Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/sSrJZiYbM47-qSbfVPc9B90cCME.roa
File: sSrJZiYbM47-qSbfVPc9B90cCME.roa (raw, json)
Hash identifier: nJivmnPqXhSCGK1WnONIFUwM/hyRYKqjJWMsLkmwjQs=
Subject key identifier: B1:2A:C9:66:26:1B:33:8E:FE:A9:26:DF:54:F7:3D:07:DD:1C:08:C1
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0192897496E85F525B7D2B293C955ABF3755
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/sSrJZiYbM47-qSbfVPc9B90cCME.roa
Signing time: Mon 14 Oct 2024 05:16:12 +0000
ROA not before: Mon 14 Oct 2024 05:16:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215350
IP address blocks: 109.122.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 11:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:74:96:e8:5f:52:5b:7d:2b:29:3c:95:5a:bf:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 14 05:16:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b12ac966261b338efea926df54f73d07dd1c08c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:39:5a:05:dd:9b:fe:c4:c8:8d:aa:8b:ac:
19:70:1b:9a:97:d3:df:8c:09:aa:a3:07:d2:a5:87:
d3:47:53:4b:dd:82:1c:21:e5:57:96:d2:5f:a9:b5:
8a:30:3f:79:c5:b5:ff:e5:8d:88:6e:2a:65:ce:e2:
da:11:60:0a:b3:6c:38:69:98:d8:0a:dc:15:33:3f:
a5:fc:04:6a:70:21:3e:a0:d8:0d:49:a7:c0:18:cc:
03:d0:5a:a9:d6:dd:22:92:14:62:22:b5:2e:a6:01:
86:00:18:09:44:2d:34:6b:32:d6:d3:54:88:f1:33:
29:4c:ea:03:4b:56:8c:c3:af:43:d6:8a:ad:bd:39:
d4:80:fa:e6:e0:42:33:38:96:ca:55:95:ea:0a:65:
a7:f5:01:52:31:87:79:5d:3e:2d:ae:55:37:f3:91:
97:68:4d:ca:fb:84:34:14:b7:d5:c9:90:ed:12:05:
ba:57:ff:86:89:46:e6:b7:b1:cd:32:d1:dd:8d:8b:
b1:2d:19:05:e4:b6:de:35:c6:73:9b:88:6a:f8:fe:
79:e8:84:ce:9e:18:c8:90:35:91:2c:6e:8f:b5:ff:
df:45:f1:5a:c8:98:73:d1:0b:38:9a:f6:fd:37:fe:
95:2f:7f:5d:0a:49:64:54:ef:55:a2:1d:5c:9d:3a:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2A:C9:66:26:1B:33:8E:FE:A9:26:DF:54:F7:3D:07:DD:1C:08:C1
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/sSrJZiYbM47-qSbfVPc9B90cCME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:b5:9d:6f:2a:dd:9c:0e:28:bc:43:b5:33:e9:11:ec:2a:ce:
d9:99:84:07:f3:e4:66:19:11:fc:ff:6f:d5:c2:cc:e3:07:2b:
27:ba:cc:4c:4a:e5:55:dd:b3:6b:5a:b6:1b:0d:e4:9c:1f:08:
3f:39:72:33:c4:58:63:6c:07:63:a9:d4:26:bd:30:43:ac:dc:
10:07:34:40:d7:b4:10:71:3e:65:22:f0:51:c7:29:67:9f:a8:
14:c4:c9:9e:1a:c9:26:13:91:aa:e6:fa:52:a6:f3:e8:7f:92:
1b:91:f4:ad:c6:19:66:7b:cc:3c:9d:c4:98:03:60:54:01:14:
27:84:d9:84:43:9b:15:e7:66:8d:9c:d2:f3:b4:13:4b:15:41:
7c:f5:2b:c0:1e:3c:c2:e9:1e:81:a1:40:a8:47:d8:e3:9a:3e:
39:2d:11:69:20:70:dd:d7:a1:8f:a2:39:28:6f:3b:7d:e4:0b:
75:74:b0:eb:bf:7a:8c:c6:22:26:81:b6:a3:07:39:c1:34:5d:
09:4f:eb:74:68:62:bd:1e:76:41:2d:14:01:d2:9e:40:9a:85:
4a:4e:1e:b2:5e:b7:d7:98:86:cc:72:a6:61:0a:93:29:b6:9b:
52:1a:98:a9:cd:09:69:7b:1a:1e:42:cd:98:a7:be:34:35:89:
ad:a0:de:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 14:42:40 2024 by rpki-client on console-ams.rpki-client.org