Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/p8Fxi4Fr8I2M1Yz49vPsvhKMCes.roa
File: p8Fxi4Fr8I2M1Yz49vPsvhKMCes.roa (raw, json)
Hash identifier: nGTgXLnca6qViNmYiTHyZ700LEdIYq8d71u1u+W5ANA=
Subject key identifier: A7:C1:71:8B:81:6B:F0:8D:8C:D5:8C:F8:F6:F3:EC:BE:12:8C:09:EB
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018DEEBEA6E4D97CF7D3BCDB6329CDD2E4A7
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/p8Fxi4Fr8I2M1Yz49vPsvhKMCes.roa
Signing time: Wed 28 Feb 2024 08:04:48 +0000
ROA not before: Wed 28 Feb 2024 08:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 07:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:be:a6:e4:d9:7c:f7:d3:bc:db:63:29:cd:d2:e4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 28 08:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7c1718b816bf08d8cd58cf8f6f3ecbe128c09eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:23:18:04:29:7a:21:02:92:fe:e7:c4:84:
a0:1a:9c:38:28:cd:51:fc:24:d2:47:ef:99:16:20:
b1:b1:73:66:95:a4:42:79:97:f5:71:33:b8:ae:83:
79:98:b2:5d:e0:70:e9:11:1d:c0:87:b0:b7:3c:87:
a3:03:27:59:29:a5:82:e9:81:01:fa:f8:de:c4:07:
48:94:a9:d6:a8:05:0c:5d:52:ca:77:6f:0e:fe:af:
90:d6:9c:0d:ea:c5:ab:73:d4:3b:79:a6:1e:de:04:
85:fe:3e:37:b8:65:85:a8:16:80:ee:48:37:5e:60:
b6:c1:e2:cf:9e:36:4d:72:1c:3d:a9:86:07:2d:79:
10:03:5d:3f:74:57:6b:58:0b:3b:b2:34:c6:7f:bf:
9f:bb:4a:c8:ab:83:4f:68:5e:a8:84:55:40:86:19:
3c:f7:10:0d:c6:d0:d1:5f:39:d7:25:37:25:8d:3d:
b6:99:b8:f8:29:95:58:5f:d5:ef:af:cf:dd:92:12:
99:8f:44:6d:63:b2:2f:45:d5:b4:fa:86:49:ca:e4:
52:d6:98:62:2b:23:73:b4:15:e1:4b:07:83:a2:32:
02:5e:9d:d5:3c:dc:41:f1:15:b6:2d:f3:3f:12:59:
3e:e6:f4:0c:ae:1f:de:54:e7:95:28:9b:81:d4:76:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C1:71:8B:81:6B:F0:8D:8C:D5:8C:F8:F6:F3:EC:BE:12:8C:09:EB
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/p8Fxi4Fr8I2M1Yz49vPsvhKMCes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d8:05:36:cd:62:d9:a7:1e:af:fe:39:1a:86:99:d1:85:b3:
2c:31:c8:33:94:36:eb:24:8a:a3:f4:6f:fd:1d:be:9c:91:f6:
7f:e1:ee:9e:7c:e6:ee:7f:67:8e:e6:93:72:6e:10:f4:51:51:
25:d7:dc:2e:5d:ab:1a:32:ac:1f:a3:f2:5e:4d:a2:cc:2d:dc:
86:16:ba:c8:43:e3:53:6f:d5:98:b5:9e:b2:eb:0f:96:21:3a:
3a:f6:40:41:eb:8a:c6:11:15:26:1c:20:c7:cd:5d:b4:37:c4:
94:a2:94:3e:6a:81:14:45:5b:32:de:72:b6:06:d7:1e:2b:8b:
99:a1:19:62:d3:46:00:1c:1c:f8:81:bb:54:8c:84:af:41:00:
a4:30:89:d9:05:a0:fb:b0:a0:75:fc:d8:5a:d3:75:b8:4d:50:
f1:ae:cb:d4:b1:81:1c:b5:16:b7:6e:f8:0e:9a:c1:75:b4:80:
b5:62:f8:ab:50:1c:8c:e4:36:d3:05:81:46:cd:43:06:db:dd:
7e:6d:1d:ce:9d:ca:86:a6:68:00:d1:31:50:06:10:cc:56:e2:
a2:d4:8b:65:38:6b:65:d9:01:e5:73:6d:9f:c7:02:45:f1:26:
e4:2d:f2:f8:b5:87:83:31:14:2c:ed:01:0d:97:d3:0c:7d:18:
12:0d:6e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org