Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ldHeS8xdyiw_DJp-jdvanG1DLJw.roa
File: ldHeS8xdyiw_DJp-jdvanG1DLJw.roa (raw, json)
Hash identifier: LaK506YdK4TtoOyrsgfqFpM/nnag4TPw4IzvMyoBzsE=
Subject key identifier: 95:D1:DE:4B:CC:5D:CA:2C:3F:0C:9A:7E:8D:DB:DA:9C:6D:43:2C:9C
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0193060E5072B7C0A7162EB96B0324C74C8C
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ldHeS8xdyiw_DJp-jdvanG1DLJw.roa
Signing time: Thu 07 Nov 2024 09:57:01 +0000
ROA not before: Thu 07 Nov 2024 09:57:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214526
IP address blocks: 109.122.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 11:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:0e:50:72:b7:c0:a7:16:2e:b9:6b:03:24:c7:4c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 7 09:57:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95d1de4bcc5dca2c3f0c9a7e8ddbda9c6d432c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:22:dc:25:b4:95:25:0f:0a:74:ab:d5:ba:
e2:28:94:35:08:90:b0:1e:0e:52:57:8a:53:a7:ee:
06:c8:6b:ec:d1:3a:77:0e:0b:7d:59:9d:87:d8:24:
07:6b:91:dd:ed:ce:46:8a:aa:a5:70:09:53:96:0b:
46:49:b9:ac:35:bb:24:13:d7:30:b1:cc:76:c6:ae:
0a:c4:3c:9d:02:6d:6f:b3:fb:5d:86:00:6b:b3:21:
6f:64:47:36:b1:fe:75:4a:62:7a:2f:dd:04:33:2e:
fe:d9:e0:24:9a:46:da:41:1e:d1:a7:e2:ef:a3:37:
d1:13:62:14:17:3a:6f:1e:e2:76:a7:92:0f:1e:2b:
80:31:56:c2:e0:63:9b:ba:4e:d4:a9:f5:97:2f:84:
db:3a:31:d4:75:d7:1f:48:30:aa:3b:a5:2d:e0:0a:
85:63:ff:f9:69:02:a9:46:a5:de:3d:9f:1e:c4:9d:
eb:6c:6d:da:16:ba:3b:18:c1:e7:39:5b:7a:c5:3e:
c4:c6:09:ac:a7:61:ad:e9:7e:99:f4:71:6e:c7:35:
23:0d:e9:42:97:53:ef:79:25:56:e0:19:5e:85:3f:
71:ee:29:42:44:57:68:9b:bd:00:eb:f4:5f:d4:9e:
e8:9b:fe:43:53:4d:de:35:49:0a:7f:dc:b4:30:83:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D1:DE:4B:CC:5D:CA:2C:3F:0C:9A:7E:8D:DB:DA:9C:6D:43:2C:9C
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ldHeS8xdyiw_DJp-jdvanG1DLJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b9:dc:96:63:82:92:eb:34:0d:a5:0d:de:6d:6d:dc:f7:82:
d4:23:7e:97:58:2d:04:e5:1e:b5:94:d5:9a:79:19:8a:e7:a8:
77:6d:8d:c1:2b:f1:96:aa:b3:eb:7d:a7:9b:71:95:18:6a:48:
96:95:ea:16:86:2f:d5:1c:43:5f:62:d5:d0:e3:ee:04:37:40:
39:3c:b2:f7:17:15:04:bb:0d:6f:a8:10:6c:cc:d4:f5:4d:af:
2e:53:5d:cb:9c:c9:7a:d8:3b:c3:e1:86:ee:b4:0d:c1:8d:eb:
38:7b:e8:0d:ad:32:3e:41:17:04:b1:45:25:07:78:b1:4f:71:
f1:53:66:e1:fc:f2:24:2b:78:c1:f6:5f:11:b3:db:6d:3b:24:
99:3e:b8:bc:07:ab:4f:55:d6:7f:b8:54:e1:c9:93:2f:02:20:
43:97:07:f6:fb:42:8f:f8:63:72:21:9f:2e:a3:f2:d0:14:96:
39:ce:b7:f6:3f:4f:09:3e:30:04:a4:e2:75:a8:8e:6d:c3:0e:
3b:8e:4f:15:21:e2:a4:c3:4a:83:3a:c4:32:8c:c9:c0:24:27:
04:f3:f4:4c:2d:7f:f3:90:a7:31:9e:49:74:6b:15:8a:36:b7:
5f:24:0c:84:83:46:cf:48:f8:98:bc:a0:f8:a6:32:40:3e:9c:
17:a3:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:09 2024 by rpki-client on console-fra.rpki-client.org