Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/z6Q3BU0G2gSkNZhj_q-ghPXhvTY.roa
File: z6Q3BU0G2gSkNZhj_q-ghPXhvTY.roa (raw, json)
Hash identifier: t3lTgCYNllipxeUHDl1IY1Y6HrtUYfPHyVIJqm75TkQ=
Subject key identifier: CF:A4:37:05:4D:06:DA:04:A4:35:98:63:FE:AF:A0:84:F5:E1:BD:36
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018D59F141AB9B48F466E393EE847497770A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/z6Q3BU0G2gSkNZhj_q-ghPXhvTY.roa
Signing time: Tue 30 Jan 2024 10:36:39 +0000
ROA not before: Tue 30 Jan 2024 10:36:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.40.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 09:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:f1:41:ab:9b:48:f4:66:e3:93:ee:84:74:97:77:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 30 10:36:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfa437054d06da04a4359863feafa084f5e1bd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:ae:6d:7c:6f:27:b4:eb:31:88:b2:1a:18:
51:85:b0:34:11:a2:e5:31:a9:24:27:f6:c5:a6:58:
2a:45:46:a3:34:64:35:7c:45:d5:c5:3a:dd:fe:4e:
0f:93:9d:aa:45:86:85:0a:9a:19:fa:af:2d:c9:ea:
3a:28:42:0f:98:3e:a4:79:1a:86:f5:d5:8e:50:b6:
2b:1c:75:e5:8b:25:4c:bb:c0:83:9f:3e:fe:5e:37:
84:6d:f0:99:f8:d0:70:29:2f:cc:04:d2:b5:f0:a9:
3e:57:26:b0:42:0c:32:cf:42:86:ca:a2:62:75:4e:
3d:12:9c:ef:6b:94:78:91:75:a4:e7:8c:32:92:a5:
b7:f2:f7:cb:38:f1:a4:f5:11:86:07:29:80:4f:c0:
1c:4f:1a:fe:b2:3e:27:11:ee:e1:df:69:55:5f:8d:
9f:b1:b7:86:0d:c4:db:87:3c:cf:61:f9:bd:7e:d2:
b4:53:fd:55:26:6b:67:84:e3:c8:5b:2a:ef:47:d4:
4b:92:e7:df:ba:c1:af:8f:98:b0:86:c4:40:e7:0f:
c9:16:58:82:95:ae:d8:fa:ec:50:05:94:d3:51:1f:
8c:f1:28:3d:76:e5:9e:52:57:f9:5b:84:fa:ac:60:
e5:01:71:05:96:9f:45:64:c8:11:5b:71:4c:af:cf:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A4:37:05:4D:06:DA:04:A4:35:98:63:FE:AF:A0:84:F5:E1:BD:36
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/z6Q3BU0G2gSkNZhj_q-ghPXhvTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
92:10:d9:ff:a2:51:ff:a9:28:16:2d:a9:1c:37:e4:02:91:79:
ef:bf:2c:95:76:13:c7:f3:b3:96:9a:75:cf:0a:b2:0a:5b:8e:
18:ad:82:61:65:00:1f:23:cd:a9:06:f6:e0:91:a4:01:8e:2a:
69:8d:b3:69:fd:f8:3b:e0:49:df:c2:f5:6c:29:54:b8:a6:0b:
44:9c:eb:00:73:17:0d:e4:b5:09:bd:5d:b3:a5:75:48:91:f9:
0d:24:cd:f7:01:0b:fb:f5:b5:13:96:5b:18:3b:33:a4:65:e7:
eb:f2:19:4c:f9:3d:b5:76:17:fd:fb:3e:eb:9f:03:2e:d4:8a:
ae:77:67:2e:b4:76:f5:c5:e6:7b:f3:2b:13:42:ba:05:14:92:
5f:88:df:86:1e:20:26:db:54:80:4b:76:c9:34:f7:39:6f:ec:
9c:e3:ad:fd:ee:2e:78:6d:2e:7f:9e:88:c4:29:bb:fe:f0:5d:
76:43:20:7d:f9:73:32:3d:38:6d:00:6b:ba:2c:8b:94:ca:0a:
a0:fd:eb:89:e3:a9:bb:f1:6a:1f:74:95:d6:8f:38:33:55:82:
76:be:89:5d:89:fd:a9:d9:ea:44:f2:79:0c:e7:04:13:c8:6a:
a7:27:d9:c5:12:b6:86:62:15:20:d5:ea:22:2c:db:97:53:23:
6d:c9:b9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org