Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Rbq2hiMfwAUcvG_mYiWAzCevHBs.roa
File: Rbq2hiMfwAUcvG_mYiWAzCevHBs.roa (raw, json)
Hash identifier: bEvGgrAnB04Cz0XYx0H86kukCrB1S9sKm3sjs70pzQ8=
Subject key identifier: 45:BA:B6:86:23:1F:C0:05:1C:BC:6F:E6:62:25:80:CC:27:AF:1C:1B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018BA4840095EF2CF4473C326DD71C5DBDFC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Rbq2hiMfwAUcvG_mYiWAzCevHBs.roa
Signing time: Mon 06 Nov 2023 12:03:16 +0000
ROA not before: Mon 06 Nov 2023 12:03:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.35.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
212.69.10.0/24 maxlen: 24
188.255.141.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:84:00:95:ef:2c:f4:47:3c:32:6d:d7:1c:5d:bd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 6 12:03:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45bab686231fc0051cbc6fe6622580cc27af1c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:ae:2d:56:2b:5b:cb:1e:87:1c:19:15:06:
e8:62:62:82:29:97:d1:76:cc:11:35:9f:3f:74:e6:
07:0a:42:a1:cf:24:9b:92:4b:60:4b:eb:91:06:b0:
7b:5e:e9:a5:00:73:4c:ff:85:32:b8:57:9e:69:15:
38:ed:f4:5a:1d:5f:50:5b:a7:1e:49:6c:ac:a2:8c:
60:58:3b:92:69:5d:3d:5e:5b:d5:0b:a2:40:63:38:
15:6c:3f:87:57:70:4d:33:93:bd:2d:d5:65:e0:4e:
3e:d6:8a:dd:ad:98:77:54:88:53:83:a5:d5:2b:98:
6a:ed:4a:1d:d3:35:85:76:5f:1c:b6:b6:b5:98:65:
48:c5:4b:01:f4:40:c7:5b:03:8d:e4:19:0c:11:31:
0f:b6:2c:e6:2c:44:ac:0e:b9:ef:ef:3f:f5:71:04:
c4:6a:4a:4f:35:59:df:81:ea:b3:dc:69:e7:d7:72:
bb:d5:23:34:e8:8a:d3:83:58:a2:04:c6:fc:30:de:
4a:d2:be:8a:6f:46:7a:11:48:9a:aa:57:4b:08:d2:
fc:8a:39:26:3e:10:a0:d9:00:6e:08:98:cd:93:f2:
ac:6f:4f:dc:97:54:af:4d:ab:d5:48:03:e9:a3:2b:
ca:fe:4d:d4:23:e3:a2:77:8e:50:e2:b7:c5:ee:e8:
10:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:B6:86:23:1F:C0:05:1C:BC:6F:E6:62:25:80:CC:27:AF:1C:1B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Rbq2hiMfwAUcvG_mYiWAzCevHBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.35.0/24
109.121.43.0/24
185.47.91.0/24
188.255.141.0/24
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8d:1b:02:74:0b:d1:10:d7:82:60:c9:42:7b:ce:eb:ed:bf:
12:97:6f:e2:c9:90:3d:e6:4c:22:8f:16:f9:fe:60:2d:46:77:
50:1c:1a:fc:d4:e1:5e:c1:81:3f:36:f3:b7:dd:7d:d2:b7:54:
67:ea:2c:57:9d:cd:30:06:65:56:5b:f7:85:37:88:5a:9c:d3:
f5:cf:bf:05:c7:da:74:75:a6:ff:fe:a6:33:bf:fc:c1:42:b8:
b0:d6:e3:a2:b3:08:8b:c8:20:e7:21:11:21:cf:9f:5c:d6:44:
6c:10:1b:a7:17:38:cb:ac:2a:76:15:9f:13:bb:c6:98:9c:c3:
14:56:91:01:58:03:18:ed:cf:73:1d:fe:09:11:e5:7e:01:f0:
23:9d:b8:d7:0e:13:8c:2e:6f:79:9e:0f:45:88:b3:fd:c4:9f:
c6:ed:c2:be:b9:a3:03:e5:5f:a4:47:a1:f4:43:58:12:14:20:
86:24:1b:0b:bb:20:67:c6:dd:4b:fe:02:a0:ef:80:12:a9:23:
1d:15:0c:4a:e0:a9:40:2b:d1:97:c7:03:14:65:81:e2:7a:f4:
0e:53:2f:90:0e:9d:11:d3:2b:7b:d3:dc:68:99:41:7b:2a:b6:
08:75:f1:24:79:12:b0:9e:b2:6c:a1:3f:21:e1:1b:0b:27:87:
b3:7f:8a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 13:57:46 2023 by rpki-client on console-fra.rpki-client.org