Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/S6bhK9HajC5JjVW--vlp4O9tWBA.roa
File: S6bhK9HajC5JjVW--vlp4O9tWBA.roa (raw, json)
Hash identifier: TtmG42Uc2q8sndBq4pGcJZEz3oyIIc5mgobEbKZtg3A=
Subject key identifier: 4B:A6:E1:2B:D1:DA:8C:2E:49:8D:55:BE:FA:F9:69:E0:EF:6D:58:10
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018AB6E073A4D7425D60584EBC19D8B6D7B8
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/S6bhK9HajC5JjVW--vlp4O9tWBA.roa
Signing time: Thu 21 Sep 2023 08:34:37 +0000
ROA not before: Thu 21 Sep 2023 08:34:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.35.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
212.69.10.0/24 maxlen: 24
79.175.66.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:e0:73:a4:d7:42:5d:60:58:4e:bc:19:d8:b6:d7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 21 08:34:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ba6e12bd1da8c2e498d55befaf969e0ef6d5810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:99:9a:86:c9:b0:88:95:c5:e6:35:f0:90:
71:21:85:cd:41:eb:ac:b9:2c:0c:a1:15:8e:c0:e7:
9b:44:57:cd:38:55:54:78:00:55:9a:38:68:fb:c4:
8f:37:1d:08:f7:cf:79:3b:bc:a4:32:e8:08:9d:2e:
0a:ac:fe:3b:1a:ce:da:f7:c2:c6:2e:93:82:aa:c2:
f6:5f:21:4c:4f:5f:fb:8a:13:e2:54:20:ce:db:18:
39:f9:6f:ac:db:99:59:3b:fe:92:9b:dc:df:ce:c7:
44:a0:11:95:65:8f:6b:b5:9b:2d:86:77:d7:4e:23:
00:a4:84:93:6c:85:22:fb:7c:de:5a:63:4b:dc:6b:
99:07:bf:51:03:42:a8:c6:07:5e:76:55:5e:6e:50:
7e:1e:da:5f:34:94:ac:94:2c:9d:73:b3:52:81:44:
d1:3d:40:39:60:6e:4e:99:54:1a:d0:a0:b6:0e:b9:
fa:e2:1c:c5:46:7a:21:43:87:ec:6d:80:b1:65:7a:
5f:00:5a:4e:6f:fa:94:9e:ee:d5:80:0b:f9:b4:de:
20:1e:ba:1f:69:e2:4c:f0:ea:f2:19:7d:b6:5b:6e:
32:7b:05:e5:7c:ab:8d:e6:57:d9:dc:ab:a2:ce:d8:
1e:f5:56:ce:5d:66:bf:08:cd:9f:75:e5:10:72:82:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A6:E1:2B:D1:DA:8C:2E:49:8D:55:BE:FA:F9:69:E0:EF:6D:58:10
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/S6bhK9HajC5JjVW--vlp4O9tWBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
79.175.66.0/24
109.121.35.0/24
109.121.43.0/24
185.47.91.0/24
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
97:81:b5:da:05:a5:e9:f2:1f:aa:b1:44:e1:70:c2:38:7c:6d:
5a:c0:4d:c7:b1:dc:c7:c4:c8:04:31:7a:91:fe:01:75:12:bb:
03:73:f1:d8:32:53:c9:57:1a:24:59:ea:3b:a9:13:96:bf:18:
34:b3:01:dc:e4:18:c2:d2:79:82:7c:3c:9c:94:3b:4f:32:b4:
bb:87:c6:2c:a1:c4:d1:fe:29:30:ba:52:ff:77:0a:20:2b:8d:
92:a4:cf:f3:14:ef:3e:54:62:9f:95:e8:8a:08:a9:db:5d:16:
0c:48:9a:e8:09:3e:81:29:cd:b8:0e:df:b1:f2:b7:c6:23:57:
0b:11:55:62:89:33:57:ab:50:d2:ce:e3:a6:b6:e2:c0:6b:ca:
e5:b8:0e:84:fc:ae:88:13:14:a6:28:21:4d:49:ff:52:8b:79:
7a:9f:58:8a:49:1e:35:fc:a6:0c:87:03:7f:40:be:43:39:c0:
0f:89:19:5c:43:24:cc:ad:36:cb:8a:8c:82:07:65:c3:4b:85:
fd:e4:da:e0:aa:83:81:f6:31:cd:82:47:15:b5:81:b6:ee:3b:
38:53:a8:bc:51:48:78:3d:3c:34:4a:56:bd:55:0a:9a:fd:4e:
7a:16:d3:03:fe:8f:d1:b8:10:99:0c:7d:9e:14:2e:cb:d4:b1:
e7:ce:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 09:05:47 2023 by rpki-client on console-ams.rpki-client.org