Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/UwPVge0qP3NPYlEytskjR8wLZgk.roa
File: UwPVge0qP3NPYlEytskjR8wLZgk.roa (raw, json)
Hash identifier: GYPrYvFqWHHl32B8lCmcG7RI692eXZZIu/iyrIQHNxc=
Subject key identifier: 53:03:D5:81:ED:2A:3F:73:4F:62:51:32:B6:C9:23:47:CC:0B:66:09
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01949D3CAE1399C8C1259B08B95A2CB5B924
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/UwPVge0qP3NPYlEytskjR8wLZgk.roa
Signing time: Sat 25 Jan 2025 11:33:07 +0000
ROA not before: Sat 25 Jan 2025 11:33:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 06:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:3c:ae:13:99:c8:c1:25:9b:08:b9:5a:2c:b5:b9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 25 11:33:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5303d581ed2a3f734f625132b6c92347cc0b6609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:f0:6c:bc:a1:4e:8b:3c:4d:2a:17:7c:79:
2a:23:89:2b:c8:f9:11:79:35:7a:2e:6a:48:dd:d7:
d9:cd:99:07:b8:68:f9:0c:3d:d8:0d:78:1f:a1:e5:
a3:44:c0:c5:88:86:56:b4:0a:2d:2d:77:fd:c8:0e:
3e:18:31:f0:9f:81:4a:de:76:21:47:61:66:91:51:
16:ee:fd:31:63:20:d4:86:48:94:18:a3:9e:97:4c:
c5:ad:1c:7c:47:23:e4:b8:d4:ac:35:75:0b:60:d8:
84:27:8c:e1:4a:61:e1:e9:54:25:0c:2f:15:40:9a:
15:24:fb:dd:aa:1b:5c:6f:13:94:4b:91:e8:72:f1:
d5:80:7f:48:3e:da:c5:1f:0b:fe:5c:13:cc:27:a0:
e7:e7:6b:ca:7e:0f:4c:ec:e4:a3:c2:8d:20:83:da:
05:79:65:64:c7:78:77:f8:a0:32:e0:2c:ea:2c:22:
75:21:ae:5e:f3:df:02:f7:ad:03:6c:a2:2a:60:44:
4c:1b:02:48:dd:22:bd:0b:33:b6:f4:ce:ab:dd:cb:
7b:44:48:44:2a:66:eb:5b:9f:b3:74:a9:76:a8:77:
cc:5e:56:3a:b5:ae:b8:b3:38:0c:ba:05:b3:6b:92:
ca:b8:c7:1d:c6:cd:14:7e:c4:6c:d3:6c:3d:a2:60:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:03:D5:81:ED:2A:3F:73:4F:62:51:32:B6:C9:23:47:CC:0B:66:09
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/UwPVge0qP3NPYlEytskjR8wLZgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
56:cd:a6:96:57:cd:c5:2a:70:60:a0:b9:7c:85:ae:c2:7d:38:
8a:0d:6e:7f:bf:14:39:c7:f5:72:25:22:b4:00:b6:d8:dd:c6:
49:25:96:18:66:80:16:88:93:25:e5:46:81:83:81:25:49:4e:
d1:39:96:fa:09:15:fd:37:b1:1f:78:fc:d5:49:8f:fb:fd:9b:
b7:f0:9b:b0:91:7a:8a:00:1c:ac:2c:4b:fd:5f:28:9e:f3:76:
59:37:ce:99:45:35:45:4e:96:ab:63:6c:4a:d3:ef:86:41:7a:
4d:42:05:d0:39:92:d3:ec:03:cc:72:9c:0a:8b:82:13:1b:a7:
da:e1:b5:36:da:45:5e:95:44:87:a8:f1:33:c5:4b:a8:17:ae:
26:63:cb:1d:90:0e:65:d1:ae:08:59:ec:29:2f:7d:ba:e8:02:
8d:9a:70:b7:7d:71:fd:02:b6:40:d0:7e:6d:d7:58:40:76:5c:
52:5d:98:a7:7b:5c:40:1b:03:dc:1c:6f:d1:8d:c0:a4:67:8a:
d1:d1:0b:f8:c7:b2:0f:24:ba:df:a4:8e:ab:9c:bb:29:17:3a:
08:1b:bc:11:40:31:86:e4:07:b5:75:9d:fd:a4:2e:40:4c:d0:
e4:de:f5:46:ff:f0:48:78:8c:7b:ee:93:5a:7b:93:b9:6a:1d:
0f:8c:61:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:54:54 2025 by rpki-client