Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/WoHGXKuWGuksH0kHkirjkK-ovec.roa
File: WoHGXKuWGuksH0kHkirjkK-ovec.roa (raw, json)
Hash identifier: 1bOXH1YGUO0wwksI7YGiKqr+/xE+dA7V5KTkEhLmTbg=
Subject key identifier: 5A:81:C6:5C:AB:96:1A:E9:2C:1F:49:07:92:2A:E3:90:AF:A8:BD:E7
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018D0BEEE0B42EE599D3C99B5528E1CE08B4
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/WoHGXKuWGuksH0kHkirjkK-ovec.roa
Signing time: Mon 15 Jan 2024 07:03:40 +0000
ROA not before: Mon 15 Jan 2024 07:03:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 10:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0b:ee:e0:b4:2e:e5:99:d3:c9:9b:55:28:e1:ce:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 15 07:03:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a81c65cab961ae92c1f4907922ae390afa8bde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:2c:9d:0b:78:39:8a:b8:9b:a0:5b:6b:fe:
9f:a2:11:09:f8:39:99:c8:53:80:01:96:67:46:26:
07:79:5f:58:7b:3f:01:ac:3d:7a:e7:0e:b0:ed:24:
b4:14:83:b5:c1:72:d8:d4:f0:a7:f7:35:e0:99:6e:
22:86:6d:b0:2c:1b:ba:7d:65:01:5a:fe:e1:74:b9:
28:47:96:85:4b:26:ea:7b:a0:ba:db:7f:e1:71:3f:
0e:89:99:53:ec:f3:9e:de:90:ea:0d:14:2f:eb:ae:
02:31:86:91:6e:2a:56:3c:de:f1:45:de:05:4f:7a:
cd:71:46:b1:0e:92:09:02:ed:28:a4:87:36:3c:b7:
74:69:d7:93:e0:98:ae:24:db:19:04:52:1d:cf:31:
83:a9:d3:0d:b2:a1:36:43:e5:00:03:6e:b7:62:40:
e2:5c:b9:e3:e6:7c:cd:1c:b0:b7:05:b1:4e:bf:b4:
43:29:26:12:fd:ba:81:5f:94:e6:49:78:00:9b:f6:
dd:e2:85:6b:0a:9e:85:b9:e8:3c:ed:5d:6a:11:de:
b0:14:3b:c6:50:c6:ed:44:e5:17:b1:25:55:34:87:
00:ac:d0:50:b5:88:11:62:bc:70:3f:d7:57:ce:b7:
c4:d8:fc:10:e4:4e:21:91:bd:97:0a:e9:e2:8d:72:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:C6:5C:AB:96:1A:E9:2C:1F:49:07:92:2A:E3:90:AF:A8:BD:E7
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/WoHGXKuWGuksH0kHkirjkK-ovec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b0:40:5e:d6:e6:31:56:c9:a1:5d:0d:3c:b4:41:70:7d:f4:
03:4c:a0:77:5b:c9:17:30:34:bb:43:3c:1e:52:da:aa:30:5a:
03:78:03:fb:bd:d7:ac:f0:6d:cc:dd:0f:3f:34:93:a2:e4:bf:
8f:91:d5:88:bb:cb:19:68:9e:48:8f:da:aa:94:ed:5e:22:dc:
6b:5b:81:8f:4c:d3:99:39:45:86:ed:70:11:13:79:ad:3e:89:
72:91:39:e3:be:62:56:54:e9:a0:dd:6e:42:8e:02:9f:27:7a:
ab:60:8c:37:4c:66:50:bb:c5:c9:10:5c:cd:36:59:50:f3:e8:
45:14:56:0d:a5:f3:8d:e6:96:ec:79:91:ea:aa:8f:f9:02:95:
da:5c:5a:79:1a:bb:ee:14:2e:bd:14:ae:f3:b4:f5:b6:f9:6b:
92:c4:ff:be:68:15:95:48:9e:96:ef:62:59:59:1b:4d:08:2d:
58:16:29:86:4f:04:65:ec:51:2c:d2:ed:42:f1:6e:0b:0a:6e:
65:09:81:d5:81:1a:61:1d:b1:4a:b3:d4:3d:5d:33:ac:59:68:
ef:9f:5d:42:d9:47:17:78:f0:d8:d7:2a:ec:57:de:cf:e7:66:
62:35:45:72:e5:e5:04:3f:9f:e6:1e:4f:52:95:68:e9:5d:29:
78:a6:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org