Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/P98P9BnKixVxUAUI3NzE9vTEjdg.roa
File: P98P9BnKixVxUAUI3NzE9vTEjdg.roa (raw, json)
Hash identifier: VXAHdlliyADIp4WkwehQR1yrZeAWliJBNPDBgaup07c=
Subject key identifier: 3F:DF:0F:F4:19:CA:8B:15:71:50:05:08:DC:DC:C4:F6:F4:C4:8D:D8
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018A8D6EAA173EF6216CE0307D34BBCCD6D9
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/P98P9BnKixVxUAUI3NzE9vTEjdg.roa
Signing time: Wed 13 Sep 2023 07:25:54 +0000
ROA not before: Wed 13 Sep 2023 07:25:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.35.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
79.175.66.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 08:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:6e:aa:17:3e:f6:21:6c:e0:30:7d:34:bb:cc:d6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 13 07:25:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fdf0ff419ca8b1571500508dcdcc4f6f4c48dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:bd:b2:6d:9d:9b:14:9e:d8:36:c3:b5:44:
f3:fb:60:c0:27:68:2c:45:dc:a5:3c:ae:82:79:18:
30:ca:1d:59:43:3f:a1:5f:77:23:4c:65:14:bf:08:
ab:b8:f6:21:50:a1:a2:5a:21:0f:c5:02:9c:45:d2:
e3:c0:65:b1:c1:cc:a5:06:59:47:20:ff:c9:e9:92:
47:59:6a:ec:ca:93:b0:b6:29:5d:10:9b:b5:59:63:
f9:25:77:a9:87:1c:ce:f9:f6:74:95:4c:96:1f:08:
d6:dd:99:bf:42:d2:93:9a:e7:74:e5:c7:56:71:43:
2b:2d:66:79:1c:23:26:d2:cd:c7:c6:57:84:2d:bc:
67:51:44:f4:d2:41:fb:a4:fd:be:4a:f7:85:57:4f:
7b:86:ec:fa:0b:7c:e7:a6:63:05:5c:01:ef:f7:50:
1d:c7:e3:1e:55:83:70:a6:de:de:a6:db:e9:cb:aa:
d1:18:24:59:c6:77:ca:34:c4:6f:62:1f:ca:26:34:
f0:d8:17:72:97:b3:09:42:c9:f6:e9:8c:d3:19:b6:
ef:d2:54:bb:17:b4:42:b7:47:10:72:87:f4:44:60:
1d:cc:88:98:5f:81:71:3d:c3:95:e5:27:dd:ff:55:
ed:61:1d:d3:6a:45:4a:28:31:9f:a8:37:00:a4:36:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:0F:F4:19:CA:8B:15:71:50:05:08:DC:DC:C4:F6:F4:C4:8D:D8
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/P98P9BnKixVxUAUI3NzE9vTEjdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
79.175.66.0/24
109.121.35.0/24
109.121.43.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a4:aa:93:8f:b0:9e:cd:c3:c1:bd:4c:10:a7:eb:02:e4:8c:
a1:df:ac:e2:e3:0e:f5:f4:c3:8c:da:ee:3f:ff:4b:56:2e:63:
28:db:4a:dc:b8:70:b8:f4:9d:08:ba:1f:8c:17:d6:13:4d:5e:
ab:6d:7b:55:2d:e4:e2:0e:60:f3:cc:2d:a9:a1:30:01:e5:e9:
b1:6e:14:f6:5e:0a:80:73:05:cd:3b:45:3b:54:3f:bc:7f:04:
76:87:e2:09:9d:90:0a:3e:0f:fc:18:bc:35:a1:a9:ed:2c:86:
77:d6:a2:07:4d:c2:9f:84:2c:c6:00:62:20:ea:27:de:7d:fe:
3e:c4:49:99:6a:e8:25:69:53:3b:59:d7:ec:4c:db:7e:2c:05:
a6:63:ae:43:c6:9d:13:28:a2:d6:7d:8e:ec:81:62:67:9d:3e:
27:a0:14:7c:bf:5e:0c:cc:74:3d:be:d2:21:a2:e8:fd:57:02:
ae:e8:45:eb:9b:e7:11:20:df:a2:8b:52:b4:41:b8:4a:24:7c:
69:5e:92:45:bc:cb:67:6d:99:6c:01:c9:96:2d:74:2b:35:e2:
39:81:49:33:b4:81:c0:2c:49:a1:9e:ae:40:6d:74:a5:e8:27:
91:46:ae:c9:cc:5c:e5:b0:d2:21:86:7a:b9:4b:22:11:0b:de:
33:6e:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org