Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/sqW7MOMYVW9BFDoKIpykUqkwABc.roa
File: sqW7MOMYVW9BFDoKIpykUqkwABc.roa (raw, json)
Hash identifier: /dDR0McKNiPDCeo9Avfajhy4G3pQiR9jRuaeEeos6DQ=
Subject key identifier: B2:A5:BB:30:E3:18:55:6F:41:14:3A:0A:22:9C:A4:52:A9:30:00:17
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018BE9B5B4E9904D2FCE044A71FEA773D41D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/sqW7MOMYVW9BFDoKIpykUqkwABc.roa
Signing time: Sun 19 Nov 2023 22:31:21 +0000
ROA not before: Sun 19 Nov 2023 22:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
89.251.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Nov 2023 21:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e9:b5:b4:e9:90:4d:2f:ce:04:4a:71:fe:a7:73:d4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Nov 19 22:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2a5bb30e318556f41143a0a229ca452a9300017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:32:6b:79:88:26:9a:7b:58:89:88:e3:ba:d1:
ac:f7:22:f9:f3:d5:e1:55:4f:b9:e3:22:a7:5c:59:
90:91:62:d4:22:7c:51:c2:59:b9:92:4c:44:5a:42:
97:95:d9:9b:c0:8d:0a:cc:40:93:b5:62:83:1b:7b:
74:de:b3:67:45:0d:9a:03:93:fd:8e:6d:9e:09:a1:
77:94:6c:fe:57:c8:26:04:8a:61:70:07:a7:ca:c3:
00:7c:b6:a3:53:92:2c:e5:b5:76:92:1f:4a:4b:aa:
ac:95:3d:de:0e:e7:79:93:12:d2:97:0e:d0:55:02:
38:6c:a9:05:da:f6:f0:d3:a1:5f:7b:ac:c4:d6:69:
21:d5:24:a0:0a:6c:76:41:a3:d9:c1:d5:85:6b:cc:
e7:46:d9:a6:46:38:92:7a:f9:b4:45:71:db:6b:2b:
13:38:e6:f4:7e:4a:3a:c8:e2:21:06:82:c5:3b:eb:
1e:ae:af:1a:1f:0a:64:c4:dd:f0:86:95:76:c6:22:
e6:23:10:50:f8:92:8b:ec:9c:e3:f0:24:71:81:1c:
95:92:db:73:f6:96:77:7d:50:64:6f:f1:f1:72:89:
81:c0:42:c1:fd:bd:8a:1e:61:f7:93:27:10:c8:72:
0b:9d:56:85:6a:7e:e4:db:a8:05:ba:4c:d9:8f:d8:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A5:BB:30:E3:18:55:6F:41:14:3A:0A:22:9C:A4:52:A9:30:00:17
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/sqW7MOMYVW9BFDoKIpykUqkwABc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.30.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a1:73:e9:50:f8:34:46:bf:e8:7e:9b:10:c0:20:67:20:4d:
66:15:56:1a:83:ad:90:16:4f:bf:7d:86:66:0f:8e:89:3b:e9:
f3:e1:41:05:33:62:09:e4:b2:f5:e3:02:ac:d4:57:ae:49:45:
6b:2b:7a:ca:76:b9:a3:25:88:8c:9c:0e:9c:b1:c1:d6:12:0c:
e1:69:f9:67:24:65:c2:c2:d6:7d:eb:9e:ca:fe:bf:b3:ae:0b:
9f:04:f3:b7:ff:76:7f:96:8d:26:66:d1:1e:0d:67:91:78:8a:
3e:d4:56:df:25:d8:63:87:87:43:5f:86:fd:7b:ef:82:dc:6f:
d9:8f:10:c1:e6:f4:d5:7b:62:3c:42:de:4c:ca:4b:33:8f:b3:
5f:aa:d8:b9:f9:d6:cd:82:89:f6:5a:c1:5d:70:b6:35:12:56:
d6:7d:a3:80:a3:5b:87:5a:47:a3:98:79:5a:b8:c8:cc:ef:58:
81:a0:d0:c6:89:01:13:8c:5a:b0:ae:a6:4d:b8:30:0d:08:c2:
32:01:b8:b9:b4:6e:c6:48:5f:11:3e:b1:76:14:a1:5f:cf:bc:
d6:7a:32:56:c2:3f:04:05:b1:92:ec:83:f7:23:48:89:cb:80:
0d:7a:63:5a:d8:82:d4:70:06:94:79:27:0f:8a:07:9b:ae:9c:
61:61:35:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org