Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5P139c5x-BwA2kSgXG_HKSfmk3s.roa
File: 5P139c5x-BwA2kSgXG_HKSfmk3s.roa (raw, json)
Hash identifier: 7Mumn3Qq4iV7yOe5vHTIVw5pQuA/WeXe4JRjaQVvZSk=
Subject key identifier: E4:FD:77:F5:CE:71:F8:1C:00:DA:44:A0:5C:6F:C7:29:27:E6:93:7B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018C9FF84A048E2F7D22B20D93231E4240D0
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5P139c5x-BwA2kSgXG_HKSfmk3s.roa
Signing time: Mon 25 Dec 2023 07:54:58 +0000
ROA not before: Mon 25 Dec 2023 07:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.34.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9f:f8:4a:04:8e:2f:7d:22:b2:0d:93:23:1e:42:40:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Dec 25 07:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4fd77f5ce71f81c00da44a05c6fc72927e6937b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:d9:35:63:5b:85:6c:d5:1f:b4:cc:d9:5f:
f5:0d:c1:fe:3b:80:3a:9d:09:03:9f:2c:37:40:f5:
2b:f3:60:b0:53:a9:8c:2d:27:2d:45:ca:d9:4a:fa:
fa:70:10:84:83:11:cf:47:b5:cd:27:2b:e1:b4:34:
55:12:a1:5a:d4:b1:79:c4:12:9c:76:65:3d:c9:b2:
b0:ac:fe:51:35:f7:f7:b6:20:19:47:69:6d:4f:0e:
1c:bd:f7:16:d1:46:ab:39:5c:a2:f5:be:84:b1:b6:
8e:33:84:ba:5d:51:3a:22:da:46:82:ce:d8:65:18:
bb:3f:2c:fc:b1:79:1a:4d:16:78:74:f6:74:a5:21:
e3:16:8f:49:0a:5f:09:97:91:61:f1:06:8e:69:d8:
2b:99:dc:63:c6:69:6b:01:5e:4e:ce:12:81:39:a5:
d7:9d:83:01:31:01:8e:d6:b0:9b:ae:bb:86:68:09:
95:44:61:ef:b5:3e:db:6f:27:f1:e2:fe:f6:c6:4e:
4a:21:32:4f:3b:36:83:ef:f9:c2:5b:c5:e4:cf:31:
60:56:29:e2:74:d3:0e:b1:9d:cd:a2:65:97:c0:5c:
ce:40:67:7d:dd:c5:c9:ac:a8:c1:d7:70:a3:b5:38:
69:3c:89:05:3a:f8:75:00:47:bc:53:eb:63:f4:63:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FD:77:F5:CE:71:F8:1C:00:DA:44:A0:5C:6F:C7:29:27:E6:93:7B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5P139c5x-BwA2kSgXG_HKSfmk3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.34.0/24
109.121.44.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d2:ed:27:1d:c9:52:48:ee:e3:e1:d9:92:01:1f:6a:ac:88:
27:37:0a:33:4a:19:58:df:f3:c1:ee:78:ec:69:be:1e:de:e0:
0a:a1:ae:51:17:a1:df:56:97:c3:2a:8d:52:44:29:49:15:40:
15:af:bd:06:97:ca:0f:80:b9:66:aa:48:74:9b:1d:4a:82:ef:
09:79:9b:f2:26:2f:78:eb:89:d4:7a:cf:f4:c0:eb:72:9e:10:
e5:56:d1:d4:58:e8:43:6a:b9:84:4c:76:17:a0:54:7b:e6:05:
97:db:ce:14:e1:a5:84:42:48:5a:c7:56:7f:73:f2:4c:54:72:
2f:8d:7c:0e:ad:2d:64:6e:f9:07:b2:22:cf:f0:48:72:1d:44:
3d:aa:62:3f:82:1b:6e:44:4e:d4:cc:23:b2:46:1d:89:79:97:
40:02:64:79:9a:51:57:9e:d7:80:1b:a9:a0:b7:ce:2c:4d:f3:
da:c6:ef:a1:ed:83:1a:9e:a4:bf:4b:ba:90:54:27:7b:67:ca:
46:41:7a:be:c1:a0:39:94:b4:3e:b8:b3:22:57:da:aa:49:40:
01:96:b2:7c:9d:dc:dd:ad:a3:43:97:e1:bf:74:a4:d6:8b:ad:
a0:97:06:bb:38:b8:49:6c:f2:1a:71:17:4f:d4:f3:4c:29:ec:
15:a7:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org