Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6hV_jvDthrxVVnBzUcXd9ajpqec.roa
File: 6hV_jvDthrxVVnBzUcXd9ajpqec.roa (raw, json)
Hash identifier: N7xlby9JjbqLM3bJUCqTzczxQ+/tAHBdEnis3JH7kGU=
Subject key identifier: EA:15:7F:8E:F0:ED:86:BC:55:56:70:73:51:C5:DD:F5:A8:E9:A9:E7
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7CC8A1F5939BD7B88E3CC791FC0E5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6hV_jvDthrxVVnBzUcXd9ajpqec.roa
Signing time: Mon 02 Jan 2023 09:37:26 +0000
ROA not before: Mon 02 Jan 2023 09:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 79.175.96.0/24 maxlen: 24
79.175.95.0/24 maxlen: 24
188.255.212.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.34.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.39.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Feb 2023 15:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:cc:8a:1f:59:39:bd:7b:88:e3:cc:79:1f:c0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea157f8ef0ed86bc5556707351c5ddf5a8e9a9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:f1:26:d5:e1:7f:0d:90:59:e7:7b:cd:0a:
84:fb:de:91:31:1e:e2:24:54:06:11:9e:b4:92:2d:
14:8c:75:a5:b3:a2:be:a0:9d:ef:6e:5e:d9:32:bb:
cd:a1:9c:26:90:1d:27:4b:9b:38:54:c5:7b:52:9d:
75:5e:10:17:00:8f:1f:48:a5:44:cc:c6:9a:5f:e7:
a1:d1:fd:02:f7:9a:d0:9a:4c:00:f1:93:88:c9:0f:
1a:2f:b0:6e:a6:54:35:65:ba:c7:56:4e:5c:20:87:
db:89:74:4e:e8:4f:a7:30:77:c7:84:d1:34:ed:72:
b3:a4:5a:17:25:92:23:70:dc:47:94:a7:da:94:c9:
3e:02:be:30:d4:88:fb:86:e5:db:1e:ef:39:04:5b:
64:c4:bc:98:54:74:21:89:c9:95:a8:a6:08:b2:3b:
6a:4d:03:f5:72:00:b3:42:77:0f:a5:bb:de:16:ff:
e1:49:e8:fc:c2:02:ea:7d:b1:79:7a:61:a0:68:a0:
53:9f:5d:c0:2e:bf:57:a4:5f:ac:b5:12:6a:7a:5f:
3a:7e:cf:2c:08:91:76:cc:d8:37:18:b6:17:c2:40:
d1:8c:fc:27:d7:26:dc:2b:02:26:b1:ba:8c:a9:ac:
62:5e:8b:5c:e0:8a:55:7d:a4:9d:32:3d:61:5a:82:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:15:7F:8E:F0:ED:86:BC:55:56:70:73:51:C5:DD:F5:A8:E9:A9:E7
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6hV_jvDthrxVVnBzUcXd9ajpqec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.95.0-79.175.96.255
109.121.33.0-109.121.34.255
109.121.37.0/24
109.121.39.0/24
109.121.41.0-109.121.43.255
109.121.45.0/24
109.121.47.0/24
188.255.212.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:04:0d:ec:50:a4:53:bf:63:ce:16:37:89:61:85:82:ab:96:
a9:e8:43:f4:9f:41:43:b0:e1:4c:ac:86:56:48:04:4a:7b:90:
69:cc:1a:06:6e:bb:99:c6:2c:f6:57:f1:da:ce:91:b7:8e:0f:
07:d9:64:6a:6b:18:aa:79:2c:fa:b6:e3:0b:2c:7a:5e:d6:e8:
2e:3b:9d:f9:ea:91:43:3a:68:89:37:46:8b:e6:e6:0d:f5:b3:
93:22:52:dd:7b:b5:fa:0b:1b:46:f5:65:42:14:20:fd:df:73:
66:4b:3d:2e:c3:ea:ef:7e:7c:d8:a7:de:3a:2f:ea:05:08:49:
05:25:b9:73:74:bb:c9:1f:93:6b:25:25:e2:28:71:51:94:7f:
92:35:81:dd:a3:2b:82:c3:d0:81:b4:6c:76:3e:d9:77:c8:69:
69:42:72:34:6f:f7:d8:eb:08:0e:a2:da:7e:1c:6b:38:22:8b:
82:a7:c6:b6:d6:15:77:6f:f6:93:c5:26:6a:98:d3:7d:c2:61:
2a:bb:42:c7:a1:72:75:42:14:8a:e1:77:47:3d:6f:90:73:2b:
23:7e:a4:47:02:dd:67:88:ef:ac:e9:fb:0d:7a:e2:ab:72:62:
2a:12:07:02:52:8e:80:ba:61:f0:e5:f7:f7:27:43:a3:aa:56:
f9:34:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org