Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/fMBxbjMV_FodvrxLMCuRqXzakGc.roa
File: fMBxbjMV_FodvrxLMCuRqXzakGc.roa (raw, json)
Hash identifier: gaHQfoxC8WBSTgUZkwXVKJuoZ/Vup/3XR+exKLB9mW8=
Subject key identifier: 7C:C0:71:6E:33:15:FC:5A:1D:BE:BC:4B:30:2B:91:A9:7C:DA:90:67
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01941F8C8515AA59C0FCA1F826CA4F3156D5
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/fMBxbjMV_FodvrxLMCuRqXzakGc.roa
Signing time: Wed 01 Jan 2025 01:48:10 +0000
ROA not before: Wed 01 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 109.122.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 02:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:85:15:aa:59:c0:fc:a1:f8:26:ca:4f:31:56:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cc0716e3315fc5a1dbebc4b302b91a97cda9067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:90:b0:4c:4f:a4:3e:2b:c5:7c:b9:ab:66:
d2:66:5d:a4:20:11:d7:b2:f4:e7:e9:f0:28:31:80:
41:75:b1:8c:32:28:0f:5b:f7:1c:60:34:dd:97:c0:
d9:c3:4d:bb:2b:ba:b7:86:00:67:e1:45:93:d9:dd:
56:d1:03:70:2f:89:e6:3f:89:ab:7a:bf:ac:3b:8f:
ce:60:69:38:89:79:e8:ba:87:fd:5c:78:e9:3f:f7:
df:07:ed:c8:0b:c9:96:e5:ac:66:e1:e2:e7:51:45:
dc:1a:d2:18:65:41:ff:74:96:48:41:d7:89:e9:96:
0a:b1:fe:70:b2:ea:34:4e:a8:b8:d1:b4:bd:f3:67:
da:e0:26:bb:18:1d:a6:c6:50:09:f8:e5:4c:8e:4b:
20:aa:47:58:76:35:7e:05:86:7c:28:bd:42:48:49:
f6:f1:f2:58:88:e2:85:74:a6:0e:7c:b2:ce:37:4c:
28:d1:f3:b4:b7:08:32:fc:8c:4c:5d:42:6e:b5:d9:
21:42:94:e0:46:40:b8:6c:93:76:aa:dd:d8:d6:f2:
f2:3a:8d:3e:fd:88:42:0c:46:40:2c:e9:c7:01:44:
8a:2c:dd:80:64:90:33:31:df:d5:f7:ac:5c:62:76:
1f:d8:70:58:5e:12:52:b3:2c:bb:00:f7:68:bd:de:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C0:71:6E:33:15:FC:5A:1D:BE:BC:4B:30:2B:91:A9:7C:DA:90:67
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/fMBxbjMV_FodvrxLMCuRqXzakGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.253.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a2:ed:a3:b1:40:2a:d5:77:1d:96:e3:3a:44:9d:e5:30:45:
d0:ba:5a:64:69:98:b0:24:99:e3:d7:4b:82:88:e1:6d:b8:00:
d7:fe:81:f2:f0:08:8e:c5:29:a5:47:7b:28:45:45:ad:56:dd:
b0:79:a5:41:68:00:ec:32:ad:e9:03:1b:6d:db:43:85:05:f0:
6e:61:29:33:17:c8:49:2a:4e:26:a0:c5:25:3f:52:ef:56:e0:
f6:1a:20:f9:e8:31:79:34:0a:ad:b6:9d:8f:00:36:ca:6b:ff:
04:3a:2d:91:bd:57:20:b6:3c:e6:47:ab:69:6d:65:ab:30:38:
b0:44:66:66:f3:39:6e:5e:40:9f:31:4b:0b:e8:65:96:cb:ae:
3d:55:75:26:9c:51:8d:9c:68:e4:60:00:e0:15:ff:21:8b:9d:
94:5c:50:9c:93:d3:3b:7c:bb:89:fa:94:a8:42:81:3b:bd:04:
6c:3f:42:b1:63:a2:7a:e8:6d:8a:ce:0e:d7:ee:e5:ec:3d:a1:
85:20:11:b7:60:94:d8:e0:2e:00:63:0d:72:cd:79:93:a1:2e:
50:b7:8e:4b:68:61:bd:92:ae:81:13:d8:03:0c:78:a3:ed:4e:
90:bd:40:5b:86:55:26:e2:b9:d9:6f:9f:7b:b2:8b:b4:74:e1:
c6:f9:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:10 2025 by rpki-client