Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/neDPYqmGf9bUTwbr4naksRexU3k.roa
File: neDPYqmGf9bUTwbr4naksRexU3k.roa (raw, json)
Hash identifier: czweFU+PPPCtq83XTkO4uXQNtldw67EdCuKT+7ku1hg=
Subject key identifier: 9D:E0:CF:62:A9:86:7F:D6:D4:4F:06:EB:E2:76:A4:B1:17:B1:53:79
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01927BCC2FBA4BCC4632843CA1A60EF2D77C
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/neDPYqmGf9bUTwbr4naksRexU3k.roa
Signing time: Fri 11 Oct 2024 13:37:12 +0000
ROA not before: Fri 11 Oct 2024 13:37:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60808
IP address blocks: 109.122.246.0/23 maxlen: 23
109.122.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 14:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:cc:2f:ba:4b:cc:46:32:84:3c:a1:a6:0e:f2:d7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 11 13:37:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9de0cf62a9867fd6d44f06ebe276a4b117b15379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:82:73:86:b1:90:8a:85:9d:dc:58:f2:9f:
59:6e:44:db:5c:5f:cc:dd:c5:4b:a1:a2:a1:df:b0:
fe:b3:1c:56:82:6d:5d:f1:e0:f7:cd:f8:11:2e:fb:
90:11:28:7a:7a:32:d4:1a:06:81:7c:7b:75:de:25:
18:6a:f8:4d:be:3b:46:8d:57:b2:5f:17:cb:69:e2:
90:2d:7b:c8:e5:09:d1:3e:5a:1c:b1:b1:1e:57:2d:
d2:ef:f3:31:1c:08:11:17:1f:2d:c3:bc:4b:9c:5a:
fa:2c:f4:7d:7b:79:3e:93:0b:f8:54:ac:40:a6:80:
12:de:e4:04:95:f0:dd:02:ea:7b:79:27:13:97:3b:
d4:62:83:c3:d1:d2:ed:f2:9b:97:c0:32:81:ff:04:
46:42:d7:75:57:ab:c5:02:15:2e:24:2b:59:77:25:
46:66:0a:d0:2a:2b:7b:d3:26:20:d3:4c:85:1a:16:
c0:49:81:55:91:6b:ac:be:dd:1f:2e:f0:dd:bd:73:
fd:88:40:e0:6d:41:8f:c0:4d:85:fd:6a:cf:44:71:
93:1d:af:8c:36:ee:9d:15:22:91:54:97:76:c5:7c:
2c:b1:56:8b:a4:4a:c1:19:0a:2f:e4:f6:49:3c:75:
08:67:62:12:2a:ba:6e:60:1d:2a:da:71:1f:86:3a:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E0:CF:62:A9:86:7F:D6:D4:4F:06:EB:E2:76:A4:B1:17:B1:53:79
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/neDPYqmGf9bUTwbr4naksRexU3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.246.0/23
109.122.249.0/24
Signature Algorithm: sha256WithRSAEncryption
43:25:79:2f:26:75:e6:bc:0d:8a:15:c7:9c:24:50:a4:2f:79:
6a:a0:c1:91:bc:ae:b4:36:64:3d:3d:e4:c8:17:f2:92:c9:37:
56:27:59:e2:76:bd:76:82:a1:ee:e4:20:6c:32:e8:fc:c5:3f:
40:e0:f3:3c:67:8f:af:e5:d6:ec:51:05:aa:a3:d7:f3:cf:85:
b9:f0:19:60:47:03:66:db:6e:3f:3d:f4:2c:79:73:c8:47:8b:
fc:ae:16:0e:ab:e4:1d:00:03:73:ec:71:6a:8b:47:86:bd:f9:
e8:87:eb:56:77:4f:67:33:7b:ad:46:99:36:b3:f9:90:30:b7:
1f:ee:10:99:17:62:f2:2b:48:3b:cd:97:1b:5d:5c:97:4b:6a:
12:cb:cc:bf:dd:e3:8b:b9:d4:3a:36:31:23:8f:6c:7f:89:5e:
b2:1c:60:3f:59:62:65:8c:c2:ba:00:06:92:31:30:dc:b6:1d:
5c:99:87:28:c3:d9:40:98:4c:6e:fe:fd:93:5e:97:d6:eb:32:
05:d3:7a:64:7c:12:4d:03:c1:a2:19:c0:d0:f9:7c:0e:df:e5:
bd:e1:da:8c:56:60:b2:d2:10:7f:b5:4f:b1:89:b5:c7:1c:2b:
8e:f6:9c:4a:46:e1:53:96:eb:ce:5a:c5:ae:ab:3f:9c:51:72:
ca:b9:38:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 20:00:59 2024 by rpki-client on console-ams.rpki-client.org