Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/beELgksGozaMB2uKmqUVOBmpB3c.roa
File: beELgksGozaMB2uKmqUVOBmpB3c.roa (raw, json)
Hash identifier: 5+pTCLLrL8bZTY7HJgQb09pA2fk5qU7YmvSXhldd844=
Subject key identifier: 6D:E1:0B:82:4B:06:A3:36:8C:07:6B:8A:9A:A5:15:38:19:A9:07:77
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0187939F939D760B5C6B774500797E07A96B
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/beELgksGozaMB2uKmqUVOBmpB3c.roa
Signing time: Tue 18 Apr 2023 09:08:41 +0000
ROA not before: Tue 18 Apr 2023 09:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Apr 2023 10:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:9f:93:9d:76:0b:5c:6b:77:45:00:79:7e:07:a9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 18 09:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6de10b824b06a3368c076b8a9aa5153819a90777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:d3:62:1f:5c:3c:a9:9f:2e:8c:85:eb:b5:
5d:0f:4f:96:1f:b6:bf:d4:6f:0e:59:53:9b:78:10:
f6:f1:7f:5a:8f:eb:48:11:b3:4b:c5:b0:fe:0a:3a:
02:8e:cc:d9:91:30:32:f5:44:23:94:69:7e:86:fe:
fa:16:4e:21:70:b3:9c:02:8b:39:c8:47:1f:d7:6c:
59:ca:7b:33:83:37:3e:2d:63:90:d9:5c:0c:aa:68:
ea:7d:fa:f9:85:22:d3:12:95:52:ba:c5:93:80:ba:
94:fa:d8:84:93:b3:a6:fc:3b:6d:26:2c:f5:69:e6:
09:11:b6:fb:b0:37:2b:03:11:d5:ef:a9:a5:00:e7:
ba:44:b8:72:80:8e:8d:ca:47:25:19:1e:a7:e4:dc:
94:8b:67:6c:30:c5:69:62:43:85:12:46:b1:05:ed:
bf:df:ac:c5:af:bb:8b:a0:4e:fc:8f:45:05:20:5f:
da:9b:1d:67:01:da:48:9a:bb:6b:98:ae:3a:8e:6c:
a4:c9:18:95:da:ac:9a:77:d6:bc:73:b2:ea:48:18:
8f:da:a2:97:66:5a:77:0a:33:e5:11:0c:ce:0d:85:
77:73:31:37:aa:81:fa:e1:e2:95:0a:2a:70:cb:4b:
40:e3:ff:3a:c7:c1:02:47:2d:65:9f:4b:13:9e:f8:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E1:0B:82:4B:06:A3:36:8C:07:6B:8A:9A:A5:15:38:19:A9:07:77
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/beELgksGozaMB2uKmqUVOBmpB3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2c:b2:64:54:8f:5e:22:28:7b:c9:f1:13:c5:dd:43:00:9d:
44:dd:9c:35:d7:ef:50:cd:63:82:29:c3:5e:ab:a6:be:2d:5c:
f1:5f:bb:b5:96:27:9d:47:64:3b:e0:a9:32:10:7a:2b:1f:51:
94:d7:63:c6:ed:d1:7c:fe:95:0a:2a:3d:0b:20:b2:9f:e8:e7:
af:e8:3d:60:ea:af:65:09:ad:04:42:ba:5d:55:80:79:c4:8f:
d0:0e:11:63:dd:4d:35:ba:2f:57:d8:39:57:28:32:70:90:6e:
67:97:a6:4e:3f:a7:9b:03:16:1d:40:7e:0e:97:a5:43:c5:1f:
62:31:c1:52:2a:c9:94:9b:a3:fa:66:e7:a4:bf:34:eb:2f:23:
fd:28:26:8d:f4:be:87:dd:5f:4e:7d:8b:05:54:0b:75:55:2f:
20:a3:08:46:a2:f6:1b:b2:cf:09:02:93:2a:d2:24:f2:2d:25:
35:46:06:88:39:f8:f7:67:e6:8a:79:73:6b:02:59:c6:f6:36:
cc:70:e1:1a:b8:2e:86:89:ae:7e:b9:2f:5e:fa:99:fd:3c:d4:
9c:f6:31:96:a8:d1:43:f9:96:ed:67:86:a8:5a:30:be:14:cf:
d0:cc:f0:d1:35:ce:d3:35:ba:c3:84:7c:b0:ac:e1:c7:a7:c8:
2f:d3:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org