Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ToA9q-nKC8moKwjjEqLWh0ueaCE.roa
File: ToA9q-nKC8moKwjjEqLWh0ueaCE.roa (raw, json)
Hash identifier: opPOYdza6+0EFt3L/9BErlJWdxYMbFlGo/eCn/bhmGM=
Subject key identifier: 4E:80:3D:AB:E9:CA:0B:C9:A8:2B:08:E3:12:A2:D6:87:4B:9E:68:21
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018A506B0173050859505E0FE5C52E966AE4
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ToA9q-nKC8moKwjjEqLWh0ueaCE.roa
Signing time: Fri 01 Sep 2023 11:05:04 +0000
ROA not before: Fri 01 Sep 2023 11:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.42.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
193.93.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 13:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:50:6b:01:73:05:08:59:50:5e:0f:e5:c5:2e:96:6a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 1 11:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e803dabe9ca0bc9a82b08e312a2d6874b9e6821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:74:72:72:de:1d:93:88:3e:7c:e7:62:cb:
59:37:b3:cc:a5:7a:4c:72:dc:23:ec:c4:ac:96:d6:
67:f3:61:2a:5b:14:8d:83:ba:2e:51:a4:a8:05:d7:
7c:0a:85:4f:ab:0c:51:a4:90:d7:0a:6f:8f:31:d7:
1b:cb:95:29:f9:64:b6:58:f7:ed:de:3d:62:bd:a3:
a3:89:9e:db:38:35:ea:da:50:83:b1:f7:29:76:2c:
f8:eb:60:95:55:99:92:ef:8b:5e:86:ed:b5:ff:0a:
d8:e8:ea:50:db:8b:a6:02:54:26:26:00:33:07:e1:
4a:32:de:3b:30:1b:c7:52:f8:b4:09:ea:29:23:bb:
bd:66:45:41:c7:97:3c:8d:3e:e2:4b:ce:4f:ac:85:
44:4f:1a:77:3d:11:a9:60:94:26:04:5a:43:e8:13:
43:6b:40:07:0e:98:3e:79:56:35:db:9c:3b:ad:c9:
71:b3:44:41:52:76:2e:92:8e:de:dc:89:a4:aa:98:
e8:02:9e:72:95:4e:97:55:eb:69:f0:39:80:2f:2b:
95:8f:0b:f8:dd:03:93:7b:a6:d1:95:95:a6:3e:a9:
29:9d:c3:d5:df:48:1d:2e:3e:6d:b0:c6:18:29:bf:
c4:11:27:5a:33:bd:88:13:8f:8f:ea:e0:33:59:c7:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:80:3D:AB:E9:CA:0B:C9:A8:2B:08:E3:12:A2:D6:87:4B:9E:68:21
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ToA9q-nKC8moKwjjEqLWh0ueaCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
109.122.46.0/24
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2a:74:18:08:ba:56:6c:34:a4:f2:42:2e:8b:54:8f:8d:4d:
70:32:a0:5f:10:ca:11:51:ac:75:f5:cf:6e:66:89:94:af:b5:
c3:23:a2:5f:1b:56:18:f1:03:79:ba:f7:61:3f:bf:85:c5:0c:
f4:18:4f:89:a5:02:d5:e7:76:6d:47:a6:b6:03:9a:cc:d6:db:
a3:97:46:2a:55:bd:79:85:68:ee:6b:0e:ae:aa:84:c8:1f:a3:
cc:c8:a6:66:a8:dd:1a:27:ef:da:1e:7c:dc:85:28:7e:14:b3:
d2:6d:cf:25:40:f4:1c:d9:9c:91:41:09:b9:72:c2:7e:48:48:
68:79:85:5f:4e:1d:d3:c4:eb:14:f9:8d:da:61:65:59:89:af:
1d:40:15:7b:72:d4:ef:1b:a9:95:ee:b8:ac:28:5e:cb:73:33:
44:0e:d5:68:e9:0d:77:cf:48:ea:7e:3e:70:19:fa:20:6f:76:
6e:4e:9a:c5:e5:7c:50:98:81:57:af:c4:49:de:3c:06:4f:a8:
e4:d4:da:87:22:dc:18:00:62:56:82:94:88:be:5c:51:c7:55:
06:e8:91:4d:86:f7:ea:56:be:2f:43:15:62:8b:d4:82:a6:6e:
30:09:74:d3:f2:69:c0:e0:7e:91:71:ea:33:b4:17:6a:a0:8f:
61:dc:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org