Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/L614iBsc9CSaNSF6wlszna4xe88.roa
File: L614iBsc9CSaNSF6wlszna4xe88.roa (raw, json)
Hash identifier: j1zc5VEnUpUp1ot1DZWVG2QmD1MYTir3PMnIlakkjeg=
Subject key identifier: 2F:AD:78:88:1B:1C:F4:24:9A:35:21:7A:C2:5B:33:9D:AE:31:7B:CF
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018E06289C29C472DCCEDBDB607EE13BF009
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/L614iBsc9CSaNSF6wlszna4xe88.roa
Signing time: Sun 03 Mar 2024 21:11:48 +0000
ROA not before: Sun 03 Mar 2024 21:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.105.6.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
93.186.69.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.144.0/24 maxlen: 24
188.255.200.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 14:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:06:28:9c:29:c4:72:dc:ce:db:db:60:7e:e1:3b:f0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 3 21:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fad78881b1cf4249a35217ac25b339dae317bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:08:24:17:c4:2c:fe:32:b0:3c:61:67:54:
7a:ba:6b:3f:db:1e:83:f7:17:80:ad:ba:d1:65:9f:
1c:c5:fd:b6:e7:26:b7:e2:ff:c6:43:d5:4d:a6:02:
57:64:23:5a:42:fa:da:f5:dc:76:72:45:8f:72:6d:
62:bb:e7:cc:7b:26:75:7d:c6:b6:09:6d:94:cf:95:
d7:88:ca:f7:70:20:b0:9a:5b:23:4e:ab:02:4d:11:
d5:5c:a1:5e:ef:62:0b:e9:6a:9b:4d:c6:80:3f:10:
d8:8f:b0:6a:0c:b4:87:e2:e6:3c:4d:83:3d:f5:1e:
00:25:e9:94:57:2c:ec:b4:f4:74:04:dc:d8:42:c8:
46:cc:52:13:42:57:5e:fa:d8:82:ce:34:ed:86:67:
9a:30:75:be:1e:89:89:97:75:43:d7:c9:36:44:1d:
8e:02:53:44:22:34:11:74:fc:f7:ca:2f:52:ef:e4:
49:b6:50:6a:9e:78:f2:92:3d:12:11:e0:41:27:07:
54:b4:1e:30:66:02:35:1f:6b:12:e3:be:d5:a4:93:
bb:53:41:b3:c0:2f:6b:cf:10:6e:99:24:03:97:fa:
1f:34:44:ab:cd:eb:50:43:d4:99:ec:59:ca:48:19:
3c:4c:ae:cd:bd:ac:62:38:34:36:18:9b:3f:87:4a:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:78:88:1B:1C:F4:24:9A:35:21:7A:C2:5B:33:9D:AE:31:7B:CF
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/L614iBsc9CSaNSF6wlszna4xe88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
79.175.67.0/24
93.186.69.0/24
109.121.43.0/24
185.47.91.0/24
188.255.128.0/24
188.255.144.0/24
188.255.200.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ac:07:19:3b:6a:cb:8e:39:7a:05:14:a1:09:dc:b6:2b:00:
55:f0:6a:19:90:5c:7e:f3:1d:cf:51:42:fe:7a:74:59:5d:7e:
f3:49:9a:c4:68:60:52:0b:7d:fb:4b:e4:75:9b:ce:17:6f:22:
99:5a:64:4b:6f:57:90:09:fd:17:b6:6b:0a:83:50:19:4f:6f:
5f:9e:98:8a:06:85:5e:9f:04:9f:75:86:00:c2:19:d0:f5:ac:
ca:d6:37:1b:aa:de:15:92:e3:16:19:19:f8:fc:b3:c0:fe:69:
23:b6:69:93:d7:b1:7d:07:8a:32:bc:81:43:67:a8:19:f2:4f:
52:54:1e:06:41:35:3b:ff:3b:c7:ff:5f:dd:a6:23:f7:d1:d4:
65:03:da:b1:7c:41:d0:5f:a9:f4:be:13:22:75:0d:29:0e:8d:
6d:6a:09:2f:f0:49:06:77:14:30:23:66:30:2e:66:24:8c:dc:
7a:3f:25:d5:1b:01:f4:69:de:f6:a4:e9:c6:f5:9f:ef:67:45:
ab:b1:5d:49:5e:fb:62:e7:db:c9:01:f7:b9:39:f6:06:94:6f:
f4:fb:40:79:01:70:c3:fc:3c:43:05:7f:d6:62:73:17:86:ab:
07:a9:92:d1:55:7c:40:8f:c9:d7:58:46:24:b4:9b:ac:7b:f6:
3b:37:c7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org