Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1o07uYYLhF4ynXIwacpb4gPzKmI.roa
File: 1o07uYYLhF4ynXIwacpb4gPzKmI.roa (raw, json)
Hash identifier: Ul4xUPkAoMjvx7dMs2R4hVuulT7EwuPGmKA5tLLCveM=
Subject key identifier: D6:8D:3B:B9:86:0B:84:5E:32:9D:72:30:69:CA:5B:E2:03:F3:2A:62
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0192FC6945B5F3F2F2609C13E69FE48C8097
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1o07uYYLhF4ynXIwacpb4gPzKmI.roa
Signing time: Tue 05 Nov 2024 13:00:10 +0000
ROA not before: Tue 05 Nov 2024 13:00:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60808
IP address blocks: 109.122.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 05:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:69:45:b5:f3:f2:f2:60:9c:13:e6:9f:e4:8c:80:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 5 13:00:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d68d3bb9860b845e329d723069ca5be203f32a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:d2:d0:96:e7:26:4d:f0:ae:2e:e1:31:35:
39:cd:7d:dd:54:90:a3:06:a2:05:e5:3c:d4:fd:25:
db:0c:fb:68:ab:84:eb:07:b5:c6:64:5a:7b:ff:4a:
05:dd:ad:3c:1c:10:ce:57:e8:4a:96:7b:fc:b1:a5:
b6:b7:1d:d8:03:e4:53:47:57:e1:ce:c7:9b:b3:c3:
38:6b:f2:28:94:cd:79:47:33:4c:86:40:7c:f7:fe:
d1:89:0a:b8:2d:55:ac:f2:2f:ec:63:25:a5:43:57:
aa:38:f4:a7:6c:ce:4b:bd:34:63:df:6f:d6:db:c9:
bd:ed:44:6f:c7:0a:c6:9b:73:7a:b9:c1:2e:d3:3c:
0d:74:a0:b6:46:c7:48:36:2b:cb:ee:2d:e9:f8:f2:
4c:ba:09:52:8d:da:7c:2c:94:68:dc:83:16:f9:0d:
67:f9:04:d1:61:4d:4f:6b:f5:28:51:03:e3:ac:f7:
1e:75:ad:df:f7:ba:22:13:d7:39:6c:89:81:30:b5:
32:3f:ef:15:7e:2e:cf:34:96:24:db:cd:02:57:fa:
e6:8c:a4:cf:d0:62:62:cb:66:5c:4e:8b:fc:f5:f9:
8d:63:5d:7c:6a:3e:d7:f5:65:7f:cc:15:db:7c:d3:
5b:02:ba:61:ff:0a:30:53:37:05:b6:73:5c:e0:ab:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:3B:B9:86:0B:84:5E:32:9D:72:30:69:CA:5B:E2:03:F3:2A:62
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1o07uYYLhF4ynXIwacpb4gPzKmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.249.0/24
Signature Algorithm: sha256WithRSAEncryption
65:60:f3:81:b8:cb:31:e4:0c:89:a3:ff:58:7b:0e:31:61:bd:
9a:79:bf:45:f7:aa:0d:8c:7d:04:3e:14:00:ca:b0:1e:c9:2d:
80:a9:7f:32:65:4e:61:23:b6:c1:3b:3a:89:06:9b:ee:1e:11:
f1:23:df:b5:16:a5:8e:3a:4e:5f:fb:84:71:16:3f:99:bc:a7:
3a:6a:bb:65:06:bb:79:33:b3:34:dd:df:c9:fa:0b:d8:e0:83:
0b:2d:05:b6:1d:a7:c1:de:89:42:f9:18:45:47:7e:f1:e1:fd:
75:22:bc:06:ba:90:6a:2d:c4:61:89:c9:21:6a:ed:a3:3e:2f:
98:40:21:c6:0a:b7:9c:1d:e5:b3:20:24:d6:33:59:63:be:e4:
06:9a:41:1b:46:1d:d6:f3:0a:08:b5:7b:03:16:15:fb:27:28:
01:6a:21:0b:92:c4:27:43:93:99:8c:de:c5:cf:49:90:e2:cd:
db:8b:86:5b:3d:32:ee:3f:1c:58:17:b0:d5:11:ec:90:d3:95:
61:2f:a0:76:27:f8:c6:4a:bf:d0:d3:9b:83:16:1f:b8:bf:bd:
f6:dc:6b:9f:29:ad:19:a5:d5:c1:0e:64:fb:d8:b2:ff:59:da:
91:0e:fd:ae:1b:81:62:bd:c2:15:ef:80:13:43:76:07:e2:3c:
e5:99:8c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 07:09:48 2024 by rpki-client on console-fra.rpki-client.org