Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/A7LlfwtTxIb6KU_lTSl27l2zY7s.roa
File: A7LlfwtTxIb6KU_lTSl27l2zY7s.roa (raw, json)
Hash identifier: X9sOl77d0DpfHbKwUhmEcO2e40p4w7IUZyBgn8d9JbA=
Subject key identifier: 03:B2:E5:7F:0B:53:C4:86:FA:29:4F:E5:4D:29:76:EE:5D:B3:63:BB
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01926B234DC0C1A4A6D084FA76CF29B328F5
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/A7LlfwtTxIb6KU_lTSl27l2zY7s.roa
Signing time: Tue 08 Oct 2024 07:58:48 +0000
ROA not before: Tue 08 Oct 2024 07:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35372
IP address blocks: 109.122.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 12:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:23:4d:c0:c1:a4:a6:d0:84:fa:76:cf:29:b3:28:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 8 07:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03b2e57f0b53c486fa294fe54d2976ee5db363bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:04:64:25:1d:4f:cf:ba:79:93:6d:03:71:
56:08:ba:4f:d5:31:0d:c3:45:17:aa:3e:a6:ff:ac:
9a:b1:50:f6:c5:3f:00:de:57:b7:48:f8:fb:75:23:
cf:23:29:5e:78:4b:92:e5:7e:db:83:1d:76:33:64:
1a:5e:80:4d:78:83:05:cd:99:54:d5:58:70:83:26:
24:08:ce:15:b8:5a:3e:a4:f6:75:c3:77:2a:a6:ee:
c3:89:80:4b:96:ba:c1:9f:ce:99:53:a8:da:d7:18:
5a:13:90:d9:ac:2c:b7:ba:a1:ac:99:8c:74:a1:3b:
d2:a8:be:7d:26:89:61:66:c6:c2:69:ab:ad:9f:f5:
0a:84:e6:43:f9:4e:32:21:0b:aa:fb:b6:9d:90:3d:
af:58:9b:0b:ef:29:08:0e:25:cc:c7:6e:29:15:1c:
d2:b0:9b:f6:58:00:8e:82:8d:b8:27:0b:35:4e:99:
1e:9e:fe:1b:2a:93:7e:1f:74:fb:03:f7:7c:3f:9d:
b7:75:3d:bb:7e:2e:be:88:9e:08:9f:05:25:9a:a5:
24:9e:cd:6a:5d:dc:3b:11:ff:da:cc:a0:f7:dc:a7:
86:8a:be:ce:b9:84:c9:9f:4d:78:79:48:fc:91:24:
39:32:cc:28:70:f6:33:92:07:4b:23:d5:b7:ba:fa:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B2:E5:7F:0B:53:C4:86:FA:29:4F:E5:4D:29:76:EE:5D:B3:63:BB
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/A7LlfwtTxIb6KU_lTSl27l2zY7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.250.0/24
Signature Algorithm: sha256WithRSAEncryption
61:8a:ab:43:ea:bb:eb:c9:36:93:dd:ce:a7:eb:8a:fe:d9:ef:
2b:a5:10:1e:0d:44:64:80:39:4c:16:5c:f1:70:34:b0:b7:ae:
17:73:ed:74:56:f3:b1:b4:07:49:55:97:d1:83:d8:c7:0d:ff:
b1:0b:c0:bc:3e:3b:30:cb:f3:b3:b9:ab:4e:e7:0a:f4:cd:49:
af:a7:98:42:18:0f:73:ac:d2:ce:f1:72:25:53:61:8d:d9:9f:
64:d5:25:ec:83:30:5b:7b:e4:a8:5d:82:0c:7e:e4:19:03:6b:
aa:f0:5e:a6:ae:28:c0:fa:a9:d3:87:00:37:56:d9:6f:b1:29:
1d:ac:f6:72:7d:81:a1:5c:fb:c8:de:3d:f3:ea:94:92:a9:f0:
96:26:c2:54:3c:15:f9:eb:69:de:88:2d:d0:4c:43:95:12:df:
62:08:e7:10:8b:3a:72:53:9a:18:a1:bb:43:eb:41:5b:87:37:
2a:9a:59:e2:50:66:ea:83:1d:98:bc:1d:ef:dc:14:23:e5:0e:
8c:3e:47:a7:4a:88:c7:6a:3d:a0:41:a3:fd:c6:2c:78:cf:b7:
01:5b:a5:da:c6:80:b8:49:65:67:9c:9e:e3:7d:aa:6f:56:f4:
83:9c:78:3f:78:90:40:38:1e:de:d5:d9:b2:41:e3:1e:da:de:
71:45:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 19:11:14 2024 by rpki-client on console-ams.rpki-client.org