Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GeoJFQILJc1SB2M5enNYJDEVuXA.roa
File: GeoJFQILJc1SB2M5enNYJDEVuXA.roa (raw, json)
Hash identifier: KL2IVOubFPQ+dxknUwPuM7xYUZa9YJyqwJ7XDXnH7uA=
Subject key identifier: 19:EA:09:15:02:0B:25:CD:52:07:63:39:7A:73:58:24:31:15:B9:70
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018A5EEF4C899D6BE57BE6246AFF76283CA3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GeoJFQILJc1SB2M5enNYJDEVuXA.roa
Signing time: Mon 04 Sep 2023 06:44:15 +0000
ROA not before: Mon 04 Sep 2023 06:44:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.35.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
188.255.229.0/24 maxlen: 24
212.69.0.0/24 maxlen: 24
79.175.66.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 11:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:ef:4c:89:9d:6b:e5:7b:e6:24:6a:ff:76:28:3c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 4 06:44:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19ea0915020b25cd520763397a7358243115b970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:64:05:5c:5c:af:51:a7:2b:3a:de:09:d7:
89:7c:5b:49:65:f5:7c:12:ad:2e:fd:53:5b:42:8d:
51:f3:21:20:65:86:a8:db:c2:2e:df:27:6b:43:f8:
74:ad:b7:99:d4:4a:7c:a7:df:e2:f3:4f:fc:ef:ef:
56:66:ef:82:91:0b:7c:1e:5b:df:6b:90:14:3c:da:
26:c5:4f:21:82:2d:97:2d:61:de:a0:20:b4:bc:ea:
31:20:0d:97:55:51:62:ba:4b:6d:d3:2d:c8:e4:11:
5c:9c:93:70:a2:a9:d2:b9:f1:77:d9:28:b2:2b:4d:
d4:a8:07:d4:7d:cd:42:1c:70:2b:23:50:1a:6d:24:
67:15:15:28:0b:b9:1b:6b:6c:f7:48:89:cc:9e:5d:
4c:e1:50:b5:fe:24:4c:05:c8:84:c2:08:03:60:c6:
85:3f:47:1e:35:c9:21:00:da:61:8f:13:f5:0c:2b:
dc:b9:ca:7b:d9:c4:61:59:73:6f:4d:a7:df:31:3c:
10:88:29:54:ab:3d:86:a9:cb:79:22:cc:a1:8a:5c:
f7:52:e0:cf:72:b5:0a:e3:fd:4f:82:f9:99:bc:c8:
1a:4a:c3:d5:85:0f:71:ad:4f:5c:78:7e:53:ff:1c:
07:6c:8d:e6:e9:b7:33:01:9c:b4:65:a6:fa:d3:97:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EA:09:15:02:0B:25:CD:52:07:63:39:7A:73:58:24:31:15:B9:70
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GeoJFQILJc1SB2M5enNYJDEVuXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
79.175.66.0/24
109.121.35.0/24
109.121.43.0/24
185.47.91.0/24
188.255.229.0/24
212.69.0.0/24
Signature Algorithm: sha256WithRSAEncryption
55:51:98:aa:f0:55:eb:75:aa:1f:38:e9:f3:bb:4f:d7:7a:e9:
48:b5:08:85:0b:1d:d4:b6:a5:e3:a3:f1:aa:94:12:9a:f6:90:
7c:2f:a1:ae:99:f4:5b:97:fc:62:43:34:e7:a3:2d:9f:eb:63:
23:b1:bf:02:c8:e8:e2:c8:49:87:21:6f:6a:88:c5:28:ea:37:
6c:e4:f1:e6:01:0f:c9:d7:2b:c6:78:2c:bd:56:bf:7f:fc:5c:
df:80:b6:56:5b:0f:5c:2e:e5:06:b2:63:f5:2e:5a:26:7e:e2:
2d:0d:c8:5f:f7:c7:26:86:82:d5:bb:51:2d:33:94:e7:b3:19:
7f:5e:07:c9:1d:87:d0:dc:86:fa:2b:3b:78:d7:24:89:b4:0c:
c7:15:6f:ef:44:d9:c6:9f:b3:3e:91:c0:29:ea:8d:cb:2a:ea:
07:51:b0:04:a6:e0:bd:2a:56:98:5b:78:88:0d:ad:77:d1:3d:
60:fe:a9:4d:44:5b:a3:7c:52:f6:93:a5:4f:60:e1:f3:fa:c1:
83:90:22:bc:0b:39:c1:8f:71:be:6e:b5:a8:f0:57:df:d1:ab:
dd:26:97:12:48:40:2f:64:c3:94:50:e3:ec:a2:0c:68:5f:11:
87:99:98:48:d6:cf:3e:53:8d:50:33:50:0e:16:26:95:95:3b:
ab:65:67:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org