Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/AzaLMC-Fsxu9YdssC4GfT45S9VQ.roa
File: AzaLMC-Fsxu9YdssC4GfT45S9VQ.roa (raw, json)
Hash identifier: HCmMbSPLIODnfguKVFqHwTwU7MgsBPV09A9nfdGRcF0=
Subject key identifier: 03:36:8B:30:2F:85:B3:1B:BD:61:DB:2C:0B:81:9F:4F:8E:52:F5:54
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 018EE73AFC6A9D884D4D4DFEC5BD5E029B33
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/AzaLMC-Fsxu9YdssC4GfT45S9VQ.roa
Signing time: Tue 16 Apr 2024 14:06:26 +0000
ROA not before: Tue 16 Apr 2024 14:06:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 109.122.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 19:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:3a:fc:6a:9d:88:4d:4d:4d:fe:c5:bd:5e:02:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Apr 16 14:06:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03368b302f85b31bbd61db2c0b819f4f8e52f554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:b7:24:ad:52:32:1f:53:65:0b:15:48:31:
e5:86:88:c6:0c:24:f4:f3:8a:58:0a:ba:98:fc:2b:
ed:88:dd:8d:12:7b:64:6e:fb:73:1b:1d:1f:fa:28:
c3:89:4f:8d:3f:99:99:95:60:cc:00:72:da:f0:2a:
a2:f1:e9:bb:5c:12:e3:63:14:3b:b3:d2:1e:9c:22:
b4:68:a4:0f:68:19:14:d8:af:37:66:4c:70:e3:a2:
07:99:38:2e:87:3f:d7:63:1b:79:bc:2c:72:47:eb:
bd:ac:24:a7:d9:83:5c:ce:9a:c7:f7:8a:e7:ea:0a:
b1:57:53:f0:de:b6:5d:68:68:0b:9b:5d:57:1b:39:
05:64:e5:36:fa:2c:b1:26:df:84:a3:54:de:32:e3:
c5:fa:0e:e4:43:9c:c6:44:6d:b8:59:d9:d3:28:e1:
a3:e2:43:07:d1:22:41:6a:f7:01:e1:b2:31:ab:ae:
49:ee:32:a7:c1:bb:39:81:18:b4:8d:d7:8e:37:92:
8e:e9:9c:a6:39:05:8a:3b:ab:10:0b:02:ba:54:6b:
dc:9f:c9:d8:56:50:7e:5b:f2:d9:9a:5a:5c:0b:1e:
eb:a0:d2:59:82:bf:54:22:d4:fe:77:72:66:c8:0d:
a0:63:8d:74:c0:2a:78:01:70:30:0a:13:cf:d8:1e:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:8B:30:2F:85:B3:1B:BD:61:DB:2C:0B:81:9F:4F:8E:52:F5:54
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/AzaLMC-Fsxu9YdssC4GfT45S9VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.208.0/24
Signature Algorithm: sha256WithRSAEncryption
76:71:3f:96:f0:7c:5e:78:c6:3e:10:af:af:76:65:a0:57:7b:
51:73:f2:a2:ca:5e:b2:7b:ea:41:09:9b:11:cd:60:53:6c:d3:
7b:3d:16:4c:65:2d:7e:14:98:a0:31:f3:a5:16:de:74:ce:a7:
fc:fe:92:37:17:1c:1a:7f:61:f2:c6:28:c7:30:af:07:14:09:
df:5a:11:01:63:07:a1:e9:10:47:67:a1:5a:28:98:db:68:97:
e7:a7:c9:c3:f2:d8:53:7d:e0:07:44:d3:df:c8:47:ec:0a:d8:
c4:9c:f6:04:ca:ef:29:f8:92:be:66:cb:4d:a5:73:1d:53:46:
d1:3f:8c:67:3c:e2:8a:c8:c1:88:70:66:6e:24:82:20:9a:da:
d2:34:ec:ef:ae:43:ca:3f:90:6b:62:21:03:62:14:36:f8:c0:
92:be:9c:ae:00:ad:83:0d:1d:62:d4:11:44:8a:db:03:64:9f:
74:20:bf:22:79:f7:4f:ac:32:3d:26:41:32:6a:3a:b5:f3:4a:
24:24:bb:a2:18:97:bf:59:cd:0b:0a:da:b3:a5:a0:70:24:2b:
ee:f5:40:21:84:b1:66:44:75:25:06:5e:0c:4b:43:3a:5e:d6:
92:70:0f:e0:0d:b6:fb:f4:fe:b0:3c:3a:29:19:58:94:ac:a7:
a3:43:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:27 2024 by rpki-client on console-ams.rpki-client.org