Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/dHr2aYDQoTSIVvm3Ov6UpJetqis.roa
File: dHr2aYDQoTSIVvm3Ov6UpJetqis.roa (raw, json)
Hash identifier: LhdLReUWLERgCMMDFNtghBW297kAYOAhiUxvdvgGp6M=
Subject key identifier: 74:7A:F6:69:80:D0:A1:34:88:56:F9:B7:3A:FE:94:A4:97:AD:AA:2B
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01943310AF9C88741ADFE0AE7A538DDEEC61
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/dHr2aYDQoTSIVvm3Ov6UpJetqis.roa
Signing time: Sat 04 Jan 2025 20:45:18 +0000
ROA not before: Sat 04 Jan 2025 20:45:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.122.45.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 09:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:33:10:af:9c:88:74:1a:df:e0:ae:7a:53:8d:de:ec:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 4 20:45:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=747af66980d0a1348856f9b73afe94a497adaa2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:4b:2a:6c:72:d7:7f:f5:91:d3:b7:b4:06:
21:73:b0:b5:e8:78:17:75:fc:69:fb:f6:61:b9:b3:
97:68:47:da:c8:82:b2:76:50:5d:9c:ad:df:80:b2:
c3:71:4a:4e:15:2c:b9:bc:7d:2f:d5:5b:e5:c0:e7:
b3:2a:39:b4:ff:70:c6:8e:56:9d:00:4e:98:7a:5e:
89:83:de:e1:a5:5a:ab:2f:fb:4b:53:fb:3b:7a:07:
0c:c4:e9:49:ec:5b:0c:a5:2a:9a:5c:72:8c:e0:1d:
84:7a:c3:57:90:67:a2:53:b7:23:eb:e4:e4:62:2e:
e3:a4:98:c6:e9:b0:58:78:73:0e:1c:78:5a:40:00:
22:36:aa:74:75:7b:15:93:36:8c:f8:7c:36:46:a3:
22:84:04:15:d9:0f:5b:39:a2:18:be:dc:86:72:52:
b1:2a:4c:32:55:1a:76:2a:7c:7f:8b:3f:50:85:05:
ca:d8:58:3f:fd:af:c2:ea:74:d0:3c:d2:09:49:80:
1d:f9:af:c3:27:bc:8a:c8:64:55:79:07:31:19:92:
37:93:c1:db:14:dd:93:f9:71:e8:b6:d9:43:81:d3:
dc:79:2f:4e:2c:06:e8:11:d9:32:e7:5f:75:42:92:
07:32:25:d8:93:e9:89:43:9d:b9:b4:6e:15:6c:ba:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7A:F6:69:80:D0:A1:34:88:56:F9:B7:3A:FE:94:A4:97:AD:AA:2B
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/dHr2aYDQoTSIVvm3Ov6UpJetqis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.45.0-109.122.46.255
Signature Algorithm: sha256WithRSAEncryption
02:7b:56:f1:4b:2a:4c:36:fc:c8:0e:b4:fc:2a:0f:34:ee:a4:
11:13:14:19:b0:bf:dd:6f:63:a1:eb:52:9b:8d:e1:1d:5f:f7:
e6:b7:71:c3:5f:14:3d:72:26:fc:2b:48:d7:52:50:a9:a7:f1:
cf:ec:19:54:db:b9:2c:29:0c:d4:b2:31:8d:4b:77:37:a6:f9:
ea:97:20:17:4c:db:ec:9a:f3:d0:e6:85:71:a0:d6:53:b4:1d:
ef:c3:c1:e0:19:a8:ca:2f:95:82:ac:ba:49:9e:ad:f6:18:8e:
d8:0a:df:73:e0:b2:92:01:2d:6c:9a:9b:ba:e8:0d:0b:13:b6:
e0:62:83:1b:7c:37:05:eb:0a:3d:d8:30:74:34:10:d5:23:72:
2d:01:05:cd:3a:4e:5f:e8:66:db:ff:fc:ce:f4:18:1d:cc:e7:
b1:6b:24:76:ea:e9:86:9b:55:96:45:1e:f0:3c:ef:de:b2:3f:
5b:3e:cc:63:e0:38:47:b0:d0:f0:e9:8e:1e:e8:7e:13:c8:6e:
0c:f7:00:b8:95:36:25:84:b3:e3:ce:37:fb:b0:70:a0:a0:36:
11:cc:73:c5:b7:86:14:a9:60:ef:7f:67:fc:df:6c:8c:56:95:
23:4b:fc:c0:aa:c0:2f:37:32:6a:30:14:b0:a6:f7:26:ab:59:
c0:e3:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:21:52 2025 by rpki-client