Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/fu2XwE1lCC4W0CRB56jn5e51zuY.roa
File: fu2XwE1lCC4W0CRB56jn5e51zuY.roa (raw, json)
Hash identifier: 2kx1Q0jLSVJAOaiBsTP7fosuONhHDYl6mdxVrZxckgg=
Subject key identifier: 7E:ED:97:C0:4D:65:08:2E:16:D0:24:41:E7:A8:E7:E5:EE:75:CE:E6
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 018DF09711AF2606BC47F1DC02DFE789027B
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/fu2XwE1lCC4W0CRB56jn5e51zuY.roa
Signing time: Wed 28 Feb 2024 16:40:48 +0000
ROA not before: Wed 28 Feb 2024 16:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 109.122.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 14:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:97:11:af:26:06:bc:47:f1:dc:02:df:e7:89:02:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Feb 28 16:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eed97c04d65082e16d02441e7a8e7e5ee75cee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:e2:fa:50:29:2d:d7:b3:54:ef:a0:eb:83:
f5:b6:46:82:e0:ff:f1:6b:49:49:3d:8e:34:86:5f:
da:24:0b:83:99:20:12:e8:5c:35:7e:5e:0a:73:2e:
82:07:42:20:5b:45:0e:3d:b0:57:54:aa:49:9e:0b:
c5:44:7d:15:32:a8:57:ea:9f:91:ad:8b:f4:48:87:
64:9a:fa:2e:d5:2b:ab:c0:35:87:f6:0e:dd:91:a6:
b7:3d:e5:f0:9c:3e:75:d6:7f:84:a9:b5:18:51:44:
8b:0d:da:45:e7:8b:8a:54:4b:60:66:1d:d2:b5:0a:
f1:a1:4a:52:b9:57:a9:ad:40:3b:86:36:f4:59:98:
e6:d9:2b:6b:1a:95:b4:bd:e2:b6:8a:31:cc:d7:43:
e2:83:0c:b0:5f:c8:c5:fa:5b:72:b9:df:0a:85:65:
8d:a9:6c:a9:e1:35:50:30:00:17:72:8f:39:4c:e8:
b3:ec:0d:09:97:96:e4:6b:52:f9:a0:b2:f5:fb:e9:
08:b9:7b:e1:79:b6:90:33:a0:fd:a6:07:e5:29:ec:
d3:be:df:97:09:d6:b8:f2:4c:11:88:05:80:17:6c:
aa:ff:23:83:15:e0:72:fc:ec:12:eb:4a:3e:39:89:
ee:cd:e4:41:f8:b8:2f:1d:81:50:4a:02:ed:32:ab:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:ED:97:C0:4D:65:08:2E:16:D0:24:41:E7:A8:E7:E5:EE:75:CE:E6
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/fu2XwE1lCC4W0CRB56jn5e51zuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:cd:b4:0e:15:72:bc:52:bc:92:56:4f:60:0f:56:57:68:f6:
fb:88:c3:e6:3e:b1:f6:4a:62:a2:ff:c8:df:ec:3a:f4:fc:b7:
58:1e:2c:79:b0:fe:04:82:44:84:ab:ed:1e:43:70:ee:f0:2e:
42:0d:d4:24:c1:2e:72:d0:20:a1:16:64:41:96:58:d0:85:76:
26:f2:ff:cf:f7:75:92:24:47:7a:d9:94:61:65:3f:e4:bc:fc:
e7:87:59:0a:54:8c:ab:ca:25:40:b2:7f:e5:ef:24:e6:ee:8f:
43:0d:4e:45:ad:ef:18:20:fa:a0:69:9e:86:83:ea:01:cf:39:
4c:60:f4:43:d9:60:fa:20:59:60:4f:b6:11:33:4f:7c:12:3b:
6a:7f:b2:7d:50:ad:81:7e:87:ad:fc:ad:aa:d9:2e:7d:e3:e1:
1b:59:67:b5:8b:f7:5b:35:50:dc:ff:e3:37:b0:e2:31:a7:de:
ec:48:69:12:26:35:c6:f3:9c:b9:56:c1:e5:c5:be:24:b1:dc:
b3:29:93:c1:55:e7:9c:57:e5:33:9f:b4:b6:1f:10:19:aa:58:
87:95:78:ae:75:8e:be:c2:45:97:2e:e6:a3:9a:67:38:84:44:
26:ac:ac:c0:8f:b9:c5:9c:79:0b:6d:a3:dd:e3:8f:ac:95:e1:
76:5e:84:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:49:10 2025 by rpki-client