Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/evRl0l0UF8ajvEBDOkfINRmC5-8.roa
File: evRl0l0UF8ajvEBDOkfINRmC5-8.roa (raw, json)
Hash identifier: ocRGq2nMXRhc+7NX4TZvQeiCt22sINsb7I+KKJHHVuo=
Subject key identifier: 7A:F4:65:D2:5D:14:17:C6:A3:BC:40:43:3A:47:C8:35:19:82:E7:EF
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0193060E512712F5E04F663D816EA511839A
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/evRl0l0UF8ajvEBDOkfINRmC5-8.roa
Signing time: Thu 07 Nov 2024 09:57:01 +0000
ROA not before: Thu 07 Nov 2024 09:57:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214586
IP address blocks: 109.122.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 09:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:0e:51:27:12:f5:e0:4f:66:3d:81:6e:a5:11:83:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 7 09:57:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7af465d25d1417c6a3bc40433a47c8351982e7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:88:f5:1f:1a:21:25:08:c2:62:35:d1:38:
f6:59:62:ab:83:35:9b:8a:f3:df:54:22:82:e2:e6:
50:71:05:06:28:7c:c1:d3:90:9b:2e:e6:17:50:35:
92:52:11:e2:78:71:21:e9:4e:99:4d:67:b4:7b:16:
ea:17:60:86:5b:38:0c:5c:60:65:96:3c:3e:fa:d5:
59:3c:09:33:b4:d3:2f:bc:97:ba:49:cb:d5:23:00:
01:92:bd:d1:73:24:89:21:cd:af:f8:91:0d:ad:4f:
e4:dc:58:72:76:a0:ac:15:56:b8:a9:00:c9:d9:d6:
03:67:02:9a:6d:15:40:8c:69:d9:43:7d:8c:85:3b:
b5:94:02:03:5b:ae:d9:18:6e:5e:a6:b8:21:e5:43:
67:e2:0b:e2:05:d2:d1:4d:73:bd:b3:8e:b4:1c:49:
a8:ce:e9:9b:07:43:0a:95:03:18:bb:32:d0:20:bd:
2f:1f:57:ab:7b:13:a0:da:c1:b3:43:56:c9:8e:84:
9e:b9:4d:22:58:cd:73:a1:04:8c:87:f7:66:68:e7:
f6:ce:2c:ac:a3:20:d6:3d:82:9a:5d:ac:1e:52:63:
dc:30:91:30:d2:4d:82:c7:6d:9b:76:a1:89:e1:6e:
89:c8:48:3c:57:ba:47:2a:c6:28:bc:f2:18:c0:b3:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F4:65:D2:5D:14:17:C6:A3:BC:40:43:3A:47:C8:35:19:82:E7:EF
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/evRl0l0UF8ajvEBDOkfINRmC5-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.253.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d0:ab:f3:6f:9a:74:bd:fa:a8:4e:b2:c8:ce:b2:1e:a4:88:
dc:55:35:05:2b:23:cf:7e:c6:53:80:82:2f:b9:98:a2:4e:de:
59:8b:6e:f1:9d:90:cd:52:11:f0:8c:ed:94:ea:ef:cd:71:61:
1f:31:3f:ca:e5:13:31:3d:1f:1e:66:7d:d9:b9:47:c6:17:54:
7f:fb:21:bf:66:a1:3f:4c:cc:a9:b5:ed:77:9c:bb:2f:44:43:
4f:43:45:c4:cb:07:01:34:3f:12:5c:76:da:8b:8d:8e:5c:ae:
e5:a3:d7:7e:cf:13:bc:fb:78:63:e2:45:81:9a:78:d3:82:64:
d7:d3:34:06:90:c3:ad:76:90:e3:5b:35:94:f9:8d:e5:8a:a9:
62:4a:08:35:c2:dc:e7:e7:1b:62:43:21:10:ad:b1:46:c3:16:
85:cf:db:99:6b:5e:5e:fb:7a:b1:93:91:76:9f:5f:8d:31:1d:
dc:fe:4e:07:12:09:a0:8b:ea:a4:59:6c:3d:4f:ff:62:f9:df:
0a:b7:10:fd:6a:89:01:34:90:da:10:16:ed:6f:b9:26:15:a3:
e2:7b:20:4d:66:44:95:84:2a:9f:82:ac:5d:89:c0:67:f3:94:
b7:f1:83:38:2b:96:a1:fa:90:3a:c2:21:3d:bd:d0:6b:f1:71:
ad:af:b5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 12:52:35 2024 by rpki-client on console-ams.rpki-client.org