Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VCJ4Zq4mABF0IKCY4XzmiChR6wQ.roa
File: VCJ4Zq4mABF0IKCY4XzmiChR6wQ.roa (raw, json)
Hash identifier: cC17aslHgRTSQ+Ft9JJGYot71hx3dQJKawAu9Eu8lu8=
Subject key identifier: 54:22:78:66:AE:26:00:11:74:20:A0:98:E1:7C:E6:88:28:51:EB:04
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018EA706CFE65E8067283453F1B2E905D570
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VCJ4Zq4mABF0IKCY4XzmiChR6wQ.roa
Signing time: Thu 04 Apr 2024 02:53:45 +0000
ROA not before: Thu 04 Apr 2024 02:53:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140208
IP address blocks: 109.122.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 02:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:06:cf:e6:5e:80:67:28:34:53:f1:b2:e9:05:d5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 4 02:53:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54227866ae2600117420a098e17ce6882851eb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:f3:68:00:67:cb:35:6f:f1:1f:53:03:69:
2c:8c:4c:c3:02:65:ef:25:d9:43:47:9b:77:6f:18:
24:b5:2a:78:f0:48:3b:75:bf:a7:6d:e8:3c:98:ec:
9d:f5:6c:44:00:8b:c5:80:d7:e0:e9:31:79:4e:50:
78:3f:6e:e6:ba:86:a8:e1:fa:1b:08:56:f8:46:3f:
60:cb:ab:d0:f7:92:d7:69:fe:8a:f4:ed:e5:24:d4:
b8:3c:c0:76:24:83:41:89:b2:f3:0c:bb:1f:b1:60:
1b:4a:d2:a8:db:c6:8d:45:be:e8:2e:ed:c0:84:a9:
3e:dc:bd:2d:04:41:37:8a:59:e9:8c:c6:71:ab:44:
d5:d0:98:d5:9d:de:7d:61:da:a7:e5:ec:aa:66:df:
91:21:03:0a:6a:57:27:c0:fc:e0:53:b1:9a:7d:b8:
49:7f:95:da:a8:43:a8:c0:60:27:d1:ad:97:45:73:
ca:03:0b:b6:5e:4f:49:62:f9:13:9e:a8:e3:6d:b8:
2a:8a:aa:79:e5:76:61:2b:30:14:86:12:a5:48:c0:
71:ec:7d:da:c1:05:54:4a:e0:89:99:5a:74:5e:1f:
64:1b:08:e4:3f:4a:67:fd:27:7e:85:09:1b:69:57:
8d:2f:f5:50:a0:c4:93:19:50:c2:15:2c:ea:56:19:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:78:66:AE:26:00:11:74:20:A0:98:E1:7C:E6:88:28:51:EB:04
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VCJ4Zq4mABF0IKCY4XzmiChR6wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0/24
Signature Algorithm: sha256WithRSAEncryption
44:6f:75:f3:37:46:33:d2:7b:ce:04:b6:c6:f7:86:bd:20:9c:
df:75:23:7b:54:65:63:3e:ba:84:4a:42:fb:05:be:a4:17:b0:
74:4b:bf:d5:45:34:d2:14:aa:83:4f:b3:83:85:27:2c:d9:c3:
5e:8c:43:76:f4:a7:fa:e6:ab:be:49:19:d4:c7:d0:b0:6e:09:
2c:57:cb:0a:25:3c:13:e7:82:9c:46:f9:7f:aa:e8:af:e7:84:
7c:c6:56:15:79:dd:ed:50:97:0b:ee:00:7e:93:a5:0e:2f:0b:
5c:de:4a:59:7d:05:48:e3:05:4b:c2:68:01:4e:f2:22:0c:6c:
ac:aa:bc:47:bb:63:48:bb:ee:a5:5f:7a:bd:4d:35:05:5a:80:
0d:98:f6:27:db:73:c0:25:c7:61:2f:28:a5:23:90:83:6e:1a:
2c:82:12:c0:04:8e:c6:bf:16:4c:d7:05:3d:78:f5:d3:42:45:
c1:e7:69:3f:49:cd:78:b8:5d:76:39:94:86:41:34:40:69:16:
eb:c5:7e:56:71:4f:70:63:30:12:bd:1e:b5:26:2d:89:10:ac:
4f:87:63:32:0e:61:9b:60:9f:42:4b:31:fe:19:4e:c8:9c:17:
93:1c:c0:60:34:cd:95:cb:7d:af:7d:8b:10:47:71:0c:64:b8:
14:80:af:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org