Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AP0jBAAjis2hPj8VsDSq7ov8LGg.roa
File: AP0jBAAjis2hPj8VsDSq7ov8LGg.roa (raw, json)
Hash identifier: FC/5PteGNT0Fea8qtprFVbft7sOGRqMYmXO44/bOuko=
Subject key identifier: 00:FD:23:04:00:23:8A:CD:A1:3E:3F:15:B0:34:AA:EE:8B:FC:2C:68
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01910304B0ED74CDBDF290B399FA65D98A66
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AP0jBAAjis2hPj8VsDSq7ov8LGg.roa
Signing time: Tue 30 Jul 2024 09:42:04 +0000
ROA not before: Tue 30 Jul 2024 09:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 13:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:04:b0:ed:74:cd:bd:f2:90:b3:99:fa:65:d9:8a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 30 09:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00fd230400238acda13e3f15b034aaee8bfc2c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:de:0d:07:b7:b7:a8:ce:de:a6:ac:35:a0:
73:61:a9:6e:2b:ef:81:25:93:d9:58:6e:27:d8:a2:
c5:1f:66:c8:2a:b8:3c:eb:a0:5e:b3:69:60:67:92:
0b:f4:39:58:be:f8:60:85:a8:06:05:ea:ea:a5:2e:
e8:5f:15:28:8c:a4:e3:80:5f:e3:11:6c:d0:92:93:
26:72:b5:06:dd:fb:1b:f2:96:b4:3c:a1:d1:36:64:
d8:80:be:79:de:0f:77:97:69:8d:b2:8b:73:6f:d3:
4d:44:5d:dc:3c:d3:82:b2:aa:01:b3:ad:82:82:bb:
4e:fa:52:c3:f5:e1:cc:5f:57:7a:f6:06:58:2b:f0:
b5:72:29:dd:9b:e7:aa:73:3c:ec:f4:ca:7b:a5:85:
90:c5:c3:25:56:3c:21:f5:55:e1:ef:1c:e2:e1:5a:
9e:fa:85:00:b6:e2:64:ed:34:30:c1:69:70:86:72:
a9:38:18:fb:80:7c:80:ef:bf:b9:1d:a4:08:33:8f:
34:7b:4e:c4:bc:ec:df:87:c1:8b:51:9d:34:96:6b:
b9:d9:04:6d:9d:17:32:f5:e5:54:d4:c1:76:e1:e9:
c9:3f:d6:ff:48:2e:cd:ad:de:d6:56:fc:f5:59:7d:
8d:8f:c3:c2:ec:b0:4e:10:2c:e6:6a:fc:72:6b:5f:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FD:23:04:00:23:8A:CD:A1:3E:3F:15:B0:34:AA:EE:8B:FC:2C:68
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AP0jBAAjis2hPj8VsDSq7ov8LGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.43.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b1:96:d5:2c:c0:bc:75:09:7c:cb:83:d9:b2:27:1b:0f:6c:
02:be:4f:ff:4f:52:b4:2c:ff:f7:f9:60:d2:83:b3:48:57:d2:
5e:bd:0d:dd:28:65:c8:d8:49:de:82:94:12:c5:85:34:92:92:
65:c6:3f:60:31:07:aa:d0:ac:41:7d:5b:52:85:61:01:c1:d6:
b9:1b:e1:6c:26:17:c0:64:68:cc:96:62:67:25:c2:0d:0b:b4:
f7:f3:11:af:d5:d0:e3:33:ff:f0:fe:25:a4:a4:02:d6:f8:8f:
02:dc:3a:71:df:20:69:bf:9b:d6:31:f0:1e:7c:dd:ed:93:74:
27:a0:e8:31:c8:d8:16:47:40:32:9e:e2:e6:77:28:91:79:51:
4c:bc:c0:11:3f:48:6c:08:e8:5e:a5:2a:53:81:3d:a9:42:19:
80:43:5e:ac:b9:9e:ee:29:45:f6:e2:e1:26:d9:35:1c:70:0f:
df:44:f9:c9:1b:09:92:f3:dc:d9:74:01:af:6b:14:c6:59:2b:
5b:2f:99:38:4d:22:fd:8d:2c:9d:ba:58:de:16:89:15:2a:b7:
31:70:3b:71:16:52:c7:56:f0:ab:85:6d:ce:52:e2:26:0f:18:
15:29:a8:d7:42:0f:f0:11:7d:8f:e5:e5:06:f7:ec:c3:f3:4d:
1f:91:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 17:11:15 2024 by rpki-client on console-fra.rpki-client.org