Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6M2HLUQqXihd3QohpgINsijdHBM.roa
File: 6M2HLUQqXihd3QohpgINsijdHBM.roa (raw, json)
Hash identifier: UIuM2kdD2Km9HDXclyQU8nCKMq9gdAkvvbcMRQFYcKY=
Subject key identifier: E8:CD:87:2D:44:2A:5E:28:5D:DD:0A:21:A6:02:0D:B2:28:DD:1C:13
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018721EE22108044A8FB782B05B9B5533637
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6M2HLUQqXihd3QohpgINsijdHBM.roa
Signing time: Mon 27 Mar 2023 07:17:46 +0000
ROA not before: Mon 27 Mar 2023 07:17:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 109.121.38.0/24 maxlen: 24
188.255.135.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:21:ee:22:10:80:44:a8:fb:78:2b:05:b9:b5:53:36:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 27 07:17:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8cd872d442a5e285ddd0a21a6020db228dd1c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:c2:57:28:8f:a7:36:b6:3c:1a:7c:38:fb:
41:f5:ff:40:09:b9:39:39:f0:a0:01:8a:61:fc:6a:
93:22:d8:e5:2d:74:ea:c9:29:2a:f8:c8:a2:3b:d2:
cb:cd:7c:fc:1a:4b:bb:75:65:f0:ee:6d:ff:b7:51:
41:0d:d5:51:38:1b:03:2e:c7:8e:a7:dd:90:7b:ab:
f7:d9:9b:24:57:6d:2b:c1:e1:f8:f4:6a:24:7c:99:
a8:1a:e5:b5:5d:6d:5b:6a:cb:36:ec:5f:4c:cf:b2:
29:9f:82:48:a4:3c:c9:33:de:41:b1:aa:d5:0b:c8:
1e:15:6e:50:d7:1c:38:ea:57:96:74:d0:fb:15:64:
89:56:3f:df:11:0c:11:f2:36:85:3b:5f:75:ea:de:
b2:24:9e:c9:8d:88:6b:b4:3d:9c:d0:7d:f8:40:96:
d4:04:8b:40:b8:23:1c:18:8e:f2:c7:fb:02:4a:39:
bc:96:1b:20:32:0a:a1:fd:a4:64:49:bf:f2:f4:08:
8d:8f:6e:92:a5:1a:2c:29:02:ea:f0:ec:ef:36:1a:
2d:4a:25:a5:49:54:06:3c:9c:86:55:f9:aa:d1:e5:
8a:21:5d:04:37:a5:27:41:cb:04:c6:32:4c:b8:8f:
0f:74:e5:c8:06:3a:1e:2d:93:20:a0:f0:55:77:ce:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CD:87:2D:44:2A:5E:28:5D:DD:0A:21:A6:02:0D:B2:28:DD:1C:13
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6M2HLUQqXihd3QohpgINsijdHBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.38.0/24
109.233.185.0/24
188.255.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:54:e1:c5:d5:1d:7e:2a:b5:ed:90:a5:a5:45:d6:86:80:bb:
3d:da:b7:3b:b4:f7:39:56:be:f2:2c:bd:40:be:c9:8c:a1:a3:
84:a8:9b:e6:5a:52:83:cf:9d:ee:57:cb:9c:fe:b8:33:5d:85:
93:9b:5c:10:e4:85:4f:dd:57:3e:cd:1c:a4:52:92:a9:34:9b:
9b:4f:ff:bb:b1:23:ea:8f:e6:ae:61:40:c7:5c:b6:b3:05:91:
36:fd:48:27:cd:73:bc:3a:92:9b:d5:77:66:e3:97:e8:15:cb:
e6:19:f4:39:b3:b6:fb:0a:20:e3:8c:69:6c:8f:49:cf:58:1d:
0e:57:90:af:de:c5:6a:5d:c5:83:4b:8d:0b:16:30:c0:9d:34:
a0:c2:fe:b6:81:79:11:9b:d8:12:c1:ff:24:78:4a:10:ec:c8:
70:8c:a7:1a:b2:9b:32:81:c9:21:27:2f:5a:0e:4b:75:a4:d3:
cb:a3:e4:c4:4c:08:00:4a:ba:90:34:c3:24:a2:3e:f8:f6:0e:
94:a1:5f:32:02:26:3c:26:0a:e8:9b:5e:a4:29:0a:66:67:47:
ab:1d:a6:4f:93:59:46:63:0d:b2:a4:d6:28:f2:c1:14:6b:de:
5e:e7:46:f9:00:0a:de:a1:28:f3:b1:9c:f7:80:93:c1:7a:02:
d4:4b:79:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org