Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/T8emsKB5lczyljjGHF2F3eJcTbc.roa
File: T8emsKB5lczyljjGHF2F3eJcTbc.roa (raw, json)
Hash identifier: 4a07axXhCdZPckF8dnSYlheAhdZRVXDKV0Ma4HqjAtI=
Subject key identifier: 4F:C7:A6:B0:A0:79:95:CC:F2:96:38:C6:1C:5D:85:DD:E2:5C:4D:B7
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BC971DC2992617A9675E9CC4340A9
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/T8emsKB5lczyljjGHF2F3eJcTbc.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398395
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Jan 2025 20:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c9:71:dc:29:92:61:7a:96:75:e9:cc:43:40:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fc7a6b0a07995ccf29638c61c5d85dde25c4db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:b3:5c:44:9c:4c:92:74:5d:33:ec:17:c4:
bc:8a:bc:31:04:55:e0:c0:8a:ba:66:ae:47:93:84:
7a:10:a3:a7:6a:00:6f:c3:35:36:be:98:5a:2d:69:
56:31:71:6b:f4:d3:51:ef:df:36:cd:53:0d:6c:69:
06:58:eb:40:41:12:89:fa:36:62:79:ff:cd:68:d9:
cd:13:41:ef:ea:d3:49:df:60:96:9c:c6:65:b2:ad:
55:8f:c1:9b:4d:39:aa:a6:ec:d3:f8:96:4d:78:b3:
22:0f:0b:42:48:be:a5:9d:9d:4b:e6:e0:e9:14:2b:
71:b4:db:29:15:b0:b0:33:4b:77:2d:e0:96:c7:70:
cb:c4:b8:4c:6a:c0:96:0b:18:22:10:4b:84:f6:98:
12:c1:c0:6f:88:b1:a6:67:31:8b:1f:2c:3d:54:0d:
b4:a4:b5:86:1a:7d:ca:51:1b:9a:ff:01:3d:1d:46:
9e:17:9f:c6:92:7e:fb:1b:2b:cb:88:62:75:1a:d8:
e7:2a:1e:00:b5:a8:4b:a9:89:bc:86:26:c1:d3:b1:
bb:c9:06:eb:9e:f2:76:62:2a:a8:c4:56:c1:0b:bd:
61:6c:56:eb:69:43:a5:ae:b5:f1:83:cb:7b:63:03:
26:4b:ab:4f:2f:c8:42:41:2e:39:59:e2:9f:6a:78:
3d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C7:A6:B0:A0:79:95:CC:F2:96:38:C6:1C:5D:85:DD:E2:5C:4D:B7
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/T8emsKB5lczyljjGHF2F3eJcTbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7c:6a:e0:dd:f7:94:84:cc:a9:18:7c:fb:5f:42:fe:96:0b:
cc:13:20:68:d1:70:ef:a7:d1:c8:c3:7a:08:60:cc:fc:22:47:
b3:d4:45:87:e3:a0:ea:71:cd:75:de:bb:d4:55:a1:8f:5b:a8:
4e:d0:3f:5b:e4:da:b3:02:b6:1e:7e:2c:9e:ab:0e:37:47:62:
a8:c7:28:de:8e:4c:a8:a4:85:90:ae:c9:85:8b:48:4d:0e:86:
8a:e8:32:9c:b2:33:65:7f:4b:45:1b:ca:43:3b:c9:a6:db:b9:
d0:83:81:44:b0:c2:71:8a:b4:cb:d8:a6:fd:49:b1:7a:ec:67:
a3:e7:97:c0:54:d4:10:97:6c:f1:df:c7:56:1f:20:b9:56:21:
b1:f7:b7:f3:75:c3:c8:d4:0b:30:6c:ee:9d:9f:29:3c:ed:9f:
73:6f:9e:3c:25:51:51:1c:2c:2c:d9:77:b9:5f:dc:e9:ba:bc:
8c:a0:5a:e9:19:64:18:75:14:24:9a:42:e8:67:38:9f:e2:ec:
eb:55:9a:91:c7:27:96:5a:6c:97:7a:e0:d1:79:72:e5:9d:83:
9a:a2:fa:7e:cb:75:d0:b6:eb:02:0e:49:23:32:6d:5d:04:88:
b2:37:50:d1:a1:47:3b:a2:dc:39:89:cb:43:19:ff:2b:29:bb:
b4:97:42:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:28:57 2025 by rpki-client