba:52:54:3b:4c:
81:99:3b:2e:84:9d:40:ce:48:67:a4:b5:5e:b6:78:
30:98:6f:46:df:81:d6:7d:5f:a4:cf:b9:e2:44:b2:
96:cd:6b:6b:7f:87:f6:1d:82:6c:c0:39:43:8e:f9:
b4:20:8d:44:c3:15:4d:5b:d8:ff:57:33:dc:f2:c2:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:66:9E:F8:83:BF:88:CE:79:21:FC:9A:8B:35:E1:30:41:7C:64:D3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F2ae-IO_iM55IfyaizXhMEF8ZNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a8:96:a8:14:90:2a:3e:04:2a:ad:b5:92:06:d6:57:c2:db:
d3:70:62:19:d4:f3:aa:2c:97:e4:3a:48:f0:f3:5c:38:06:ae:
09:26:48:c5:dc:cd:e8:26:94:e2:d9:06:9d:7b:86:ef:11:aa:
e1:f9:cf:5b:23:03:ed:74:1e:3b:3c:7a:5c:6e:5b:d2:e5:ec:
c0:1b:5b:f7:c7:19:07:21:7f:c8:03:51:d4:55:9a:4d:08:66:
80:d1:1f:22:f1:79:52:63:60:97:6f:29:82:18:6e:6a:90:9a:
2e:60:ee:1e:5e:8c:08:e4:88:3c:98:b9:ba:0f:8e:29:ee:f3:
27:32:d4:ed:cb:a8:f7:ca:6c:2f:a2:75:40:c4:92:fd:8f:76:
f4:2d:2d:80:a3:d9:ef:59:39:eb:9e:be:22:10:f4:3e:2d:18:
6b:6b:05:57:cb:47:3f:73:5b:36:af:67:b2:00:29:29:54:fa:
f1:52:e5:05:35:f0:6d:0c:f7:9e:48:cc:aa:0a:7d:e2:98:78:
0b:de:bf:94:32:0a:89:a7:0b:92:d3:0a:64:38:51:45:58:77:
3c:42:08:31:ef:cc:3c:3c:d1:ba:b5:b9:fd:20:5f:5b:20:74:
63:e6:88:7f:fe:62:32:bf:bb:ef:32:8f:2a:04:d7:9f:92:58:
ac:b0:5a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org