Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CrPB00V7CYzI2MEtZBQqQvoIIjw.roa
File: CrPB00V7CYzI2MEtZBQqQvoIIjw.roa (raw, json)
Hash identifier: GXv20am83IQ1Wsfaen1zEUkuwkvyYxkw2vBevRoIApE=
Subject key identifier: 0A:B3:C1:D3:45:7B:09:8C:C8:D8:C1:2D:64:14:2A:42:FA:08:22:3C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188957F0FEFC6F5ADD6992116AB66B22712
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CrPB00V7CYzI2MEtZBQqQvoIIjw.roa
Signing time: Wed 07 Jun 2023 10:55:12 +0000
ROA not before: Wed 07 Jun 2023 10:55:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 109.121.43.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
188.255.144.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
178.253.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:7f:0f:ef:c6:f5:ad:d6:99:21:16:ab:66:b2:27:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 7 10:55:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ab3c1d3457b098cc8d8c12d64142a42fa08223c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:f7:1b:24:09:4d:c2:7d:51:37:f8:58:98:
84:80:2b:5e:b6:3e:96:9d:e8:e4:1e:7c:61:c0:23:
84:5d:e2:3b:5b:d1:b5:a6:73:5d:47:fd:4e:83:da:
3e:18:57:1e:18:e7:fb:4e:0e:35:69:e2:49:04:1e:
37:c0:70:8f:70:53:33:3c:1d:ec:3c:ee:4d:bc:e2:
64:d6:9f:92:0e:5c:32:9c:33:b4:b1:ce:fc:a6:ea:
61:45:0e:5b:22:dd:cb:93:9d:86:5c:e7:75:9e:4c:
ee:35:21:31:1b:43:97:d4:2a:e5:3a:9e:bf:8d:dc:
3f:27:68:a6:25:bf:de:b2:2d:ac:54:85:c9:37:a8:
ec:15:35:f9:8c:57:9c:ee:21:bc:bf:21:a5:5a:36:
a2:75:97:5c:45:a1:f6:9f:2a:0f:12:36:69:af:6c:
85:cd:e9:48:79:d3:1c:6e:1a:79:38:0f:40:b7:68:
e8:66:f3:94:e9:a3:87:07:ef:e0:af:8d:00:4e:c5:
10:0f:53:62:4c:da:4d:fd:1c:2f:5e:9e:f8:5b:86:
5d:50:79:a3:ee:81:ca:9c:cf:bb:fb:85:86:16:10:
00:c4:42:7e:98:d3:9b:47:6e:2c:18:9b:e1:30:39:
80:50:93:c7:27:91:3b:e7:42:95:2a:8e:f2:f4:90:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B3:C1:D3:45:7B:09:8C:C8:D8:C1:2D:64:14:2A:42:FA:08:22:3C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CrPB00V7CYzI2MEtZBQqQvoIIjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.40.0/24
109.121.43.0/24
109.233.184.0/23
178.253.237.0/24
188.255.144.0/24
Signature Algorithm: sha256WithRSAEncryption
47:50:40:81:8e:5d:96:33:b7:18:28:da:84:d3:4a:6c:a4:7b:
6f:e4:04:41:5f:c2:12:18:94:61:7d:14:39:b6:ca:2a:f0:66:
20:0d:61:b6:25:01:77:ac:4f:86:35:26:6c:64:d7:27:f6:cd:
ff:12:f2:f2:28:af:6f:6a:a1:39:58:70:c1:25:c7:b1:9e:da:
d1:7e:1e:30:5d:f6:fd:51:c0:a3:6d:ad:08:1f:a0:50:21:a2:
43:f7:0a:fa:ec:10:be:37:0e:45:0e:8e:c0:24:bf:f4:0b:97:
ae:42:9c:a6:54:8e:af:bf:fb:05:fa:11:2e:e5:f0:e3:4b:da:
29:95:54:7b:1d:05:f1:df:75:01:cb:75:29:1b:ed:9a:4b:3a:
f2:19:5a:c7:62:f6:e2:32:41:ba:60:89:45:c6:ec:a0:5b:8f:
1b:d4:2f:3a:bf:f1:7c:0a:69:53:28:37:40:66:6e:74:31:bf:
e4:de:b2:e0:db:a1:8d:a0:15:f9:cf:58:e9:8a:2a:41:11:d6:
73:15:55:6e:d9:bd:b9:4e:42:c6:ab:90:0b:7c:65:cf:e7:bb:
75:1b:78:50:3a:3e:d6:03:35:ba:6f:9b:51:39:56:e1:9d:32:
44:f7:f0:b5:eb:5b:27:e3:c9:aa:65:08:be:cb:64:20:58:7c:
6b:78:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org