Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VUJp6WNIQwzPBzsgC-_XVWmPZ1c.roa
File: VUJp6WNIQwzPBzsgC-_XVWmPZ1c.roa (raw, json)
Hash identifier: NBDbdvaRSxtk/6rgqzLLXNWYzfLUjKE5+AMD602seNA=
Subject key identifier: 55:42:69:E9:63:48:43:0C:CF:07:3B:20:0B:EF:D7:55:69:8F:67:57
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018BEE8C69EA3EE33137EB7BC69C40C96219
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VUJp6WNIQwzPBzsgC-_XVWmPZ1c.roa
Signing time: Mon 20 Nov 2023 21:04:21 +0000
ROA not before: Mon 20 Nov 2023 21:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 05:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ee:8c:69:ea:3e:e3:31:37:eb:7b:c6:9c:40:c9:62:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Nov 20 21:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=554269e96348430ccf073b200befd755698f6757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:6b:ec:a9:93:d8:59:44:6e:00:4e:89:7e:
ec:b7:d0:e0:09:ef:53:dc:0b:d0:94:8e:41:d3:d7:
81:91:ab:ea:09:09:b1:c0:d0:07:9c:11:b8:81:a4:
70:b5:6b:3f:8b:d1:3c:8d:98:ed:ce:ad:24:ae:bd:
78:97:3d:9c:b5:4d:16:01:65:83:b5:f9:4c:07:8c:
52:2c:bd:ab:dc:f3:52:e1:e9:90:59:d2:ba:8a:2f:
a6:71:69:e4:5a:1b:98:d5:8d:41:21:68:a4:67:e3:
f5:07:25:d9:0d:14:e9:5c:94:5c:bf:cf:9c:4e:3f:
a0:b0:00:d1:b6:8d:74:d1:a6:8b:a5:73:aa:9b:1f:
fd:32:49:2d:1f:12:2b:9a:76:a7:6d:da:2a:9d:49:
60:17:ea:af:08:bd:d0:e5:e2:26:64:6e:5f:ad:01:
0b:cc:90:3d:c8:1c:a1:9d:6a:0f:a9:81:6a:61:0f:
17:f2:aa:95:73:4c:87:6f:b7:2b:c7:4e:35:13:21:
e6:48:8e:e5:91:97:f0:c0:5c:9d:0c:1c:ca:49:07:
b3:4d:2e:3c:0b:fe:ab:e6:df:05:30:76:4f:7a:c2:
55:a0:b4:76:b1:d5:2c:60:6b:0f:b9:d0:17:d8:fc:
b7:ac:66:de:21:10:2c:19:21:20:4c:35:32:a6:c6:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:42:69:E9:63:48:43:0C:CF:07:3B:20:0B:EF:D7:55:69:8F:67:57
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VUJp6WNIQwzPBzsgC-_XVWmPZ1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
55:30:98:f9:09:f2:fa:1f:f4:cb:8f:a7:72:17:db:2b:e1:5a:
80:03:bf:08:7f:cf:ac:d3:63:d3:f2:97:ee:53:c1:67:2a:2b:
60:b7:7d:51:4d:f1:7d:70:a7:28:40:82:bd:fb:8e:5a:11:66:
50:1a:67:32:66:ad:c2:c1:d2:35:fc:09:7a:de:76:1f:d7:a7:
b6:4f:cc:b1:47:c9:36:dc:2d:84:18:24:a3:1a:84:b5:5b:6e:
b4:ae:b8:e0:7c:66:bc:5f:7a:b5:72:63:54:93:14:df:08:40:
ed:c0:2f:4e:36:67:24:f9:14:59:8a:c0:51:8c:6e:14:d3:50:
f7:1f:c5:26:75:04:06:b6:29:d5:f6:f3:be:dc:53:88:1f:30:
4a:a2:0b:91:2b:d7:ad:a1:f4:48:ed:b4:47:da:d7:f6:1a:87:
23:c5:82:7d:55:02:9b:a1:f2:a1:dd:18:e0:0d:36:1d:90:0d:
33:8e:91:0e:23:e2:79:91:5e:21:58:08:c9:07:35:81:e6:53:
9e:56:ba:bc:27:d5:cd:65:81:9a:f7:17:cc:28:8e:0d:41:a8:
3b:9b:ee:65:f0:17:6e:4e:53:14:e2:49:c9:f0:aa:00:77:2d:
eb:b7:e2:96:a8:2d:58:49:db:e8:f0:0b:5d:70:66:2e:9e:3a:
0b:48:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org