Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jT02YUqXafOQcccLeOxv4aF6ju0.roa
File: jT02YUqXafOQcccLeOxv4aF6ju0.roa (raw, json)
Hash identifier: 1imaKrj7CNCHqQo+/tjYf6dq2CQVU6rvJAYzvVhslI0=
Subject key identifier: 8D:3D:36:61:4A:97:69:F3:90:71:C7:0B:78:EC:6F:E1:A1:7A:8E:ED
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01928529092C6EEDCC862FE4F342D8CAF020
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jT02YUqXafOQcccLeOxv4aF6ju0.roa
Signing time: Sun 13 Oct 2024 09:15:11 +0000
ROA not before: Sun 13 Oct 2024 09:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.45.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 09:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:85:29:09:2c:6e:ed:cc:86:2f:e4:f3:42:d8:ca:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 13 09:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d3d36614a9769f39071c70b78ec6fe1a17a8eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:19:56:6b:1c:f0:7a:ee:25:86:de:0a:0a:
d8:06:d3:cb:4f:c6:d3:cf:b4:97:f3:3b:c5:7d:b9:
85:85:c9:2c:73:26:70:92:f6:22:71:d2:2a:68:04:
67:c8:69:a5:c2:99:cf:c5:db:da:ea:7e:88:26:f9:
eb:96:cd:83:fd:5f:d7:27:4b:5d:6e:86:e6:10:32:
28:65:7f:0e:ff:79:d8:c4:7f:45:1c:c0:82:34:c8:
db:67:8e:fc:27:8d:02:20:75:d2:99:a8:2d:ef:96:
92:c3:6d:6d:23:61:b8:51:f2:94:69:87:c8:48:38:
a5:61:3e:5f:e6:b8:cd:02:b2:48:5b:84:fe:2c:6d:
af:56:c3:ea:21:c6:fb:1a:37:71:8c:7e:26:02:f8:
fb:09:e7:4d:90:a9:d9:d2:57:e2:98:9b:8d:5e:75:
ed:c6:e1:93:3e:a2:fd:11:d3:fb:37:8f:19:5c:3f:
ee:ac:4a:2b:cb:c2:35:bd:3f:32:79:40:31:1f:b3:
51:3b:01:c2:0c:ea:b2:62:3c:01:24:76:a7:9d:04:
71:b6:27:62:b3:36:88:f9:6b:50:d6:e6:01:90:27:
25:8c:f7:e2:e4:4f:65:f9:7b:ea:e8:90:6d:24:70:
59:54:2f:5a:f7:12:8d:2d:42:d1:a2:63:d3:f2:75:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3D:36:61:4A:97:69:F3:90:71:C7:0B:78:EC:6F:E1:A1:7A:8E:ED
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jT02YUqXafOQcccLeOxv4aF6ju0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.45.0-109.122.46.255
Signature Algorithm: sha256WithRSAEncryption
0a:3b:94:36:01:5f:91:97:5f:94:8e:05:74:1a:17:d9:62:ca:
f3:89:f5:b5:e0:59:2a:8f:b1:6a:23:00:98:26:89:34:a3:df:
a8:65:de:1a:91:ec:6a:d0:f5:12:ec:4c:d3:27:73:52:26:57:
63:da:38:8b:d0:6d:f6:ea:8c:4d:be:15:d4:e9:6e:14:88:95:
28:2a:ac:54:5f:d7:a3:88:4e:fe:6e:1c:88:7b:c3:84:fa:89:
4c:73:43:e9:a9:7d:96:d1:d2:fb:27:16:6b:0b:ec:78:9a:de:
97:65:f0:88:cc:14:8a:de:8d:7f:15:78:48:fc:c2:37:1a:4c:
b8:cc:25:99:74:bd:0c:d4:e5:8f:be:36:de:a2:a3:6e:93:06:
32:4e:c6:66:fd:39:a4:2e:40:03:19:9e:eb:cf:0a:62:40:0c:
56:a2:f5:44:9d:84:78:35:73:ac:ed:a2:01:7f:2e:62:a1:7a:
62:7d:7c:7e:08:35:f1:34:28:89:ba:f1:d7:3e:8e:9c:6e:57:
7d:de:ad:24:61:07:03:32:88:a7:c1:3f:47:bd:58:8c:2e:d9:
fd:68:b8:11:ab:a1:c8:8f:9f:65:a4:59:2d:43:49:5e:ec:52:
9a:13:7a:81:09:e5:c1:eb:47:ce:5f:7f:69:11:d4:3b:5e:1a:
a4:43:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 11:33:26 2024 by rpki-client on console-fra.rpki-client.org