Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8rVS0fz2t07f5tIuIJuSVaN-UTw.roa
File: 8rVS0fz2t07f5tIuIJuSVaN-UTw.roa (raw, json)
Hash identifier: +BkhEYmL2vZezcWr+8fyoy3jPjhog9Qt7pWGm7KC2mc=
Subject key identifier: F2:B5:52:D1:FC:F6:B7:4E:DF:E6:D2:2E:20:9B:92:55:A3:7E:51:3C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0189590ADFFB096987DC56BEBBC4D2AC6A5F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8rVS0fz2t07f5tIuIJuSVaN-UTw.roa
Signing time: Sat 15 Jul 2023 10:13:52 +0000
ROA not before: Sat 15 Jul 2023 10:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.255.206.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Jul 2023 19:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:59:0a:df:fb:09:69:87:dc:56:be:bb:c4:d2:ac:6a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 15 10:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2b552d1fcf6b74edfe6d22e209b9255a37e513c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:2f:73:4f:e0:ce:ee:45:e5:80:bc:49:f9:
7c:d5:42:a8:8f:e9:c0:30:6e:68:95:3b:77:9d:22:
ca:6c:88:96:f2:45:7c:ea:e0:ed:e0:77:2e:7e:53:
fa:4d:42:dc:b9:49:e9:7b:13:fe:23:4a:79:4f:c8:
77:ca:ca:3b:a0:77:08:a6:cb:78:20:88:e3:77:f6:
49:7b:05:7d:0b:0e:9e:07:f8:e5:03:60:3c:50:91:
68:51:21:54:1d:43:f9:89:c3:b8:bb:4c:2d:73:08:
81:d9:a3:7b:70:44:79:a7:77:7f:fe:f5:52:9b:5a:
53:eb:68:8f:44:c4:74:ca:33:b5:ed:d7:34:6e:a9:
6e:b8:e1:e5:21:0c:d9:7a:c0:c9:92:8f:cd:3c:af:
9d:79:98:71:2a:56:60:d4:10:d8:77:f5:d6:98:ce:
76:78:fa:6b:bd:95:ba:38:d3:35:0c:24:74:b3:d2:
05:77:8e:5d:7f:72:6b:b5:a5:a7:e7:b8:c3:7f:b8:
0c:fc:07:85:f7:e4:ba:df:0e:16:1e:00:1d:2f:79:
cc:8a:85:1b:83:48:21:f2:38:00:5b:3d:2e:a2:70:
74:4d:db:08:ef:8a:72:c6:5f:c6:c0:88:b3:c5:03:
0d:0f:d7:59:65:79:13:5f:06:47:ec:1b:99:57:6e:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B5:52:D1:FC:F6:B7:4E:DF:E6:D2:2E:20:9B:92:55:A3:7E:51:3C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8rVS0fz2t07f5tIuIJuSVaN-UTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
109.121.35.0/24
109.121.43.0/24
188.255.134.0/24
188.255.206.0/24
Signature Algorithm: sha256WithRSAEncryption
02:28:41:df:0a:4f:87:bb:48:a7:dc:04:25:b6:97:bf:9e:31:
88:b3:22:6e:af:2a:4f:6d:d8:dc:a8:18:f4:ba:d5:9e:eb:f6:
8d:45:00:50:1a:cf:2e:49:aa:c2:41:4e:8d:8b:db:f1:22:57:
77:1d:54:73:f3:32:7f:ba:46:45:d3:fa:5c:56:2a:e4:e4:60:
19:52:fb:1c:05:0c:ef:d3:35:89:b9:7c:dc:d4:0c:82:6d:b2:
c9:f6:37:f8:b9:72:1d:1f:82:53:99:a5:2e:90:bf:f1:02:54:
48:d2:a6:e6:30:70:6d:4d:ff:86:ae:8c:dc:ae:65:a6:ac:70:
f8:ac:6e:3b:32:9f:d5:be:2d:3c:24:93:51:d4:3e:7c:b9:30:
cb:7d:4e:4b:89:01:04:10:22:ce:39:c0:09:f1:08:80:81:64:
c3:5c:15:18:e4:e9:78:7a:41:0d:84:80:b8:16:41:c7:1b:6e:
4c:0c:93:a6:f3:2b:cf:d2:bb:6a:2c:3a:6a:c8:aa:33:f2:35:
cf:d4:b0:51:94:f3:12:3b:2e:23:43:94:77:6a:0a:f6:6b:5a:
bc:a1:15:3c:eb:45:34:33:13:07:6f:e8:d1:28:fe:18:44:6a:
cf:01:59:04:c4:43:a0:10:b1:7f:43:55:84:8f:0b:ca:a7:96:
43:76:5d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org