Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/H1H1OKLPfxTAFB6q4bxf52wSLc0.roa
File: H1H1OKLPfxTAFB6q4bxf52wSLc0.roa (raw, json)
Hash identifier: iomuE2JeqlPMDZsKfDSaCJYYwyauKYynDFdub/UPo+8=
Subject key identifier: 1F:51:F5:38:A2:CF:7F:14:C0:14:1E:AA:E1:BC:5F:E7:6C:12:2D:CD
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018AB3CFD8024457A50DE2AE6295BF34C86D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/H1H1OKLPfxTAFB6q4bxf52wSLc0.roa
Signing time: Wed 20 Sep 2023 18:17:37 +0000
ROA not before: Wed 20 Sep 2023 18:17:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 109.122.42.0/24 maxlen: 24
193.93.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:cf:d8:02:44:57:a5:0d:e2:ae:62:95:bf:34:c8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 20 18:17:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f51f538a2cf7f14c0141eaae1bc5fe76c122dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:26:a6:51:52:b2:89:9c:39:3e:ec:2a:8d:
c2:f8:ce:1f:66:89:c6:5a:42:f2:ef:a1:71:8a:2a:
84:4e:31:6c:c2:44:6a:0c:7d:01:cc:7f:8d:97:54:
f6:88:07:96:53:49:3d:b2:45:66:08:fa:2f:5d:d1:
de:b8:ff:5e:e2:89:ee:84:7b:60:e6:e6:f1:ac:a6:
3e:62:57:ee:4d:05:55:67:f3:ad:10:31:64:5a:c2:
2e:eb:40:4d:df:c5:6e:c5:91:cf:12:e3:62:48:57:
ee:b9:67:bc:85:16:a0:6c:7a:89:dd:da:15:e0:b5:
a5:d0:e7:ed:ee:86:61:a7:64:ea:9d:5a:59:7a:3f:
61:62:28:22:6a:d1:f3:f6:a5:ce:2b:8d:4b:a1:07:
28:d7:7c:44:a8:b1:38:f5:64:db:4d:c6:39:5b:cc:
50:74:1a:70:30:48:3f:08:77:72:7b:9f:ed:dd:28:
27:21:1b:61:9e:d3:d2:48:ad:b8:0a:c1:de:79:80:
51:96:8a:c7:92:4d:27:07:14:64:f2:a7:4e:6f:e2:
0c:1a:1b:26:10:89:e9:b4:24:0a:f0:ce:12:06:23:
43:4b:91:2a:05:aa:5f:52:90:d4:02:07:67:87:a1:
23:cc:f3:5d:15:24:51:8d:ce:6d:07:fe:ba:cb:3b:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:F5:38:A2:CF:7F:14:C0:14:1E:AA:E1:BC:5F:E7:6C:12:2D:CD
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/H1H1OKLPfxTAFB6q4bxf52wSLc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
60:db:63:37:19:c6:a2:9f:69:87:bb:85:d2:d5:eb:49:a1:9a:
af:9f:71:4c:80:0a:8f:f1:9b:5f:09:c2:bd:6d:50:fd:71:12:
78:6d:7c:02:92:ae:8e:39:d5:b4:f8:dc:c6:ed:83:36:62:fb:
a5:bb:5e:b0:d9:83:87:bf:5d:07:4b:0d:30:d9:58:95:c8:27:
f1:69:cf:7a:ec:c6:35:2b:46:de:90:ea:0e:90:80:35:a7:2b:
77:15:71:04:e2:54:74:2c:ba:74:0c:5a:de:0e:4b:d3:bd:15:
f6:16:1a:40:36:bd:5f:f2:7b:c7:1e:18:1b:a8:2e:29:39:cb:
82:ca:1d:f3:bb:9d:72:f7:70:d7:95:22:6b:31:e8:2d:01:6a:
63:38:3f:bc:14:42:2a:d0:cb:1c:95:6e:62:02:19:d2:5c:97:
d7:ab:3b:89:d3:cf:37:88:c9:72:4e:ae:89:2c:a2:0e:22:6b:
88:6c:85:0c:84:4c:37:50:3e:86:bf:01:91:0b:00:ee:3f:a2:
7a:e5:50:66:bc:3d:49:5d:b1:31:e3:c5:a0:bf:49:6d:28:70:
9f:8a:c0:46:f1:43:0e:00:a8:03:81:cc:1d:cc:77:78:4a:bd:
03:cc:b1:61:74:f2:4d:28:94:e8:e2:7c:b0:c8:23:96:81:a1:
8f:5f:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org