Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-OQBPlf4XUxkDvdSeeiyjYGYc6E.roa
File: 1-OQBPlf4XUxkDvdSeeiyjYGYc6E.roa (raw, json)
Hash identifier: kbxma61kgFfTtDqUzdEKddmKfS1Ok1N/kd3b10uQzis=
Subject key identifier: F8:E4:01:3E:57:F8:5D:4C:64:0E:F7:52:79:E8:B2:8D:81:98:73:A1
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0192FC694498AC9F18B435A381BEC9E8D1C6
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-OQBPlf4XUxkDvdSeeiyjYGYc6E.roa
Signing time: Tue 05 Nov 2024 13:00:10 +0000
ROA not before: Tue 05 Nov 2024 13:00:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 109.122.240.0/20 maxlen: 24
109.122.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:69:44:98:ac:9f:18:b4:35:a3:81:be:c9:e8:d1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 5 13:00:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8e4013e57f85d4c640ef75279e8b28d819873a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:ad:f3:90:38:a6:12:d7:40:0c:cd:d6:6a:
36:38:b1:8f:77:22:5c:e8:bc:be:ad:23:65:32:90:
a4:ad:6c:a9:56:17:bd:65:5c:65:7b:71:0a:38:29:
68:98:d1:db:a6:8e:ab:8e:ed:90:de:b5:72:c1:e1:
9c:4d:c1:89:6e:fa:cc:b8:d4:ed:3d:15:85:99:1e:
ce:d9:5c:b2:63:e3:e7:47:24:04:17:42:c9:8c:4e:
f7:49:7e:7a:f0:71:1a:dc:4b:f4:c3:8b:2a:b5:5c:
ff:f5:12:88:d2:e6:55:b6:53:19:8f:81:06:df:32:
bb:ae:b9:e6:4b:b1:4e:24:a6:5e:32:b1:56:ea:ab:
25:7a:0f:f7:1d:d7:a2:07:60:1b:fe:05:9c:6f:f5:
1e:34:ae:26:1e:2e:19:e5:4a:52:29:c6:f9:cb:09:
b9:68:9d:7a:58:bd:cc:43:53:6e:ab:94:35:d2:9c:
f9:ea:c5:7b:d4:16:a2:d3:fe:3f:79:58:18:14:1e:
25:29:e5:bc:51:76:7e:bf:b2:1f:94:d4:78:d4:8e:
4d:7d:0b:75:23:23:a9:8e:1c:93:51:a6:e3:08:7d:
9f:70:be:2a:75:71:45:d3:b3:e5:7b:1f:fa:e3:9e:
62:3a:66:d3:33:c0:0e:7b:29:42:bc:33:a9:1f:42:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E4:01:3E:57:F8:5D:4C:64:0E:F7:52:79:E8:B2:8D:81:98:73:A1
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-OQBPlf4XUxkDvdSeeiyjYGYc6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.240.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:e9:fc:71:d1:40:71:cc:55:21:c5:da:6f:b1:4e:9e:03:2d:
6a:bc:9e:b0:f6:9a:46:bf:3e:22:55:b0:21:0c:89:1c:76:61:
74:28:1c:77:cf:a9:1f:a9:ae:9f:f9:fd:8f:f9:f1:8e:59:2c:
f5:a0:5d:48:c0:1f:1b:6d:57:48:d3:a7:fc:89:df:08:99:6b:
07:f0:69:a5:f7:70:26:19:fd:24:ad:7d:51:1f:38:cc:85:c9:
ab:b4:fe:d8:11:5e:5c:bb:5a:3b:7a:64:0f:d0:87:cd:32:52:
7f:96:21:d7:38:46:30:aa:a0:e0:91:b5:92:3e:9c:b9:71:f7:
bb:08:76:d3:31:c6:b0:12:b3:e9:4d:36:36:bb:e4:56:37:0a:
07:ff:43:f4:90:47:2c:c2:0e:97:ac:a6:22:09:58:f0:fd:b6:
c5:82:7f:46:69:06:36:34:8c:36:d1:1d:06:4f:fe:c8:ab:a5:
01:e8:a1:fb:a5:ef:37:d2:1d:65:1e:c6:d0:3b:a2:be:ed:d3:
6f:13:a2:1e:03:fd:b9:bf:a5:3f:c9:9f:45:3d:87:b6:f2:74:
6c:38:0e:8b:6c:da:93:49:68:16:dd:ff:72:40:99:af:f9:16:
a7:06:58:5b:0d:d8:7d:5b:92:2e:61:1e:2a:a7:80:91:63:8b:
df:d2:91:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 07:09:48 2024 by rpki-client on console-fra.rpki-client.org