Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/A7rPxKokoqStGLN-kHcMEDJmzyM.roa
File: A7rPxKokoqStGLN-kHcMEDJmzyM.roa (raw, json)
Hash identifier: l6mvvYK52+56oaxzNZUwSNJXwAenHikDgTZ4D6Et2Xw=
Subject key identifier: 03:BA:CF:C4:AA:24:A2:A4:AD:18:B3:7E:90:77:0C:10:32:66:CF:23
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CA05955C6495B8444AAA6EF27E3D4009F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/A7rPxKokoqStGLN-kHcMEDJmzyM.roa
Signing time: Mon 25 Dec 2023 09:40:58 +0000
ROA not before: Mon 25 Dec 2023 09:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.32.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a0:59:55:c6:49:5b:84:44:aa:a6:ef:27:e3:d4:00:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Dec 25 09:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03bacfc4aa24a2a4ad18b37e90770c103266cf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:c3:47:c4:96:c7:91:94:b1:1b:2a:be:26:
88:87:6b:6b:8d:e4:be:d2:0f:bd:64:33:0f:13:16:
d6:55:07:84:0e:a6:ce:b9:62:02:d1:42:86:11:3b:
10:a9:94:75:b5:29:94:cc:6f:75:d0:a2:f9:15:21:
d8:d0:4b:3b:ec:29:62:1a:9d:43:5f:91:b7:0a:c5:
02:a1:95:31:b1:2f:14:c1:2f:60:9d:5c:af:a4:64:
eb:af:d5:76:e3:9f:50:a0:dc:81:66:38:2b:00:93:
df:d7:ac:3f:10:a1:1f:85:c8:14:e5:68:c0:e6:d7:
95:b2:bd:6e:7a:32:4e:09:93:25:43:97:fe:83:fe:
ec:6f:77:7a:7e:cb:84:68:a8:c2:42:72:62:35:d7:
d3:db:70:9b:46:0e:74:6b:e7:82:2d:c8:72:c1:13:
d7:f3:c0:08:94:06:e4:6e:ed:94:5c:5b:75:b0:b8:
87:56:1b:98:2b:6f:9c:2b:49:a3:f1:bb:c4:ce:42:
92:aa:de:6d:55:1f:72:d9:56:2e:cf:7d:c8:91:81:
cf:8e:1e:14:eb:8b:7a:da:c1:b1:10:78:88:65:f4:
3e:59:77:05:1b:8c:d1:37:08:d4:fe:c7:04:4e:f5:
ec:af:30:33:58:86:ad:0d:fb:83:ff:71:d0:14:25:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BA:CF:C4:AA:24:A2:A4:AD:18:B3:7E:90:77:0C:10:32:66:CF:23
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/A7rPxKokoqStGLN-kHcMEDJmzyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.32.0/24
109.121.41.0/24
109.121.43.0/24
109.121.46.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
74:45:95:71:df:c6:52:e1:1d:6c:fa:09:76:b1:4b:be:b3:3b:
01:96:2d:08:64:81:25:34:cc:dc:43:7e:f6:66:4f:ed:99:99:
04:04:be:7c:a3:99:c3:57:0a:a8:a1:dd:40:2f:36:9d:7d:b8:
be:33:4a:b1:38:74:4d:a0:28:24:9d:0c:95:76:3d:c6:fa:63:
cc:cd:1c:0d:c7:17:89:e5:ba:dc:ed:3f:6f:5a:32:c0:3b:70:
d3:93:16:4a:9b:65:7f:a3:76:67:62:9f:f3:95:ef:af:1c:8f:
dc:fc:39:23:ef:79:57:75:2d:58:1d:ad:dc:26:da:46:b7:13:
1d:c8:12:11:39:64:8c:52:af:5c:6e:20:7e:55:bb:17:8f:bc:
67:90:24:64:2b:9f:d0:f9:f0:c7:22:f2:81:2c:0d:69:e3:06:
91:27:d4:2c:07:d9:2d:62:6f:d6:1b:eb:7f:13:7e:8e:92:3f:
b0:d1:25:0f:e3:ba:80:b4:4f:23:2d:34:85:f3:ff:0d:7e:ac:
85:02:10:6b:a0:24:02:b9:1a:8b:36:6a:f7:42:ba:78:22:2a:
b4:ca:c5:e2:a4:40:0a:94:07:93:86:cb:31:d4:d3:7c:08:c3:
84:88:a4:7d:08:b2:74:ee:0c:6a:4a:47:98:9c:22:e3:f8:c6:
2c:0a:8f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 14:03:34 2023 by rpki-client on console-ams.rpki-client.org