Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/k7R8JQSC_Uv2lfLM0d7ae92IZYY.roa
File: k7R8JQSC_Uv2lfLM0d7ae92IZYY.roa (raw, json)
Hash identifier: eYrZPvtZ0OxzZycx56dgzL5xF8tBskH82d7GKsVNHL8=
Subject key identifier: 93:B4:7C:25:04:82:FD:4B:F6:95:F2:CC:D1:DE:DA:7B:DD:88:65:86
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0190D98484A23C56B22EB8BF56F3E08224DE
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/k7R8JQSC_Uv2lfLM0d7ae92IZYY.roa
Signing time: Mon 22 Jul 2024 08:17:38 +0000
ROA not before: Mon 22 Jul 2024 08:17:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 16:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:84:84:a2:3c:56:b2:2e:b8:bf:56:f3:e0:82:24:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 22 08:17:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93b47c250482fd4bf695f2ccd1deda7bdd886586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:82:78:7a:a1:d9:2b:3e:b8:b8:fd:cf:30:
e1:b9:b2:0a:b8:10:ff:e7:b8:b5:08:da:a8:a5:d3:
24:91:00:a7:9e:45:5d:35:8b:2e:d1:d1:ea:ca:64:
c2:02:d4:5b:ab:9d:19:52:0d:ac:79:1f:1f:3d:92:
68:31:cc:81:a6:dc:be:c5:7b:07:b8:3b:45:5a:5a:
c8:85:03:b2:a4:76:29:a3:20:57:d7:06:58:f7:53:
39:e6:b0:c7:ae:08:6e:0f:c2:9b:fc:95:1f:f5:d8:
59:16:a5:69:83:5d:46:15:69:ed:16:a0:79:85:a2:
6e:93:a8:49:74:59:40:7b:0d:ea:a4:48:34:9b:3b:
54:d2:50:8f:f1:14:7c:87:23:55:8a:de:b0:ac:3b:
d9:08:4c:50:68:46:8f:5e:70:ef:81:2e:fa:fc:0d:
55:bd:3d:df:c2:ac:a7:f2:e0:e0:ab:b2:23:1f:64:
33:96:35:54:10:07:68:9d:41:23:68:1e:39:51:c5:
7d:aa:25:9a:61:7f:30:0f:4a:5b:1a:7f:ff:13:92:
8d:72:a3:2a:bb:5f:02:1b:a7:3d:fe:c9:ac:99:a1:
73:37:e3:41:5c:ca:91:ce:84:cb:ad:93:8b:ba:cb:
5b:74:3c:c6:55:ad:97:45:b2:6f:c2:a9:a6:93:82:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B4:7C:25:04:82:FD:4B:F6:95:F2:CC:D1:DE:DA:7B:DD:88:65:86
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/k7R8JQSC_Uv2lfLM0d7ae92IZYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
19:83:a4:77:45:ce:b1:9d:a0:7e:70:49:f3:ad:4f:7b:67:e1:
b1:9f:70:ed:3a:8b:d4:11:9c:1a:19:4b:ec:37:47:11:b8:eb:
95:08:28:52:66:3d:8b:86:60:56:11:ef:c7:14:88:5a:13:ca:
51:a1:9b:ba:37:da:3a:5d:60:fc:9d:cd:95:6d:e9:67:c3:88:
ba:5f:76:40:27:f2:b7:fc:15:e7:7f:b9:76:79:34:00:eb:90:
97:53:56:24:74:de:a6:47:e8:bf:4a:fd:db:71:fd:c0:62:f7:
38:bb:42:b1:65:6e:e8:4f:14:6e:97:38:f7:4a:06:d7:14:e8:
01:d6:81:dc:72:59:bd:8a:43:9c:f6:b8:be:03:88:68:4a:b9:
a5:d5:e1:eb:63:45:cd:a1:74:5e:06:54:bc:18:08:f5:66:1a:
9a:51:63:48:b4:75:01:80:0c:70:a3:f0:23:f2:6a:24:d8:6c:
c8:75:d1:72:54:ee:69:a1:6a:2b:22:4e:90:6e:61:e9:a1:16:
1f:9b:b6:25:d9:ca:e9:1d:ee:09:39:6e:1c:29:1d:8a:7a:70:
e9:75:63:9e:e6:77:50:07:d4:45:f5:54:dc:af:35:43:76:4f:
27:87:67:24:02:4e:8e:37:d2:f1:ba:1c:b1:ec:71:47:2f:92:
7c:19:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 19:20:02 2024 by rpki-client on console-ams.rpki-client.org