Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CuqDJvO2hsljPeMlE-L7z8AV2Pc.roa
File: CuqDJvO2hsljPeMlE-L7z8AV2Pc.roa (raw, json)
Hash identifier: c2lkg1dULq41XgDCJi5DsBIijYNIP828ElZKDoR/Fek=
Subject key identifier: 0A:EA:83:26:F3:B6:86:C9:63:3D:E3:25:13:E2:FB:CF:C0:15:D8:F7
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018E4CB8D4B3C8EF98E87FF4DA65EE7EDDD0
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CuqDJvO2hsljPeMlE-L7z8AV2Pc.roa
Signing time: Sun 17 Mar 2024 14:02:45 +0000
ROA not before: Sun 17 Mar 2024 14:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 79.175.95.0/24 maxlen: 24
79.175.96.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
109.121.33.0/24 maxlen: 24
109.121.36.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
109.121.39.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
178.253.237.0/24 maxlen: 24
188.255.212.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 22:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4c:b8:d4:b3:c8:ef:98:e8:7f:f4:da:65:ee:7e:dd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 17 14:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0aea8326f3b686c9633de32513e2fbcfc015d8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:1b:c1:6f:f8:bb:4d:23:36:83:ae:f5:1e:
b6:5b:42:92:4d:7c:fd:2c:db:0e:00:e3:58:33:7e:
80:34:2a:97:ac:ce:61:23:44:c2:41:23:e1:77:b8:
d3:22:e5:b2:d9:27:dc:7c:62:fa:dc:03:3f:c3:26:
61:5f:89:41:2b:94:e3:bd:94:3a:c5:ce:aa:a7:55:
e1:50:e5:d4:b1:3f:77:03:9c:e3:f9:d6:a7:19:a5:
e5:55:ed:39:14:b4:f3:3f:bd:2a:bd:29:6b:af:d5:
f1:f2:f4:c6:08:83:c9:57:8a:a8:55:14:1f:6a:16:
9d:44:7f:90:82:01:57:cc:34:0a:76:1b:81:32:57:
18:70:16:53:57:ff:2a:44:37:68:7c:5b:26:fe:e4:
62:af:09:56:c0:f0:14:62:bb:cd:24:77:0e:6c:c2:
e1:a3:42:6f:be:a5:4b:5b:e2:3a:40:70:23:11:b6:
ff:34:60:7c:8e:6a:44:39:65:93:ac:dc:41:16:87:
48:48:c1:29:f3:27:e5:75:b7:29:c5:a7:ca:c8:39:
52:68:2d:2a:7f:ee:b7:a9:90:0d:07:5d:bf:24:1e:
d1:84:7e:dc:fb:63:53:d7:a5:42:6f:97:5a:0c:01:
4c:c3:e0:13:db:e9:5f:f0:96:1a:3a:c6:21:e9:bf:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EA:83:26:F3:B6:86:C9:63:3D:E3:25:13:E2:FB:CF:C0:15:D8:F7
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CuqDJvO2hsljPeMlE-L7z8AV2Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.95.0-79.175.96.255
109.121.0.0/19
109.121.33.0/24
109.121.36.0-109.121.40.255
109.121.42.0/23
109.121.45.0/24
109.121.47.0/24
109.233.184.0/23
178.253.237.0/24
188.255.212.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b9:13:43:63:52:f0:61:d8:04:1f:ec:a4:dc:9b:9a:bb:66:
d5:f3:e6:e1:56:06:87:0a:28:d5:a3:57:7b:c8:26:98:cd:d7:
72:f7:c2:9e:00:f6:80:48:c1:db:dd:0e:ae:1d:7c:1c:87:38:
9f:ae:20:ee:e8:bf:bc:18:02:b7:0a:d9:2d:35:4a:98:ab:3b:
2e:d6:08:b8:79:36:a8:2c:82:80:4f:7f:7c:f1:7a:9e:1a:9e:
ce:6e:e7:4d:4c:3d:f4:97:e8:d6:19:b3:4d:4d:5f:37:12:63:
05:1f:18:31:13:fb:73:74:6b:30:d2:4c:a1:e4:4f:22:2b:65:
72:10:41:d6:b3:c2:f8:25:48:21:28:34:90:aa:a3:eb:ac:9c:
69:c8:3f:27:47:8d:6a:e1:0e:39:a9:e7:57:57:c8:50:de:bb:
e5:e4:be:67:56:ab:a5:d0:04:f6:3a:45:b5:da:f9:54:9f:4c:
58:53:d9:9d:43:ae:0c:a2:a7:1b:d6:1a:00:db:24:4d:20:37:
24:98:a9:30:ce:be:a8:56:8c:2e:48:a7:66:cf:16:74:0c:70:
4b:3e:de:32:42:86:8e:aa:6a:56:60:f2:42:21:ed:50:66:17:
4d:f3:13:39:b9:72:f5:e9:67:a0:42:e8:a9:b2:31:90:55:b3:
93:a0:a3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 01:31:52 2024 by rpki-client on console-fra.rpki-client.org