Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/vhnlXoTJUdNqEjvtgmm9k01TIXI.roa
File: vhnlXoTJUdNqEjvtgmm9k01TIXI.roa (raw, json)
Hash identifier: 3ZKGj/CofciVU1IeScE2cfl/RVNO/6g5xD3tsB9uBAA=
Subject key identifier: BE:19:E5:5E:84:C9:51:D3:6A:12:3B:ED:82:69:BD:93:4D:53:21:72
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 019395FB863C363034B3E29BE09235F4DA15
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/vhnlXoTJUdNqEjvtgmm9k01TIXI.roa
Signing time: Thu 05 Dec 2024 08:41:49 +0000
ROA not before: Thu 05 Dec 2024 08:41:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49872
IP address blocks: 109.122.192.0/24 maxlen: 24
109.122.193.0/24 maxlen: 24
109.122.194.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
109.122.196.0/24 maxlen: 24
109.122.197.0/24 maxlen: 24
109.122.198.0/24 maxlen: 24
109.122.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:fb:86:3c:36:30:34:b3:e2:9b:e0:92:35:f4:da:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Dec 5 08:41:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be19e55e84c951d36a123bed8269bd934d532172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:69:29:80:05:6a:58:6b:cf:49:43:1a:23:
e4:0e:33:a5:e8:f2:7a:50:18:43:af:09:97:de:26:
a3:c9:0a:fc:fd:19:f5:c6:3d:b5:a4:b0:96:1c:dd:
91:67:e1:08:0f:22:2c:6f:e2:2d:d2:c7:3b:59:9b:
37:a8:71:c5:b5:ed:cc:b9:99:65:66:9b:9a:4a:d6:
a1:11:e0:39:45:c4:ce:1a:9a:0e:fd:38:4c:08:fc:
36:f6:53:bd:22:b1:2c:b0:25:85:2e:7d:ce:74:e1:
c3:8c:2c:80:1d:bd:a1:91:8d:8d:8d:9f:45:13:32:
eb:6a:3b:9f:d2:2b:d4:83:f8:41:1c:a3:5d:42:bd:
9d:f0:d4:93:68:5f:8b:25:90:80:c9:03:6b:49:54:
a8:87:15:ff:df:bc:13:2e:65:29:48:b2:06:e7:09:
cb:b8:fa:51:05:5f:ee:3a:a7:97:fe:76:9e:52:aa:
98:8c:74:d6:21:e3:d9:0c:59:62:96:2b:6b:c2:68:
83:c0:41:19:5f:ed:29:e4:10:bc:f0:33:71:e9:38:
d4:a6:c8:a6:90:ec:c4:7b:a1:0a:b4:e6:76:57:d2:
ac:28:6a:f5:f7:19:f0:7f:ae:51:87:7c:6b:ab:02:
d1:aa:27:bc:c3:d4:74:61:0b:bd:75:00:0a:c5:17:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:19:E5:5E:84:C9:51:D3:6A:12:3B:ED:82:69:BD:93:4D:53:21:72
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/vhnlXoTJUdNqEjvtgmm9k01TIXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0/21
Signature Algorithm: sha256WithRSAEncryption
58:52:69:82:e2:eb:49:be:e2:40:1a:1c:05:5b:5c:c5:f2:d7:
8a:ad:e9:af:be:64:a8:83:50:62:27:86:04:8f:5d:98:ca:a4:
9a:89:d9:a7:91:bc:40:9f:b1:90:15:e7:a8:a4:a9:13:f0:d4:
3b:d8:d2:9e:78:7c:57:35:f1:b5:a0:7a:16:03:0f:df:6f:ae:
67:3f:55:a7:45:a0:ca:4d:24:b4:3b:87:76:94:04:c9:83:82:
19:c8:d5:49:f3:c6:8e:a0:15:d2:3b:88:cd:3f:ee:72:5f:5e:
5a:5d:5a:20:2b:28:0a:39:81:3f:74:15:17:b8:bd:bb:1e:75:
ef:1e:31:a2:08:f0:85:58:dd:08:79:4d:4b:65:1e:73:2d:33:
4b:87:33:70:37:88:d9:a4:54:8f:8a:06:8f:90:0e:06:16:71:
36:92:75:4b:49:86:80:0b:61:8c:fb:a5:49:20:41:56:46:fb:
44:e0:3e:21:10:10:97:81:18:91:9f:96:14:9a:c1:bc:c7:f4:
ca:17:11:74:a0:fc:4e:93:fa:cd:39:30:32:05:3f:1c:cf:62:
8b:66:14:9a:9f:73:af:92:5b:e6:4b:6a:c9:af:89:f6:dd:ef:
17:ea:b5:4c:c4:60:eb:0e:09:2f:0c:66:6d:83:2f:ef:ec:b6:
5b:f1:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:36:50 2025 by rpki-client