Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wIhrC2yeFH1rM2VKXn9LUdMQZz4.roa
File: wIhrC2yeFH1rM2VKXn9LUdMQZz4.roa (raw, json)
Hash identifier: 2Y/36sG6El+Rfl5M80cDYl24uvA5FtM2bAfYWSOPjmw=
Subject key identifier: C0:88:6B:0B:6C:9E:14:7D:6B:33:65:4A:5E:7F:4B:51:D3:10:67:3E
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018DFA61C782C9545EDF9BF842C43E5C3608
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wIhrC2yeFH1rM2VKXn9LUdMQZz4.roa
Signing time: Fri 01 Mar 2024 14:18:48 +0000
ROA not before: Fri 01 Mar 2024 14:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.40.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 19:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:61:c7:82:c9:54:5e:df:9b:f8:42:c4:3e:5c:36:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 1 14:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0886b0b6c9e147d6b33654a5e7f4b51d310673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:a9:ea:b2:cf:29:e7:d9:fd:0f:c7:f0:41:
39:92:d1:59:ad:5c:e9:4a:d7:5b:0a:3d:4b:55:31:
0e:c9:aa:ba:12:3f:19:a8:f8:7d:f0:be:b8:a0:59:
78:ca:0b:4b:67:50:42:ae:e9:9a:0e:23:c0:58:ff:
28:05:25:e0:13:78:6c:b0:9f:eb:09:83:94:ed:5e:
5e:af:7e:ae:a1:9f:c7:15:db:ed:08:8f:4e:c2:8a:
43:1f:4f:af:f9:92:bc:60:78:b1:0d:61:c8:8f:81:
67:28:72:28:b4:1d:b0:12:15:ba:71:fe:13:c5:0e:
96:1a:bf:88:16:dc:24:ce:23:44:e5:ee:3d:43:4a:
b2:b6:51:6f:ed:7d:e2:3b:11:da:67:33:f6:6f:80:
d3:6f:b8:e2:09:5e:2c:af:be:4c:6f:67:8e:19:37:
db:57:ca:43:08:fd:f4:80:44:01:0e:90:48:e8:30:
b7:09:1d:9c:7c:79:68:68:99:a0:ac:b0:ce:eb:e5:
8e:a7:64:4d:a0:af:e6:dd:f8:7c:08:cc:97:37:83:
8f:93:34:56:b5:12:b7:ec:c8:8e:a5:93:ef:61:de:
64:a6:7e:0b:5a:ec:2f:23:a8:b9:6c:20:e9:26:78:
e9:f4:ab:ed:19:96:80:79:a7:73:cf:10:61:c9:20:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:88:6B:0B:6C:9E:14:7D:6B:33:65:4A:5E:7F:4B:51:D3:10:67:3E
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wIhrC2yeFH1rM2VKXn9LUdMQZz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
90:16:c6:e6:17:0d:31:ba:9a:14:16:56:a1:1b:36:08:87:df:
98:ac:91:fc:3f:5c:4c:da:a7:8e:bf:6e:f6:da:81:a8:4a:99:
82:aa:70:8a:64:86:5d:19:d9:f5:77:22:2f:f3:c4:9b:74:9f:
7d:db:34:7e:f1:81:f7:d9:9d:ad:76:4e:2b:12:25:c7:23:a3:
03:1b:82:da:70:cb:2b:c0:21:81:c0:05:56:2c:4d:3c:59:0c:
97:02:41:b6:6f:c6:77:e1:b8:af:83:0a:7d:c6:ae:9e:ee:9f:
bb:36:da:18:b7:57:55:f0:95:9c:43:f7:25:33:8f:be:fe:6d:
88:18:52:1c:1a:6a:bd:f2:0e:9a:1e:a3:b7:f7:8f:93:80:55:
e3:d0:b5:27:fe:07:53:22:7c:10:3b:ee:6f:3f:2d:b0:4e:b4:
2b:9a:e3:99:aa:af:63:c2:cb:2d:e9:b3:93:9b:b1:0e:78:a7:
67:bc:ba:ac:c9:ab:88:47:b2:11:50:4b:13:73:73:98:5c:45:
66:a3:7a:58:89:1f:d3:c5:38:ca:ea:6f:97:f5:c2:84:4a:f1:
8a:64:36:b1:3d:b1:71:cb:08:82:f5:05:66:10:38:b0:4f:9f:
3e:7a:80:f7:5e:e7:59:59:a1:72:c2:89:90:6b:ed:c7:2d:91:
8b:ed:2e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org