Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/P7KpB_naQd2w_P4zDNZBnaJcHDk.roa
File: P7KpB_naQd2w_P4zDNZBnaJcHDk.roa (raw, json)
Hash identifier: v2ZmdxZjWqz9qlNoqdeJ4+zHXXts2Cs7pPdsgtlfpXg=
Subject key identifier: 3F:B2:A9:07:F9:DA:41:DD:B0:FC:FE:33:0C:D6:41:9D:A2:5C:1C:39
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018D5EF216085C4678136D68C68DD9B303C0
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/P7KpB_naQd2w_P4zDNZBnaJcHDk.roa
Signing time: Wed 31 Jan 2024 09:55:40 +0000
ROA not before: Wed 31 Jan 2024 09:55:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 10:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:f2:16:08:5c:46:78:13:6d:68:c6:8d:d9:b3:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 31 09:55:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fb2a907f9da41ddb0fcfe330cd6419da25c1c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:b0:c8:95:15:a4:a6:e9:1a:0b:09:8e:60:
db:7f:8c:3c:0c:49:da:77:14:9e:f0:94:b8:90:21:
6b:e3:77:66:c4:b1:08:f8:ec:f8:d7:af:3b:0f:1f:
ee:fe:c3:65:08:7d:b8:69:df:08:ca:c6:6b:f1:ce:
7e:e2:3b:ba:73:9b:0f:5f:d9:94:ae:52:e3:9b:b0:
4f:68:68:12:97:d4:d6:6b:d0:d8:cb:08:5e:a7:27:
95:49:19:b2:f6:60:8a:c1:87:8a:e2:7d:2e:1a:ce:
78:b8:b2:4d:df:83:96:62:f9:a7:da:5e:dc:27:6a:
43:94:a1:94:32:c5:b4:de:96:97:08:be:08:eb:bc:
7d:f7:63:3f:78:cd:8d:19:fc:f8:c1:21:c3:17:ce:
f5:bb:bc:29:a8:54:6b:1b:9d:24:28:b3:b6:dd:36:
87:e0:67:87:bb:4c:cc:42:44:b0:0e:ab:c4:d4:b5:
e3:9f:c1:78:17:64:38:35:38:6f:24:b1:1b:5d:14:
e0:14:b0:96:56:26:f6:d2:9c:2c:72:7a:46:49:59:
c6:a6:80:e3:b9:63:58:9f:c8:92:5a:6b:c2:b0:cd:
e1:cc:2c:f5:e0:87:7f:23:60:26:83:6b:b5:63:27:
e9:fd:e6:c4:6c:2b:ab:b5:10:60:9c:a5:bd:c3:f3:
52:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B2:A9:07:F9:DA:41:DD:B0:FC:FE:33:0C:D6:41:9D:A2:5C:1C:39
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/P7KpB_naQd2w_P4zDNZBnaJcHDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
70:9e:c8:96:de:a0:6f:d6:79:cd:9b:c1:14:4b:6c:53:e4:fe:
a5:1a:09:72:f7:89:4b:31:05:10:2f:68:ed:a7:66:0a:06:e6:
4f:0a:20:43:d9:da:33:33:fe:54:2d:ed:b0:cc:69:85:f6:5c:
dd:40:dd:7d:78:16:cf:11:e3:db:ff:76:af:d0:a5:f0:95:45:
de:19:7e:a4:93:3f:08:ba:37:21:91:53:c5:db:5b:94:a1:4c:
d8:6d:f9:d0:36:a4:f1:ff:b8:b3:9d:0d:b9:45:3d:95:37:68:
14:62:74:7c:11:5b:aa:13:96:9c:0b:f2:46:34:45:83:5b:c2:
d1:5b:f0:7b:0b:d4:1a:55:c9:74:5e:8f:50:1f:6e:62:39:9f:
ed:5e:9a:e7:09:2b:7f:d5:47:f1:3e:7b:50:28:0f:83:b8:12:
b1:cb:25:6d:4a:0a:0d:ea:6e:6c:51:8d:cf:ce:90:1c:ac:25:
d1:73:81:15:0b:19:6f:a0:d9:2a:ea:b8:95:30:52:c5:23:c0:
90:fa:11:e9:61:13:56:39:e1:65:46:73:b1:a5:e9:bb:18:f5:
e6:7c:66:8d:1c:91:8c:45:31:28:aa:e1:9e:fe:d1:2c:e4:20:
a9:e5:cc:60:62:9d:fa:58:dd:e8:d1:9f:6b:17:67:9c:9a:34:
eb:9f:c4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org