Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6TL2PIBhrEk3tx5H4T9l1SbiDmo.roa
File: 6TL2PIBhrEk3tx5H4T9l1SbiDmo.roa (raw, json)
Hash identifier: A7tCFKWJGiOHxN5oZPi81l/o6UD7EMd+HXG0EPzdlIA=
Subject key identifier: E9:32:F6:3C:80:61:AC:49:37:B7:1E:47:E1:3F:65:D5:26:E2:0E:6A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0187B88C656E380A2EA2120CE47917728573
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6TL2PIBhrEk3tx5H4T9l1SbiDmo.roa
Signing time: Tue 25 Apr 2023 13:13:41 +0000
ROA not before: Tue 25 Apr 2023 13:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 109.121.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:8c:65:6e:38:0a:2e:a2:12:0c:e4:79:17:72:85:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 25 13:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e932f63c8061ac4937b71e47e13f65d526e20e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:bd:09:e8:8a:d7:d4:75:b5:97:35:b8:a6:
29:cf:4d:ba:58:ce:f8:23:44:6b:eb:0d:ac:2b:4c:
94:53:a1:62:29:b7:57:6b:e0:0c:f4:57:d4:16:46:
b5:d5:3e:90:f7:cb:de:cc:a7:8b:35:5a:fc:44:ee:
70:5e:8e:b0:e6:3a:9f:7f:38:51:cf:cc:4e:22:21:
b9:6f:4f:c7:6c:79:32:cf:07:90:9a:b1:4f:58:43:
95:81:21:4d:0f:66:c1:14:72:d9:8f:8a:b3:99:e2:
de:18:01:86:78:f6:ec:7d:36:65:3c:12:3b:ba:20:
c4:ac:fc:f7:87:4d:a0:24:26:2b:a9:42:56:fc:41:
ae:9f:7e:bd:90:9c:47:bc:5e:74:2b:a4:62:1d:d4:
3e:33:68:9c:13:86:d7:fc:49:04:9a:4e:e7:c9:04:
ad:92:81:f3:51:9b:3a:b2:48:c1:fa:51:67:c9:0f:
82:b7:67:74:0d:d0:be:01:fb:6e:bd:8b:75:81:61:
28:52:52:29:ed:97:ee:a2:b4:b1:1d:b1:6c:7c:d6:
76:82:f6:0b:bb:03:60:fa:2e:8d:69:fa:84:0b:21:
e6:53:fa:7f:68:6c:38:41:40:2e:0b:84:1d:ae:c8:
a7:05:80:54:40:51:ff:e0:4e:61:02:d5:54:a9:00:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:32:F6:3C:80:61:AC:49:37:B7:1E:47:E1:3F:65:D5:26:E2:0E:6A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6TL2PIBhrEk3tx5H4T9l1SbiDmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.36.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2d:8e:db:d6:a8:f0:02:2d:ff:d8:1c:0a:19:8a:35:53:54:
dc:cb:af:14:b2:ce:23:ac:70:98:c5:ba:8f:69:6f:fb:53:1b:
31:39:1c:e3:4c:66:1a:72:79:73:aa:52:a3:d3:63:25:d8:da:
80:c6:09:31:3a:e2:6f:9a:2d:c0:b6:23:4b:3b:8e:de:fe:9b:
32:c1:27:27:f3:2a:14:5a:22:14:cf:31:1b:f7:1a:0d:a2:db:
ff:b3:22:c5:86:06:5d:47:1a:be:b6:e9:ef:52:d0:08:77:8d:
e4:17:fb:7e:c0:0f:5b:0a:4f:d3:1d:da:33:98:b4:72:70:dd:
07:bd:2a:a2:8b:8c:1b:33:33:b8:5e:b8:71:88:0e:55:04:7b:
b7:0e:27:be:28:46:b5:8e:3b:7d:a0:8f:6f:e8:52:87:32:4c:
f8:01:78:99:03:9c:ac:e2:26:88:9f:4b:b2:87:9b:9f:e2:39:
40:90:d1:07:d9:45:a4:1d:46:a7:ac:90:ca:8d:69:f1:5e:d7:
51:85:4b:25:e1:1d:71:ad:d2:5c:ff:b3:2e:df:08:e9:3d:a4:
cb:35:6b:16:4c:ee:30:5e:0b:e4:f8:62:06:57:a1:a8:03:45:
93:20:e8:95:93:d8:66:cb:81:71:9b:e7:6a:8b:e4:40:dd:71:
79:69:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org