Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/p7aQj-SJSupTpwPo4yas4sCyEJU.roa
File: p7aQj-SJSupTpwPo4yas4sCyEJU.roa (raw, json)
Hash identifier: 7mkGuAIM68DtM1iF5UA8NV6PVWujJRR0wEjQm+aI+48=
Subject key identifier: A7:B6:90:8F:E4:89:4A:EA:53:A7:03:E8:E3:26:AC:E2:C0:B2:10:95
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 018F511190AFCA630967BFCBC29BC0819940
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/p7aQj-SJSupTpwPo4yas4sCyEJU.roa
Signing time: Tue 07 May 2024 03:20:56 +0000
ROA not before: Tue 07 May 2024 03:20:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49872
IP address blocks: 109.122.192.0/24 maxlen: 24
109.122.193.0/24 maxlen: 24
109.122.194.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
109.122.196.0/24 maxlen: 24
109.122.197.0/24 maxlen: 24
109.122.198.0/24 maxlen: 24
109.122.200.0/24 maxlen: 24
109.122.201.0/24 maxlen: 24
109.122.202.0/24 maxlen: 24
109.122.203.0/24 maxlen: 24
109.122.204.0/24 maxlen: 24
109.122.205.0/24 maxlen: 24
109.122.206.0/24 maxlen: 24
109.122.207.0/24 maxlen: 24
109.122.208.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
109.122.211.0/24 maxlen: 24
109.122.212.0/24 maxlen: 24
109.122.213.0/24 maxlen: 24
109.122.214.0/24 maxlen: 24
109.122.215.0/24 maxlen: 24
109.122.216.0/24 maxlen: 24
109.122.217.0/24 maxlen: 24
109.122.218.0/24 maxlen: 24
109.122.219.0/24 maxlen: 24
109.122.220.0/24 maxlen: 24
109.122.221.0/24 maxlen: 24
109.122.222.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 15:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:11:90:af:ca:63:09:67:bf:cb:c2:9b:c0:81:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: May 7 03:20:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7b6908fe4894aea53a703e8e326ace2c0b21095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:93:fe:c2:d6:6b:f8:1b:be:5e:d2:ab:d6:
61:1b:8e:7a:60:50:71:11:82:8e:6f:5c:e9:a9:2d:
9e:13:f6:2c:02:71:c5:ad:ca:6f:50:92:e4:b2:41:
f3:91:6f:45:1e:cc:ed:52:51:ff:ee:d0:b8:02:8c:
fe:e6:05:87:65:48:7e:e1:43:0a:b2:5f:74:cc:58:
df:2a:7b:d3:6e:28:d3:92:9f:07:43:84:8c:3f:40:
d8:8a:ca:6d:f7:04:2b:fa:4f:b5:7b:6c:25:7c:b8:
b5:d8:8f:78:fc:0c:ff:08:9e:d2:89:43:f2:22:f6:
75:43:04:3f:52:80:4f:7b:05:71:22:15:14:1b:ac:
be:85:06:4a:97:81:0d:63:ba:c6:60:65:05:49:47:
c4:77:58:ef:d2:bc:8e:ae:9a:41:84:ac:57:be:1c:
82:0b:a4:4a:7e:6e:74:d4:f8:85:26:09:aa:2f:17:
bf:1a:e8:b5:9d:38:d1:2c:e0:86:43:fd:8c:a4:f7:
e1:55:06:9b:43:f5:c4:b0:84:1e:8e:a0:b9:d9:ed:
b5:63:cf:8b:e1:5c:24:9e:50:98:62:63:c8:37:62:
a3:f2:be:85:29:aa:f1:01:6a:2a:0d:3e:04:82:e7:
91:d7:a0:c3:89:66:74:b8:c0:58:6b:37:03:63:c6:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:90:8F:E4:89:4A:EA:53:A7:03:E8:E3:26:AC:E2:C0:B2:10:95
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/p7aQj-SJSupTpwPo4yas4sCyEJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0-109.122.198.255
109.122.200.0-109.122.208.255
109.122.210.0-109.122.223.255
Signature Algorithm: sha256WithRSAEncryption
12:c3:dd:e4:8e:07:e8:94:72:fa:58:b0:5e:20:66:e3:a7:6e:
b5:89:ea:bb:24:2e:87:3a:d4:74:0e:d3:17:f1:af:78:be:55:
09:a1:76:22:77:fc:92:8d:8a:d2:65:7a:bd:6e:f3:5a:16:1c:
40:48:a1:29:c0:eb:77:6e:d7:40:4a:a7:0d:c7:46:2b:33:c9:
94:00:6a:a5:27:c7:97:5a:11:ef:7a:94:42:03:8b:5c:a7:49:
16:32:95:03:5e:17:7f:d5:ba:95:11:ad:d1:c2:8e:d3:2b:f9:
cd:db:cc:b3:3d:9e:e8:60:5f:10:f2:5d:54:54:ea:f7:74:68:
23:f9:85:12:72:ba:ce:58:78:ab:66:36:41:14:a7:a9:16:b6:
10:5b:5d:53:33:45:56:24:d6:ed:9c:9e:6c:b0:de:9f:d1:28:
da:47:d9:82:80:84:29:6b:1f:b6:fd:ff:c4:d1:20:fc:3a:2d:
73:c6:4d:40:b3:6f:a1:01:6c:16:fa:f9:8b:8d:14:42:e0:ff:
81:9a:ab:b7:3e:e6:48:7f:ed:31:9c:55:33:60:d2:64:50:30:
b1:33:07:72:0a:66:d4:59:77:28:29:28:ff:08:43:bb:19:5c:
15:c8:58:eb:bf:bb:18:dc:d8:84:4e:98:e8:fe:ac:12:90:02:
37:ba:b7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:27 2024 by rpki-client on console-ams.rpki-client.org