Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/78AhK_uqjvSVA8L1zGez4lDGuJc.roa
File: 78AhK_uqjvSVA8L1zGez4lDGuJc.roa (raw, json)
Hash identifier: vr/dlLbqRrUPAD/kIQbts1BZTR1R7DusPivQuoKG4Yc=
Subject key identifier: EF:C0:21:2B:FB:AA:8E:F4:95:03:C2:F5:CC:67:B3:E2:50:C6:B8:97
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 018DF098E496E749C443216BA4186AA51467
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/78AhK_uqjvSVA8L1zGez4lDGuJc.roa
Signing time: Wed 28 Feb 2024 16:42:48 +0000
ROA not before: Wed 28 Feb 2024 16:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 109.122.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 18:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:98:e4:96:e7:49:c4:43:21:6b:a4:18:6a:a5:14:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Feb 28 16:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efc0212bfbaa8ef49503c2f5cc67b3e250c6b897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:21:85:0f:76:cc:99:5d:c7:a8:9e:2d:f8:
d9:07:b5:50:d5:fa:9a:76:90:4c:b1:32:64:9c:7f:
c3:b9:1d:00:47:ef:c4:45:51:7b:d2:d5:ca:20:31:
18:95:2b:93:ea:23:0b:f1:80:fe:a1:29:7b:11:8f:
72:3a:a2:85:7b:2d:2a:e0:9b:08:76:c3:b3:ad:e4:
cb:bc:cb:5e:44:eb:ae:c8:a8:fb:2a:52:1c:cb:34:
5f:22:c4:ff:ab:66:f7:27:ce:ef:9a:2c:53:11:e8:
f7:7b:d1:d4:8c:85:f4:74:ed:7a:b1:b3:21:d7:5e:
60:47:6c:b0:ff:a5:38:f5:45:70:be:b7:a3:b3:a0:
25:52:8c:3b:b0:91:0e:bf:74:3e:fc:32:9d:98:48:
6b:5e:65:27:9b:3a:72:74:96:34:f4:10:88:99:0b:
0c:04:6f:27:ff:f6:7c:52:4f:3c:df:37:28:fd:c0:
a3:a0:91:09:f1:ce:96:e0:a2:ae:92:6f:d3:e8:61:
7e:82:ab:31:f6:cb:de:b7:a1:b5:c3:31:ad:44:70:
98:76:7d:20:f8:20:3f:a9:39:fc:5f:ca:31:e8:e2:
a9:6e:ab:12:58:0a:29:c9:72:b2:76:cc:82:ea:85:
5a:ca:50:e5:65:d7:80:6f:d4:ef:4f:36:67:3b:e2:
16:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C0:21:2B:FB:AA:8E:F4:95:03:C2:F5:CC:67:B3:E2:50:C6:B8:97
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/78AhK_uqjvSVA8L1zGez4lDGuJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7f:b0:60:94:32:5f:17:8a:9f:d3:a3:2c:cc:2d:dc:40:af:
e4:4a:ce:de:57:08:d8:ab:bb:7a:fc:b7:f4:53:4d:77:9b:1f:
41:df:42:33:e5:16:b7:a2:ad:d4:60:3a:58:9f:45:46:0c:b3:
7e:8e:e6:59:b0:d8:32:68:d8:32:a3:19:5f:00:fb:21:89:e6:
d1:a6:35:ad:8c:16:91:4c:95:bb:24:19:0c:f1:45:83:46:0f:
e5:c4:94:9f:5f:be:9d:6f:16:65:c2:e2:6e:d8:80:41:64:d3:
ae:3d:cd:5a:f2:fa:e8:a5:98:e2:a2:40:26:3b:55:7c:b9:e8:
3a:5f:4a:0e:45:f9:f4:8f:fb:78:be:13:58:35:62:2e:ea:13:
71:d1:02:ca:b1:60:8d:fc:0e:52:4c:59:39:d7:50:97:1c:25:
ad:78:ed:06:87:3f:86:f3:08:31:bb:ca:90:90:29:c4:81:74:
e5:91:62:af:6e:4e:aa:00:9b:a3:49:2b:25:b4:93:8f:3c:c8:
89:c4:c8:7a:d5:e0:53:3e:51:c5:3c:a9:fb:75:38:64:2a:d1:
1a:3c:ff:ee:e7:b3:54:4d:97:ab:65:02:38:86:d1:14:19:cc:
af:04:68:04:18:a2:64:74:e9:86:93:41:ba:66:6b:3c:e7:df:
cc:89:4c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:27 2024 by rpki-client on console-ams.rpki-client.org