Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/VGXvoFLiJEFicKZWCsdXkP18w3Q.roa
File: VGXvoFLiJEFicKZWCsdXkP18w3Q.roa (raw, json)
Hash identifier: YKTd6K8qCvpHKW4D+TG2ZbA5pHxIjkAK9nMuN4veIJE=
Subject key identifier: 54:65:EF:A0:52:E2:24:41:62:70:A6:56:0A:C7:57:90:FD:7C:C3:74
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0192F1838689A86D43DFA19CAE18349E4299
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/VGXvoFLiJEFicKZWCsdXkP18w3Q.roa
Signing time: Sun 03 Nov 2024 10:13:01 +0000
ROA not before: Sun 03 Nov 2024 10:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31732
IP address blocks: 109.122.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:83:86:89:a8:6d:43:df:a1:9c:ae:18:34:9e:42:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 3 10:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5465efa052e224416270a6560ac75790fd7cc374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:34:08:28:39:fa:fd:11:d6:39:32:4c:99:
9a:77:84:64:03:7c:29:0a:f3:7b:46:85:c1:40:e7:
18:93:15:64:cd:18:79:70:10:98:ba:80:eb:5a:58:
a0:f2:9f:cf:d4:e5:bc:6c:4f:ba:41:d7:fc:2a:d2:
c0:74:87:89:a2:09:6d:fb:b7:f8:e0:20:34:e4:63:
1f:23:7b:1c:22:44:a3:a4:19:f7:9c:f8:cb:2c:95:
bf:18:9c:45:e0:47:93:44:17:35:49:5c:3d:c7:7c:
d4:76:a6:de:70:44:a3:b6:95:b8:5e:a6:78:d1:9b:
ab:81:3a:e0:d3:45:cb:a0:df:f5:9c:2e:d7:be:1d:
b9:b7:94:e1:8a:a8:7e:1d:76:fa:7e:59:55:c4:cf:
cc:b2:23:ec:b1:af:71:35:ed:45:e6:c5:80:4b:08:
15:de:69:e4:7b:a0:f3:a0:32:a3:e4:91:ab:38:6b:
30:ce:db:fb:ab:76:20:f2:5f:62:14:40:09:9d:51:
1e:59:8a:6b:8c:33:20:f6:68:c3:0e:f8:e7:74:e3:
23:85:48:92:dd:03:54:60:d0:5e:43:ec:e7:88:32:
f7:a3:db:81:e6:cb:41:ba:58:a5:8c:b8:56:17:ca:
8f:3d:79:80:a8:bc:2a:0e:67:f5:0b:c3:d0:b8:f4:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:EF:A0:52:E2:24:41:62:70:A6:56:0A:C7:57:90:FD:7C:C3:74
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/VGXvoFLiJEFicKZWCsdXkP18w3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.246.0/24
Signature Algorithm: sha256WithRSAEncryption
54:61:97:65:4d:ff:b9:70:74:75:2b:4a:91:58:76:0c:cc:42:
b4:f5:dc:b6:2f:44:18:aa:1b:a4:08:a6:35:41:26:77:6f:fb:
fd:1c:67:cb:2c:99:9e:1f:c2:e1:bb:06:6e:5b:d1:ba:5a:79:
c6:1f:2e:72:29:a2:9d:2e:f2:3e:fd:c3:f5:a3:2f:e2:9c:4d:
25:83:b8:dd:f6:4a:9f:34:02:39:e0:3a:d7:c3:5a:16:5d:44:
21:66:bd:72:6a:d2:43:31:3d:7a:4f:13:1b:81:44:01:af:b1:
42:41:fb:0e:c9:af:2d:36:b7:7e:77:8f:b9:0e:6c:af:f3:c9:
70:1b:a9:f1:41:2d:87:1e:d0:2f:1d:96:b1:df:20:f7:bd:bd:
6e:13:61:2a:b1:68:85:fb:17:30:97:f2:ee:12:ad:40:40:db:
40:f6:77:0e:c8:33:77:4c:ca:a3:57:48:28:f8:de:30:3b:33:
2e:3e:f1:d2:28:7c:27:3e:1b:61:7a:69:86:df:ee:b8:05:a1:
51:6c:68:da:68:da:a8:8d:98:d5:d3:a0:83:6d:38:ef:6c:bb:
cb:52:30:ca:2c:8f:98:87:82:6b:f0:d2:af:02:d9:f4:ad:99:
ba:89:e4:a8:10:90:e4:48:54:b8:d7:06:e6:9d:0d:6c:c2:e7:
08:fa:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 07:16:31 2024 by rpki-client on console-ams.rpki-client.org