Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-g9tgWCoQoYsPlFp5CHI1BcnuQg.roa
File: 1-g9tgWCoQoYsPlFp5CHI1BcnuQg.roa (raw, json)
Hash identifier: cXdw1QgSuZIpixGLwOcK+3qfpAt39zUnvErpqTROI+E=
Subject key identifier: FA:0F:6D:81:60:A8:42:86:2C:3E:51:69:E4:21:C8:D4:17:27:B9:08
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018781349ED50D60493B25472640328DF390
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-g9tgWCoQoYsPlFp5CHI1BcnuQg.roa
Signing time: Fri 14 Apr 2023 19:18:41 +0000
ROA not before: Fri 14 Apr 2023 19:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.40.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:81:34:9e:d5:0d:60:49:3b:25:47:26:40:32:8d:f3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 14 19:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa0f6d8160a842862c3e5169e421c8d41727b908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:78:81:52:c4:ff:8f:0c:72:36:07:af:8c:
cd:e2:6a:d9:05:b4:7d:1d:c0:62:fa:37:0c:f4:5f:
f7:dd:29:59:71:b3:32:a9:a8:37:d0:be:b7:49:c5:
fe:5d:eb:1a:60:5f:bd:a4:9d:e9:b4:4e:22:c5:ca:
88:07:84:27:04:e2:0e:23:ca:94:62:50:7c:ad:f3:
bc:ff:fa:20:aa:2c:f1:8e:5e:8b:b0:58:5e:02:e6:
12:8c:8c:f6:4b:f2:5b:17:d6:02:a9:8f:96:6b:cf:
73:c9:57:b8:8b:c5:06:f4:ac:28:f0:ec:74:f3:ab:
57:59:ab:cf:35:bb:b0:97:37:ff:0b:f2:d9:a9:5c:
c1:d5:a8:a4:b1:d2:57:c0:a8:26:03:73:f0:38:55:
a2:ae:b8:1e:b6:25:e7:7d:07:3c:2f:07:70:ce:c4:
95:82:ad:d0:10:aa:b6:9d:df:50:1d:c2:a9:5d:ba:
8b:90:5d:9f:31:90:58:86:e7:fe:0e:7b:4a:cb:bf:
7c:3f:1b:78:00:8a:40:94:e8:24:f2:38:0e:6c:aa:
be:e0:f3:1f:c8:50:6f:be:fe:10:00:43:56:d2:7f:
c5:91:ba:38:3d:0e:8b:2a:e9:9a:ab:1f:8b:7a:b6:
ca:4c:a6:fe:0c:1f:e6:a2:66:88:b9:57:e7:81:d6:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:6D:81:60:A8:42:86:2C:3E:51:69:E4:21:C8:D4:17:27:B9:08
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-g9tgWCoQoYsPlFp5CHI1BcnuQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.67.0/24
109.121.40.0/24
109.233.184.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
93:9c:5e:d8:3f:bd:39:7b:12:c3:05:f8:4f:0b:c4:be:e3:a6:
05:cc:a0:7e:89:00:04:f5:b5:d7:8f:dd:8e:c7:7b:48:5d:0a:
d0:d8:d7:9e:04:62:bd:7a:83:fa:87:c8:9b:96:f5:80:1d:0b:
65:93:c4:ad:82:de:48:22:45:93:c1:3e:8f:09:56:e1:f4:39:
71:10:cc:04:77:9e:be:62:cd:3b:06:35:0b:82:c4:b1:1f:44:
2d:c3:f0:eb:c2:71:ad:6b:31:fc:a7:bf:82:5c:93:85:1f:01:
34:9e:c8:66:38:3b:75:0c:b4:f5:92:d4:03:34:e3:e4:96:92:
e7:94:d6:31:de:27:a1:90:c5:4d:b9:e8:e3:d5:5f:5f:4b:c2:
b8:d1:31:e3:57:0e:a6:8f:c7:cf:d7:9b:28:2a:f1:7c:a8:a8:
90:d2:0a:64:52:d8:ce:e8:6c:31:21:89:04:bb:e6:62:17:5f:
a3:e4:57:46:6d:b2:40:b2:16:b9:1c:00:93:67:c4:de:a4:23:
a1:dd:35:2d:50:28:d1:c9:35:d5:59:88:8a:2a:c2:dd:7a:8e:
a2:ea:e0:f0:e6:08:38:e5:6d:85:1d:3d:e8:9e:c1:f3:21:ef:
05:91:bb:69:71:60:5c:bc:b7:1a:3b:23:2e:06:52:2d:1b:ca:
e4:87:a2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org