Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GWryFhwfWPpMeFXX5djQywaGqdE.roa
File: GWryFhwfWPpMeFXX5djQywaGqdE.roa (raw, json)
Hash identifier: 4UltdRKKBBHxVbLvLb/0v8icdbVkwttGrFfbUzVOYKE=
Subject key identifier: 19:6A:F2:16:1C:1F:58:FA:4C:78:55:D7:E5:D8:D0:CB:06:86:A9:D1
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188C3495B16C9C444068B98CCB58626A43D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GWryFhwfWPpMeFXX5djQywaGqdE.roa
Signing time: Fri 16 Jun 2023 08:19:04 +0000
ROA not before: Fri 16 Jun 2023 08:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.35.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
212.69.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:49:5b:16:c9:c4:44:06:8b:98:cc:b5:86:26:a4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 16 08:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=196af2161c1f58fa4c7855d7e5d8d0cb0686a9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:21:99:89:72:d1:e5:85:b3:ee:c7:80:9f:fd:
80:10:a8:1c:88:c3:87:a3:d4:d2:ed:c5:10:53:0d:
64:7a:1a:41:12:f1:3b:bb:fb:01:ff:04:1c:ff:82:
3f:1b:be:f3:77:0a:ac:60:fe:6d:1e:cf:8d:25:64:
fc:54:eb:38:c6:77:38:c4:2e:18:88:24:30:bb:b0:
05:c9:8a:59:34:6d:be:0f:14:19:90:92:54:fc:8f:
6a:95:9c:a6:0a:d4:12:7e:7c:4e:47:40:c8:2b:25:
e7:8e:a8:10:ec:95:20:8c:30:01:3c:72:7a:03:8e:
2a:e8:11:5a:39:b3:b2:d7:02:be:63:48:51:96:52:
e8:fa:ba:b1:db:4a:2e:6c:ff:5d:f3:7b:92:0b:f9:
c2:a9:9c:3a:bf:18:34:de:e7:e5:d5:27:8e:c5:ed:
8e:90:67:29:f7:8e:27:5d:77:dc:8a:9b:b7:87:58:
f2:fb:ed:30:69:40:36:8f:78:e5:50:d8:be:75:3a:
cb:c0:46:76:b1:05:e4:e2:2f:11:0c:c7:19:1e:ec:
2d:30:8e:76:5e:18:f9:8c:c8:a3:bb:84:55:f5:14:
cb:3d:c4:9a:d9:e0:72:9a:a0:0a:20:d6:29:1f:98:
41:bf:97:5d:a6:7a:98:d4:41:80:d9:43:5a:42:ee:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6A:F2:16:1C:1F:58:FA:4C:78:55:D7:E5:D8:D0:CB:06:86:A9:D1
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GWryFhwfWPpMeFXX5djQywaGqdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.35.0/24
109.121.41.0/24
109.121.43.0/24
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b6:83:1b:8e:36:40:e9:f1:e6:6c:6b:b2:22:01:a3:b5:f0:
1d:b8:c0:93:74:d3:b9:91:0b:8f:94:69:20:f7:b8:c8:89:6d:
f3:d8:82:a8:f8:04:35:92:b0:f6:06:0e:fc:35:03:05:53:9e:
3b:c7:91:f2:2b:2c:9b:59:6c:92:5c:17:99:4b:4c:f2:03:de:
3c:a4:b1:f8:df:8b:1a:95:22:00:97:ee:a6:cf:02:f6:be:46:
d9:fe:34:16:b9:05:56:69:f3:e5:ea:bb:ce:33:f2:19:71:06:
b6:7f:28:aa:95:45:ab:f8:e5:54:d4:7f:06:69:42:71:83:07:
d3:ed:51:d2:63:44:3e:95:fd:01:5d:20:38:aa:1e:f8:f0:9c:
c1:eb:ce:70:ae:da:8e:69:a4:e5:35:19:2f:cf:ee:6a:15:1a:
dc:24:e5:e2:8a:6b:4b:16:3c:a1:e0:f9:c0:60:76:77:71:ac:
89:66:2b:f1:7b:da:39:e4:11:99:52:bd:81:80:3f:37:c1:bd:
b9:56:a0:0c:4a:71:4a:bb:28:10:08:f9:f8:f2:ab:04:63:28:
25:a4:8b:63:73:f6:3e:75:c5:03:5c:48:a6:65:ff:ab:41:79:
6b:d3:8b:20:7a:42:78:93:08:5b:cb:42:2e:3c:ee:c3:56:7b:
dd:0c:8d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org