Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/myIGxSiZVWR7JfvA3HwjD0gX8QE.roa
File: myIGxSiZVWR7JfvA3HwjD0gX8QE.roa (raw, json)
Hash identifier: eAAeCCZpiigcpeq1ksvdEUU39XYEzWk2iCtck6wXK/o=
Subject key identifier: 9B:22:06:C5:28:99:55:64:7B:25:FB:C0:DC:7C:23:0F:48:17:F1:01
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019251ADABE43216E5711EBE07C09F25366C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/myIGxSiZVWR7JfvA3HwjD0gX8QE.roa
Signing time: Thu 03 Oct 2024 09:19:48 +0000
ROA not before: Thu 03 Oct 2024 09:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.41.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 13:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:ad:ab:e4:32:16:e5:71:1e:be:07:c0:9f:25:36:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 3 09:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b2206c5289955647b25fbc0dc7c230f4817f101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:89:d7:6d:b8:4a:8d:b3:8d:fd:7b:0c:b1:c8:
b0:1b:d1:fd:50:df:35:6f:1d:dd:fb:e3:c8:a4:82:
73:1e:49:8a:23:55:4c:ad:d5:bb:90:c9:95:5e:af:
b5:3e:6a:31:83:f5:3c:1e:38:b6:35:7e:73:4e:31:
16:a3:02:b2:b2:cf:bd:00:9d:fd:ca:27:ea:0a:29:
f8:3a:9a:d9:15:23:45:33:b4:3b:94:5a:af:b5:58:
26:27:dd:eb:64:ae:30:75:9a:20:b7:ec:9c:11:79:
6c:10:63:d2:2c:7b:ae:b9:6c:9f:51:98:73:b1:c9:
d6:19:5a:44:8b:d6:60:d1:55:2b:11:89:5d:a5:c8:
d2:a3:99:8e:4d:b0:25:61:6c:a0:44:a2:da:3c:c5:
4f:f7:07:94:f9:84:2a:ed:3c:2d:8a:27:52:14:f1:
f8:2f:22:05:70:9d:44:4b:77:3b:48:73:38:54:ec:
af:91:f6:14:88:72:ba:f1:69:d1:6d:4c:70:c0:6f:
c4:bf:79:2e:9d:7d:05:70:8e:ac:d9:a6:a3:03:b5:
0b:d6:39:dc:0e:32:22:57:44:d3:8a:38:14:dc:7f:
88:b5:e6:71:31:5b:ab:cd:57:17:e7:64:0e:ac:ae:
a0:6e:a5:bb:55:62:7d:3c:bc:89:ac:79:b4:99:82:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:22:06:C5:28:99:55:64:7B:25:FB:C0:DC:7C:23:0F:48:17:F1:01
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/myIGxSiZVWR7JfvA3HwjD0gX8QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.41.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7e:73:aa:c5:69:73:1d:29:52:14:ec:c8:72:60:91:71:70:
cb:86:80:88:35:6e:e7:b4:7f:7f:f8:d2:5a:05:f6:f4:61:ca:
6c:3a:63:4b:30:a8:74:41:5e:99:16:3b:c9:c7:fe:79:26:01:
9b:e8:31:21:d2:b2:0c:c5:40:f9:91:27:64:b2:c8:c5:17:50:
29:b9:b8:1d:3e:44:98:84:59:99:8e:69:03:e4:b5:e3:6e:c6:
74:1e:55:36:52:b2:85:3e:54:d9:6b:12:36:4f:ea:3f:8d:e1:
df:e5:c9:3f:12:97:54:5e:36:1a:92:ab:c0:bc:c8:80:69:6a:
e7:76:b6:ec:79:e6:52:ef:38:e1:3f:66:27:ec:ad:6d:78:39:
d4:a8:c4:00:fc:a7:cd:d5:31:d3:30:78:ba:c1:5b:08:5c:fb:
d0:57:d5:55:77:bb:a0:64:9c:be:ad:29:2c:b5:93:e9:e0:a9:
2b:cf:8e:2c:d2:03:c5:56:6f:95:50:d5:1d:46:c1:5c:63:14:
c2:4d:92:6f:22:7f:59:fb:2b:18:00:5a:53:f3:57:28:e9:e7:
ff:ed:4f:38:7c:0b:40:d3:e5:c4:2f:33:0c:58:a6:ee:86:74:
76:fe:89:17:f0:be:93:e8:54:a9:2c:91:97:cd:1d:94:6b:67:
f3:b6:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 18:41:57 2024 by rpki-client on console-ams.rpki-client.org