Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZCf7ZWOgQLaUcWuXp36MMrrmFkw.roa
File: ZCf7ZWOgQLaUcWuXp36MMrrmFkw.roa (raw, json)
Hash identifier: mHe0OVDJDa2HVC6lyvtJBmgOjjBBHi5WKw1UO38+mT4=
Subject key identifier: 64:27:FB:65:63:A0:40:B6:94:71:6B:97:A7:7E:8C:32:BA:E6:16:4C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0190BD6ED128ABDBD45A58A78DA81851A15F
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZCf7ZWOgQLaUcWuXp36MMrrmFkw.roa
Signing time: Tue 16 Jul 2024 21:24:34 +0000
ROA not before: Tue 16 Jul 2024 21:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 09:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bd:6e:d1:28:ab:db:d4:5a:58:a7:8d:a8:18:51:a1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 16 21:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6427fb6563a040b694716b97a77e8c32bae6164c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:07:86:88:e7:65:e5:75:bf:85:fb:80:1e:
dd:44:54:10:f2:5d:3a:5d:46:23:2b:77:f4:de:00:
b5:6e:a4:0d:28:0e:90:9c:0a:c2:28:aa:28:9c:e8:
d7:0d:e1:da:54:80:92:68:d0:d7:1a:81:03:7d:36:
df:21:ce:18:05:83:50:2a:c5:4d:98:7f:7b:23:c7:
ea:dd:e1:bc:19:68:d9:14:15:79:0d:d9:d9:e7:f3:
18:5b:07:2b:5b:30:ef:a4:6a:5f:8c:59:a4:24:8d:
38:ce:95:09:4a:c9:a7:73:9e:04:d0:8f:5a:73:d4:
58:23:77:0c:14:4b:b0:b1:a1:34:71:10:8d:54:70:
51:86:a8:a0:23:16:a5:c1:32:6f:c4:4f:0b:ea:0d:
81:88:1d:7c:75:35:21:31:57:3f:c9:a4:56:db:00:
18:31:74:4b:86:f6:c4:c7:84:38:6b:02:ac:4d:b4:
e5:02:a0:4f:45:46:a4:57:7b:1d:d8:9b:f7:18:52:
c9:07:82:45:1f:0b:71:b1:b9:a2:11:59:72:79:0f:
cd:30:80:b4:eb:0d:07:b6:0d:ca:38:27:b0:e7:f9:
f5:35:ae:ed:08:03:e9:ed:f2:19:03:33:b3:c7:cc:
64:7a:91:46:f6:50:1d:3f:27:93:d7:f7:b8:d8:0b:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:27:FB:65:63:A0:40:B6:94:71:6B:97:A7:7E:8C:32:BA:E6:16:4C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZCf7ZWOgQLaUcWuXp36MMrrmFkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f3:a0:c4:d5:1d:c6:45:59:ca:b8:2f:47:8f:05:d5:38:d0:
d6:a5:d1:fb:e3:48:06:8e:24:96:a6:e6:1d:fd:6f:88:70:e6:
19:c4:21:09:7c:0b:81:31:64:1c:61:1a:69:ce:20:bd:9d:10:
02:0c:cb:54:e4:b2:e1:e3:fe:b3:b0:03:a7:b5:a2:cb:66:8f:
b6:19:45:07:1d:19:8b:92:45:07:e0:5b:83:55:d9:de:b0:7c:
75:95:4d:de:5e:af:39:f1:4d:21:25:f9:ff:aa:58:55:0a:fb:
26:52:17:dd:42:a3:0e:8e:a0:2a:ed:16:a6:b3:f2:3d:ac:41:
76:1f:f8:d5:f8:a8:3d:a5:e5:14:f0:cd:ad:72:c4:07:e1:13:
2e:98:ac:fa:d3:a0:b8:fd:04:c7:7d:59:20:ee:fd:fd:84:b9:
45:7d:ac:ba:0d:8d:3e:43:d1:ca:3a:e9:ff:62:d6:d9:5f:4f:
35:50:c2:71:a2:8b:50:c0:b0:7d:dd:72:af:ff:f9:90:d2:06:
92:07:33:6d:28:17:49:73:29:ff:12:11:81:29:4b:b7:dd:eb:
9f:ef:72:73:29:ce:1c:e5:7a:b5:43:84:c2:a2:4a:f3:d2:a5:
61:a6:e7:f2:cb:78:21:ec:41:6b:87:d3:e1:5d:00:15:a1:7f:
51:a9:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 12:09:15 2024 by rpki-client on console-ams.rpki-client.org