Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1QHvMGcRB6U0eYYiwZcRul4hjq4.roa
File: 1QHvMGcRB6U0eYYiwZcRul4hjq4.roa (raw, json)
Hash identifier: JqVCl48o8qJkFSgTwxk+KjH9XvUq1VYBxS/o8bFuUoA=
Subject key identifier: D5:01:EF:30:67:11:07:A5:34:79:86:22:C1:97:11:BA:5E:21:8E:AE
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E16D205E6A55CF8A12AFAB8FD84D6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1QHvMGcRB6U0eYYiwZcRul4hjq4.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400039
IP address blocks: 188.255.129.0/24 maxlen: 24
77.105.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 18:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:16:d2:05:e6:a5:5c:f8:a1:2a:fa:b8:fd:84:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d501ef30671107a534798622c19711ba5e218eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:87:5e:12:d8:53:db:f7:10:34:17:f6:62:
e1:16:49:ec:71:53:03:61:f2:e9:4b:f4:13:65:9e:
58:00:27:67:eb:74:98:2f:ed:5e:fc:05:f1:f0:0d:
cb:02:b2:00:f9:8e:1e:f9:1a:61:8b:5e:86:ab:b6:
20:6d:8a:83:11:f9:59:5b:7d:78:e7:f7:e0:22:ca:
e6:3f:e0:55:47:89:e4:33:ba:da:07:b3:ba:c2:eb:
36:32:62:68:c9:46:8c:ac:2d:16:69:ba:3f:44:b2:
83:b6:bb:ad:48:a5:78:12:a7:30:b3:07:a7:e7:8f:
0b:e1:28:5f:16:37:7e:ab:57:77:08:b8:62:a3:31:
41:b7:3c:8d:f3:9d:b1:76:2e:99:cc:d8:f3:ea:2c:
0b:07:54:c5:38:9c:7e:d7:af:01:da:cf:11:21:31:
89:03:f1:ff:90:d0:a6:70:7d:72:2a:c5:db:ce:86:
2b:43:c6:1f:9a:b1:29:a0:2e:2c:e4:a9:d9:f3:58:
01:ce:68:81:88:5c:60:0f:01:98:5d:43:d0:64:06:
f3:a5:0b:70:1d:78:62:ee:35:ea:83:16:84:3c:b3:
40:05:da:dc:41:e2:09:b2:2d:ef:60:84:45:d6:a2:
38:47:4a:90:27:5d:73:f3:06:84:c9:82:27:1b:67:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:01:EF:30:67:11:07:A5:34:79:86:22:C1:97:11:BA:5E:21:8E:AE
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1QHvMGcRB6U0eYYiwZcRul4hjq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
188.255.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ce:30:71:eb:ec:d4:48:8a:37:75:4f:ca:4a:2d:70:79:cc:
5c:1e:e4:54:cb:f3:8e:1f:76:f1:31:73:d4:b2:75:41:5d:71:
33:30:15:4b:22:21:bd:11:35:82:18:19:e0:db:39:29:72:d0:
0c:08:b8:9c:1d:70:f6:d1:d8:14:dd:05:0f:f5:fa:c1:0a:1c:
83:ae:82:15:aa:01:e6:1e:20:15:d7:1a:17:6a:74:cd:f8:39:
5f:0f:a8:4e:9c:3b:05:89:d9:6e:4d:14:e6:3f:4f:b0:fe:d0:
70:c0:21:f6:1a:76:76:c4:f0:18:94:5f:0a:d1:8d:ea:aa:6b:
58:da:76:fe:3d:39:1a:45:6c:3e:67:10:13:e8:da:2e:a2:2e:
86:44:56:6a:18:da:e2:c8:8d:0c:b1:9e:84:5d:85:5c:98:88:
0f:06:38:9d:02:50:97:03:2d:a2:ed:f5:c4:28:01:a8:83:08:
94:14:e0:e7:4f:53:e1:4a:fa:06:fd:95:bb:ec:87:23:9d:9d:
87:b1:c6:d5:0e:32:e7:25:eb:86:b9:0a:14:ab:cf:eb:c6:47:
17:ca:46:55:84:7c:7f:38:20:35:1b:f0:31:9a:19:9f:62:a5:
14:0c:bc:0a:5b:15:71:57:1e:36:fe:a3:2f:70:68:9b:15:66:
6d:71:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 22:26:41 2024 by rpki-client on console-fra.rpki-client.org