Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/vvamYXCdzqCUtfS2_DTcHpxt3pc.roa
File: vvamYXCdzqCUtfS2_DTcHpxt3pc.roa (raw, json)
Hash identifier: /MiGz+2A58SOgVc2fFG3oHOA3OeS7FKrFs0Vz/kUtEc=
Subject key identifier: BE:F6:A6:61:70:9D:CE:A0:94:B5:F4:B6:FC:34:DC:1E:9C:6D:DE:97
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01922825A59FF83722559243E1DCFBD32C81
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/vvamYXCdzqCUtfS2_DTcHpxt3pc.roa
Signing time: Wed 25 Sep 2024 07:46:48 +0000
ROA not before: Wed 25 Sep 2024 07:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62048
IP address blocks: 109.122.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 11:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:25:a5:9f:f8:37:22:55:92:43:e1:dc:fb:d3:2c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Sep 25 07:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bef6a661709dcea094b5f4b6fc34dc1e9c6dde97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:89:e6:8f:8a:e0:f8:72:46:65:f4:b5:27:
ad:34:20:34:c7:c8:5b:9b:d1:95:5d:7a:37:91:cc:
f4:09:9b:77:74:a6:2f:63:83:2b:21:e7:90:d2:d0:
82:b7:d3:f1:b6:ae:ab:01:29:24:cb:61:e9:e8:4a:
e4:ab:2b:7a:58:c8:4a:84:b7:76:e7:64:dc:37:fb:
b4:10:53:1f:cc:10:d6:b4:83:2e:c9:fa:83:ec:71:
c2:03:81:34:bf:f1:f1:0f:b3:f9:30:50:22:71:8f:
a3:41:5f:e9:be:0a:2c:07:f8:37:7b:53:7c:32:62:
7e:fa:3d:6d:35:cd:66:e6:d0:27:67:7a:27:b1:84:
a1:e8:1c:65:71:b3:26:3b:8a:fe:c7:8b:7a:d4:cf:
e4:91:d1:83:61:eb:e0:c8:13:5a:d7:9d:95:23:3d:
73:c5:37:9f:6c:78:bd:6a:65:10:3e:bf:7e:24:4a:
53:32:43:bd:ee:1e:1c:76:f6:a8:ef:62:62:d6:66:
a6:4b:ea:63:3a:dd:c4:50:b9:4b:68:e5:a5:26:ef:
11:e2:bb:5f:c3:ee:e8:99:46:47:97:5f:c9:57:1b:
df:ae:ef:f8:7a:7d:63:85:3c:44:74:bf:33:c4:b3:
ab:89:2d:51:d4:b7:e0:20:86:14:05:ce:c0:35:3b:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F6:A6:61:70:9D:CE:A0:94:B5:F4:B6:FC:34:DC:1E:9C:6D:DE:97
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/vvamYXCdzqCUtfS2_DTcHpxt3pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.240.0/24
Signature Algorithm: sha256WithRSAEncryption
23:74:07:3d:81:12:71:0b:4f:f9:84:1e:0e:42:df:ec:26:3e:
2d:c4:64:4a:52:94:01:88:29:22:a9:63:97:92:54:ac:bd:35:
72:2e:bd:f4:05:bc:37:c5:0a:cc:f1:d6:56:f0:44:41:4c:3f:
c2:f4:a7:1f:41:f6:b0:20:53:35:fe:da:40:29:f6:dd:46:8f:
0e:71:a8:6b:ea:28:de:02:48:d3:da:1b:b3:0d:f6:6f:e5:8f:
9b:eb:8a:fc:79:14:bd:3e:51:57:b8:95:7e:e0:4f:ac:a2:dd:
c7:5e:8e:e8:d2:2e:04:f6:ce:08:4d:d9:00:f2:d4:48:a4:d0:
b8:2f:94:ae:c8:97:07:78:4d:90:d5:29:94:67:5c:83:03:ac:
ec:08:10:25:ca:66:99:8a:14:2a:4b:50:c2:7e:34:c2:b5:6d:
1d:a9:8c:35:aa:0d:24:0a:af:c2:78:b2:2d:65:b6:70:19:87:
2f:f8:1d:5d:c1:7f:99:fb:97:54:c3:6d:07:78:e0:01:16:6d:
7e:5d:dc:2f:49:82:d7:93:eb:09:c3:45:79:0a:a3:af:7b:6e:
69:cb:6e:6e:2c:d3:91:8c:e3:15:74:e2:d9:3b:c0:a4:7e:3f:
7b:c5:57:96:99:6f:e1:eb:f3:ef:dc:bb:48:ec:77:b0:23:48:
ec:35:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 13:23:32 2024 by rpki-client on console-fra.rpki-client.org