Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/zObiVhVSED2C0hUVnUaPm1HGN3I.roa
File: zObiVhVSED2C0hUVnUaPm1HGN3I.roa (raw, json)
Hash identifier: +Yb6lz4FTZ9K5/Y2YPTipq9vbrCXwNH94q3tiLJrBSc=
Subject key identifier: CC:E6:E2:56:15:52:10:3D:82:D2:15:15:9D:46:8F:9B:51:C6:37:72
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018B6693110C533E8ADDDAE4324717F39758
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/zObiVhVSED2C0hUVnUaPm1HGN3I.roa
Signing time: Wed 25 Oct 2023 11:23:16 +0000
ROA not before: Wed 25 Oct 2023 11:23:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Oct 2023 09:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:93:11:0c:53:3e:8a:dd:da:e4:32:47:17:f3:97:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 25 11:23:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cce6e2561552103d82d215159d468f9b51c63772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:a6:97:cb:e0:e2:d8:71:5c:38:9b:00:50:
4e:a8:49:91:3d:d9:34:68:c7:b2:28:b4:91:25:b7:
2b:32:19:5d:f2:be:08:a7:f8:87:e8:1b:1a:b8:8a:
77:ab:fd:dd:9b:85:fb:f4:c3:90:61:f1:d0:ec:44:
de:1c:a7:51:a0:bb:81:7c:02:28:c6:0d:bf:83:c2:
72:b8:ed:5b:9a:e2:02:77:94:1b:9f:47:9e:47:3e:
24:57:dd:0f:a9:72:37:2c:3b:e8:9a:f6:0f:1b:75:
e9:e4:69:48:79:0a:e8:e6:99:7c:b5:c3:a5:0e:63:
a3:cf:66:3a:24:87:ca:92:37:53:ab:ed:1c:a0:d8:
6f:62:65:80:5f:d1:17:4b:04:cd:59:95:4a:3b:b3:
46:4b:de:49:ed:0f:d4:fd:c8:b8:ab:8e:65:98:ea:
4b:00:0a:2f:84:3c:12:39:89:19:78:53:2c:9b:7d:
78:27:47:31:e7:c7:16:c3:c1:ea:f8:28:c6:72:ba:
0e:43:22:01:80:5b:4c:08:70:81:dc:0c:d3:13:ef:
86:5b:52:04:fb:16:c1:ba:64:82:75:d7:52:e1:44:
29:07:b4:54:b9:b3:cc:a1:7c:c8:ba:8f:25:24:78:
04:45:0e:80:7b:dd:8e:67:53:b8:05:99:4d:6f:70:
59:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E6:E2:56:15:52:10:3D:82:D2:15:15:9D:46:8F:9B:51:C6:37:72
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/zObiVhVSED2C0hUVnUaPm1HGN3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:45:21:45:86:4a:01:63:ee:e8:67:32:19:e7:20:f8:df:81:
68:4a:81:ce:23:99:65:20:21:c6:ad:b0:c5:e5:d7:35:46:fd:
5f:e2:4a:47:46:52:16:67:3b:91:20:94:cc:0c:f6:d9:3f:9c:
f5:8b:58:11:d7:e9:66:de:26:a0:34:ae:47:49:67:b5:ff:47:
3a:71:e1:f6:e5:a0:dd:06:12:11:46:26:e1:00:b2:12:83:77:
da:fe:05:7e:e2:36:cf:05:35:f2:34:18:75:4f:d6:35:af:3c:
1d:4b:96:29:77:3f:48:66:44:5c:33:31:c1:c3:61:ba:63:de:
35:9c:ed:65:ed:ba:71:4c:aa:b7:38:0f:8d:64:f4:57:7e:f3:
fb:6a:82:80:2b:e8:fa:bd:06:dd:2c:ba:02:6a:57:7a:e6:08:
90:e6:76:6d:f6:95:6c:6c:e5:5c:0e:6d:86:a9:75:b2:a7:30:
ed:82:49:44:86:9f:ee:08:34:24:e4:18:20:fa:59:91:d4:ee:
07:e9:6b:3e:a8:db:0e:2a:fb:9e:75:80:ad:77:15:fc:03:90:
3a:55:a2:48:ed:6d:70:97:ca:b0:a3:de:b4:7d:0a:c1:77:07:
e1:89:44:b4:4a:db:04:b5:a4:79:ae:02:ba:01:20:f5:eb:89:
9d:c0:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org