Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fD-CgiW2Ufq1DZJJRjBfOukoGFY.roa
File: fD-CgiW2Ufq1DZJJRjBfOukoGFY.roa (raw, json)
Hash identifier: SBYVo5pUG0KY59pINLfu6+vI36AKlaaF/HtfrZE3okk=
Subject key identifier: 7C:3F:82:82:25:B6:51:FA:B5:0D:92:49:46:30:5F:3A:E9:28:18:56
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01885637001A365A929379C384256B730C68
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fD-CgiW2Ufq1DZJJRjBfOukoGFY.roa
Signing time: Fri 26 May 2023 04:00:25 +0000
ROA not before: Fri 26 May 2023 04:00:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 03:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:37:00:1a:36:5a:92:93:79:c3:84:25:6b:73:0c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 26 04:00:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c3f828225b651fab50d924946305f3ae9281856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:a0:56:23:b9:57:c7:aa:86:87:02:a7:e8:
f6:d3:00:51:df:f8:df:45:49:c8:c2:b2:27:ed:ac:
a9:3f:b2:9a:52:5f:56:54:e2:9a:95:b4:2e:bd:80:
b7:5e:68:3d:16:05:34:9d:f2:4c:71:67:ed:37:74:
e0:d1:9f:0f:9f:75:1f:06:eb:dd:eb:ef:e9:42:99:
d6:45:ac:0d:1e:2d:87:52:29:28:a6:09:50:11:16:
06:0d:fa:ed:14:b9:e9:fc:46:f6:64:e1:5b:3f:12:
b9:86:5b:96:20:14:9d:99:1f:a2:72:c0:3e:88:b5:
dc:d0:19:c0:80:e3:a8:4d:ac:70:d8:7b:d5:32:49:
44:fd:b7:23:f4:9a:d7:dc:fb:7a:cc:6e:91:d8:06:
51:e6:a7:9d:b0:4a:6a:a8:67:6e:cc:57:10:7e:66:
43:e6:49:c8:5d:36:53:bb:e9:99:bf:4b:ac:6c:69:
c9:87:96:d0:28:97:c3:85:6a:b9:dc:9e:15:20:b5:
58:ce:de:de:22:fd:f9:99:c8:9b:cc:2d:c3:6a:89:
90:f8:78:6f:ac:db:e4:60:94:b6:4a:c3:ba:d3:dd:
b6:fe:53:e4:f1:3f:3f:b8:bd:9c:25:86:10:01:ea:
e2:ea:81:b3:49:f0:89:90:ba:2b:68:9b:79:91:de:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3F:82:82:25:B6:51:FA:B5:0D:92:49:46:30:5F:3A:E9:28:18:56
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fD-CgiW2Ufq1DZJJRjBfOukoGFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:eb:74:aa:04:db:6c:7b:67:ef:2a:d5:fd:be:dd:d8:18:21:
c4:cc:61:9f:f0:db:a7:5d:f5:74:f4:84:3d:b2:3f:6d:4c:e2:
da:e0:42:21:3c:70:c0:7b:f4:24:ff:2a:9b:be:eb:3c:f4:3e:
d2:8c:02:7c:3c:a1:ed:5e:08:6d:ad:32:e7:da:01:c3:94:22:
2b:f0:49:b0:db:d2:e4:8e:9b:99:4a:e3:01:69:b9:cb:5e:4f:
7d:5b:04:10:9c:50:a1:a4:a9:74:b1:6a:26:9f:3c:96:4c:0d:
cb:3e:b8:2b:87:e3:61:b9:e6:f9:1e:82:c7:3e:42:f9:26:8f:
22:38:20:b1:6a:7b:53:3a:24:70:37:dd:23:b1:a5:b2:39:c5:
a2:6e:6c:6b:36:91:18:42:4d:a7:a5:20:2a:43:c8:04:31:6d:
6d:66:ca:a3:cd:4f:77:34:8a:41:13:6b:71:72:7e:c5:62:ea:
c5:62:42:98:ae:84:36:d5:94:1a:3d:90:fe:5a:c2:de:34:06:
ce:a7:9c:9a:3d:e7:2b:d7:45:0e:b1:2d:82:a1:40:ba:b4:77:
b4:4b:12:88:0e:9b:c4:3f:35:be:31:d7:dc:69:0b:f5:d0:b5:
25:49:85:eb:57:ca:00:16:2b:30:12:8a:fd:68:9e:cb:af:13:
e7:c5:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org