Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5SVm_u5fh42XK8PoHKO8LbgLs_w.roa
File: 5SVm_u5fh42XK8PoHKO8LbgLs_w.roa (raw, json)
Hash identifier: NiAfOW8r5M6U8NMDir2ldcqlsBUIr6XF+YCvtI8BwR0=
Subject key identifier: E5:25:66:FE:EE:5F:87:8D:97:2B:C3:E8:1C:A3:BC:2D:B8:0B:B3:FC
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0186783DBE805B64B05361691F3AECF593BA
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5SVm_u5fh42XK8PoHKO8LbgLs_w.roa
Signing time: Wed 22 Feb 2023 08:29:17 +0000
ROA not before: Wed 22 Feb 2023 08:29:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 109.121.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Mar 2023 21:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:3d:be:80:5b:64:b0:53:61:69:1f:3a:ec:f5:93:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 22 08:29:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e52566feee5f878d972bc3e81ca3bc2db80bb3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:57:52:4a:03:4f:c2:aa:f8:42:88:16:6b:
24:e7:fe:00:74:a5:b3:e4:11:1c:81:c6:f1:ad:d3:
84:5d:0e:b7:ec:92:0c:b1:7d:75:3a:77:80:28:de:
ef:d3:78:95:6d:dc:2c:b7:b0:b9:15:3b:e0:67:ab:
4e:98:40:29:c3:d2:5a:dd:0c:f9:2f:20:c2:80:f9:
6a:f2:15:d3:50:c8:15:e6:96:b5:a4:ea:4f:42:d1:
7c:c1:3f:d4:1d:b3:bf:d4:f9:ad:4d:30:53:99:2d:
14:94:ae:96:66:20:fd:8b:64:15:fe:99:3e:b2:e3:
56:0c:00:a1:4e:39:4c:fd:31:ca:88:cb:d4:3f:45:
66:b2:c6:6b:07:cd:e6:78:1e:03:62:e0:47:53:71:
de:84:1a:23:ef:80:99:99:7e:db:81:e9:9c:4e:2c:
9a:c6:9e:5d:90:08:52:df:91:30:7e:b1:53:dc:85:
d8:d3:f8:c1:c2:28:39:88:c7:07:a3:7b:c8:41:db:
59:22:e5:bc:bf:cb:67:ec:1d:f6:b2:2c:5e:a6:cd:
d2:08:c5:7d:75:ab:b2:20:ea:8b:24:1a:15:ff:b2:
a6:b6:3b:7e:22:a0:7a:d0:36:18:b5:ec:18:66:2d:
eb:47:cc:65:b4:b4:41:ea:60:2c:d6:b0:ee:51:f8:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:25:66:FE:EE:5F:87:8D:97:2B:C3:E8:1C:A3:BC:2D:B8:0B:B3:FC
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5SVm_u5fh42XK8PoHKO8LbgLs_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d4:93:70:07:9f:ef:dd:6f:aa:c4:91:6e:0b:33:f3:81:f6:
35:83:33:5f:dd:c3:98:bb:75:de:44:f8:36:5f:1b:95:7f:b1:
d5:72:cd:31:bd:55:b2:2c:50:3c:9e:97:c2:46:6c:16:b4:38:
41:67:e8:d3:f8:dc:90:51:68:db:7f:e2:07:df:82:12:0e:4d:
74:16:1f:95:92:6c:8c:dc:fc:d6:4f:44:81:4f:0b:c4:82:d0:
aa:04:cf:16:26:39:ff:7e:77:dd:89:ac:89:de:ce:2d:e7:17:
4b:b6:7f:9d:4c:da:9d:c4:12:b7:54:60:26:d5:5d:b0:07:05:
59:6b:bd:49:e2:75:36:df:61:57:a9:b9:54:35:44:3d:56:c8:
79:94:59:c5:a2:05:4b:27:99:51:f3:da:9d:c0:33:c8:dc:da:
45:3f:75:e9:42:a5:58:47:68:be:62:08:2a:e8:b2:3d:70:e1:
43:16:2e:cf:b7:b7:e1:4b:ef:b8:a6:06:ba:b6:04:b9:b6:75:
36:8c:ab:c6:14:57:1d:6d:c3:42:84:ad:7b:63:27:83:33:f1:
a7:19:1c:cc:92:73:71:64:31:c3:14:f0:d2:16:85:01:64:10:
df:0a:49:fb:e7:dc:7a:17:2c:38:c6:c4:27:6d:56:bb:fb:93:
7c:93:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org