Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/zl4LGXo8LKvlm2wTzaH7A0yuv0Q.roa
File: zl4LGXo8LKvlm2wTzaH7A0yuv0Q.roa (raw, json)
Hash identifier: ADRG70qxFRNr3plG6DWahHaly2Gmf7HwpMQlUPSR9yQ=
Subject key identifier: CE:5E:0B:19:7A:3C:2C:AB:E5:9B:6C:13:CD:A1:FB:03:4C:AE:BF:44
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01856ED4DC7E6E39CF716491C20D79FDAD94
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/zl4LGXo8LKvlm2wTzaH7A0yuv0Q.roa
Signing time: Sun 01 Jan 2023 19:35:21 +0000
ROA not before: Sun 01 Jan 2023 19:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 109.122.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 12:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:dc:7e:6e:39:cf:71:64:91:c2:0d:79:fd:ad:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 1 19:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce5e0b197a3c2cabe59b6c13cda1fb034caebf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:84:b9:e1:c5:e6:a4:d4:23:f7:1d:08:fa:6c:
c9:f0:5f:74:ae:1f:07:a1:2d:f8:10:91:ac:c6:f5:
cb:c3:6d:4a:16:13:45:5e:38:78:45:a1:4e:24:2f:
34:fe:a3:c4:28:df:98:6f:ff:85:13:54:b0:99:49:
cf:11:1b:54:19:49:ee:a3:ab:fe:ba:89:1a:0a:c8:
99:cc:5f:60:b8:89:9a:94:9b:df:98:63:75:37:a9:
13:ed:f4:99:0a:50:3e:0d:4f:dd:eb:21:78:2f:14:
61:b0:a3:ff:a9:10:c0:1d:59:fe:9d:62:63:00:8c:
1c:47:af:71:5c:af:d8:71:bf:4f:b5:cb:58:59:82:
eb:3a:32:c0:29:87:24:e3:e4:82:5f:36:e1:9a:31:
d3:d2:13:b6:94:e8:33:f4:0c:cb:26:30:8b:fa:72:
30:a4:d9:d1:16:e2:8c:b0:5b:01:3a:a7:fa:21:08:
f3:2f:ab:0c:5b:77:e7:f2:f8:3b:5a:04:ea:42:87:
e7:f5:3d:f8:48:6d:85:1e:92:67:f9:4f:ff:e0:0e:
52:43:cd:fd:63:be:7b:db:07:ba:da:e5:db:cb:f9:
a6:8b:a7:47:d7:16:25:93:49:a1:0b:2d:ad:20:3e:
18:8f:95:5b:5c:ee:9f:5e:4c:14:af:68:9e:30:b8:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5E:0B:19:7A:3C:2C:AB:E5:9B:6C:13:CD:A1:FB:03:4C:AE:BF:44
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/zl4LGXo8LKvlm2wTzaH7A0yuv0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9b:72:95:ed:4c:f2:45:98:35:82:1f:64:ef:4b:5a:69:40:
d1:4b:d6:46:a7:39:62:17:fb:a6:71:f1:a5:d6:e7:fa:e5:36:
6a:4e:49:3d:e6:3e:16:d0:37:b5:9a:0e:eb:00:28:e1:7b:cf:
68:ca:ca:0b:af:89:cf:c4:cb:45:04:25:f1:9c:36:6e:30:89:
ca:af:68:5a:ae:3d:91:e0:23:7b:26:ef:ee:d4:2b:54:b2:ad:
99:f9:7b:ef:5b:fb:93:33:34:ee:e4:70:81:87:e9:66:19:e3:
02:58:55:86:a4:ee:60:17:21:8f:ca:d7:8b:fe:1a:49:4b:7c:
b5:26:b4:63:48:2d:52:08:de:30:1a:27:9d:5a:cf:ee:88:a2:
e0:f4:c0:ed:ab:a0:89:31:c7:4b:0b:e8:65:3d:c4:3f:1b:df:
42:59:1e:fe:15:68:d7:48:4f:6b:70:67:a4:3e:3a:51:6a:ee:
f9:43:a7:51:49:6f:3a:a4:e4:95:55:c8:bd:7f:1b:5b:ff:17:
76:d6:59:5d:32:a6:a7:03:f0:36:d9:c7:dd:18:f0:a6:8d:f6:
5c:14:87:1d:7d:38:65:b8:32:09:22:e2:42:5b:b7:e6:27:3e:
bb:29:05:c4:27:ee:0f:b6:4d:9b:ab:86:48:1e:7b:e7:02:5f:
ff:f3:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org