Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/svSkeAbXogWbblz8_3F5IGQln2g.roa
File: svSkeAbXogWbblz8_3F5IGQln2g.roa (raw, json)
Hash identifier: ClUrXMbAUFv1Txm0d9EehLenbBzZEQicp6EFdgVkp00=
Subject key identifier: B2:F4:A4:78:06:D7:A2:05:9B:6E:5C:FC:FF:71:79:20:64:25:9F:68
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018697D2E409EE32E0874E7AB0FB49C6ACF5
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/svSkeAbXogWbblz8_3F5IGQln2g.roa
Signing time: Tue 28 Feb 2023 11:40:25 +0000
ROA not before: Tue 28 Feb 2023 11:40:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Mar 2023 17:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:d2:e4:09:ee:32:e0:87:4e:7a:b0:fb:49:c6:ac:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 28 11:40:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2f4a47806d7a2059b6e5cfcff71792064259f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:4f:a6:a9:8c:bc:e5:86:70:98:f0:8b:f7:
23:8f:9c:83:0b:3d:55:99:1e:d6:80:9e:60:c3:d4:
be:14:36:ff:2c:0a:11:d3:e1:2d:8e:48:5c:a9:ce:
8d:95:8a:ff:12:ab:a2:d2:bc:09:5b:42:db:32:ee:
49:8a:6f:f1:da:89:57:89:e3:1f:a0:94:50:14:fb:
87:12:d6:42:25:1a:d5:a5:eb:0b:90:57:3c:c2:ff:
a9:70:8f:64:d6:79:ec:d9:5e:3e:df:4e:44:4d:a5:
cd:69:cd:b6:11:da:01:25:8c:21:74:4a:d2:7a:9a:
6b:2d:90:fa:92:da:dd:4d:15:4a:78:42:f2:a5:cd:
df:9e:bd:80:fa:95:1e:ba:df:3c:0b:01:28:ca:27:
d0:77:55:10:0c:e8:d7:e4:4b:60:39:8f:b3:b2:c5:
52:0f:48:8e:90:bc:cf:47:53:fc:2e:ef:47:ce:bd:
ce:5b:c6:7c:e3:38:d1:9b:99:7e:c9:9c:bb:56:0d:
e1:20:e0:ea:78:a4:b4:01:63:18:8d:b6:d1:34:99:
e6:04:68:3c:85:04:f6:5e:f9:7b:e4:42:44:45:a1:
19:b6:03:36:31:42:b2:3b:c1:d7:41:b6:c2:ce:78:
2c:be:62:96:8d:08:61:d8:88:bb:8d:6c:29:b7:53:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F4:A4:78:06:D7:A2:05:9B:6E:5C:FC:FF:71:79:20:64:25:9F:68
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/svSkeAbXogWbblz8_3F5IGQln2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:10:50:43:3e:d9:00:73:14:da:1c:5c:9b:39:e2:63:aa:b3:
20:86:70:c7:85:98:55:95:6b:29:a2:3d:48:46:67:0d:c3:5e:
f6:f3:9f:f1:ee:90:3f:ef:de:87:cb:05:cc:27:0b:fe:1c:de:
e9:be:79:5f:d8:33:ae:4d:b8:c1:55:7c:5c:4b:04:89:d9:b5:
f1:01:a8:3c:56:d0:84:36:d6:ac:eb:b3:47:6c:09:d9:27:50:
a6:33:cb:69:f6:59:b8:6c:64:e2:cb:16:2e:4b:4a:33:40:30:
4c:57:2c:c9:be:5e:fb:14:f8:b5:b9:dc:92:17:80:48:4b:e1:
5d:d2:86:32:28:25:7f:2b:e4:e8:0d:43:f9:1b:6a:66:ce:d2:
31:4e:16:b1:3d:5b:d6:8c:76:ad:47:07:00:ad:f1:cc:2d:70:
4d:71:15:d6:46:f4:14:4d:65:69:b3:cd:90:5f:13:76:5e:84:
ef:ae:67:29:8f:3d:56:17:d0:6c:90:32:f9:be:e3:db:9e:a1:
d2:bb:d3:60:34:a1:ff:21:5c:0d:dd:50:fb:4b:dc:75:77:0f:
03:eb:85:37:90:1a:d3:d6:78:26:b6:c4:56:b8:82:de:6d:ca:
82:7f:ad:8d:9f:77:7e:35:62:31:c5:06:67:5d:af:0b:a6:fb:
bf:57:39:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org