Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BLRpQ5wimfZX83Ek_5jBhDk_2UY.roa
File: BLRpQ5wimfZX83Ek_5jBhDk_2UY.roa (raw, json)
Hash identifier: /f31ATK4xCz+ouMjvoAgHscnrsNbtWhV7nyxXHRYMgQ=
Subject key identifier: 04:B4:69:43:9C:22:99:F6:57:F3:71:24:FF:98:C1:84:39:3F:D9:46
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0193FBEFE857684115E8B05BEB19BCEFF806
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BLRpQ5wimfZX83Ek_5jBhDk_2UY.roa
Signing time: Wed 25 Dec 2024 03:50:23 +0000
ROA not before: Wed 25 Dec 2024 03:50:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214526
IP address blocks: 109.122.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 10:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fb:ef:e8:57:68:41:15:e8:b0:5b:eb:19:bc:ef:f8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Dec 25 03:50:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04b469439c2299f657f37124ff98c184393fd946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:cf:3a:ba:27:58:30:10:51:3d:99:b5:97:
96:61:f8:29:ff:28:a1:67:43:8c:a5:0b:ab:8a:3d:
e7:68:13:57:a4:be:a1:b5:d3:f9:03:c6:47:ee:e1:
2d:d6:c9:f9:bb:94:9b:c2:3a:3e:8a:07:db:41:45:
06:43:f6:5b:7f:d8:b6:57:5e:a5:63:2d:58:26:b9:
02:59:5f:8d:20:6d:b5:e9:69:5d:28:87:82:87:e4:
27:75:72:9f:40:31:cb:8b:41:0b:63:8f:cd:c2:8d:
3d:31:0d:4b:23:be:2e:7f:a8:fc:a8:a5:2f:e4:9d:
78:60:72:18:00:59:7f:4c:3f:86:38:27:6f:cd:e2:
68:18:6e:eb:ea:91:db:07:76:af:98:20:27:67:5a:
30:b3:79:b9:61:7e:f6:58:ab:b9:80:a3:5d:b1:f2:
0c:94:62:06:e5:55:f0:28:ce:a0:f2:9c:00:38:7d:
4d:b6:dd:44:d1:56:ef:d2:b8:83:9e:2d:fe:49:f0:
b7:4d:0b:19:6e:15:17:8c:3b:6c:0f:c7:4d:30:a1:
8e:84:cf:3d:09:39:73:0f:07:a5:35:44:bb:c3:94:
77:f1:bb:1e:9c:a0:cb:fe:16:7a:70:51:5d:89:1d:
b4:3e:3c:94:16:67:58:b5:e9:3d:c3:bf:12:3a:7a:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:69:43:9C:22:99:F6:57:F3:71:24:FF:98:C1:84:39:3F:D9:46
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BLRpQ5wimfZX83Ek_5jBhDk_2UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.252.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e5:60:3b:f3:d5:85:2f:af:97:54:c1:5e:92:56:66:ee:ac:
f6:7a:f0:12:3e:4f:e4:bb:18:c9:51:44:48:97:5e:62:f0:9d:
b7:40:5a:99:d9:39:cb:ae:97:c0:8e:7d:2d:0c:eb:08:a5:3e:
7a:88:fc:d2:78:db:19:87:32:5e:80:6d:50:9b:83:4f:3f:a0:
f7:9d:b1:c3:6a:44:e5:22:33:de:79:9f:ad:9c:b0:cf:3a:01:
f7:d3:ad:46:85:1d:c8:5b:f2:14:10:f1:17:46:91:ba:5c:b2:
4d:e5:fb:fd:51:13:f6:cc:c7:fa:4d:be:7a:1e:6d:81:3e:df:
96:0b:ad:a8:0e:98:23:d9:64:52:79:d4:4a:e3:98:29:1a:df:
d6:05:d6:63:93:19:ee:c6:1c:d3:14:01:b7:3d:b0:c7:1c:7f:
5f:af:a1:cb:c3:0e:b6:17:ac:dd:4e:0e:ce:05:85:c0:f6:8a:
62:8a:2c:7e:c7:e7:39:b6:2d:fd:fe:05:f6:cf:96:78:d6:f9:
51:18:6b:67:75:d5:2c:a0:62:5a:5c:3c:4e:c7:5e:5a:52:48:
23:1d:3c:8f:da:71:77:1b:b9:5f:46:aa:e9:f7:d2:49:4b:20:
7f:a2:80:8d:3d:6b:f7:17:e8:ff:81:90:11:d9:f9:e1:9f:66:
ef:e4:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:45:29 2025 by rpki-client