Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/X_g9S9t9bsFruhs0sC22wBar9EE.roa
File: X_g9S9t9bsFruhs0sC22wBar9EE.roa (raw, json)
Hash identifier: HN0he3uIrYQ31v5Aujhcn4WGAgSlHbsbo40v1Y2wXsw=
Subject key identifier: 5F:F8:3D:4B:DB:7D:6E:C1:6B:BA:1B:34:B0:2D:B6:C0:16:AB:F4:41
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0186E9D3F3A84B19B60FB52F72FE3F5C6735
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/X_g9S9t9bsFruhs0sC22wBar9EE.roa
Signing time: Thu 16 Mar 2023 09:50:27 +0000
ROA not before: Thu 16 Mar 2023 09:50:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 188.255.135.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 07:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:d3:f3:a8:4b:19:b6:0f:b5:2f:72:fe:3f:5c:67:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 16 09:50:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ff83d4bdb7d6ec16bba1b34b02db6c016abf441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:98:5b:3a:4f:70:e8:12:92:0a:14:16:91:
5c:3d:42:2d:91:fa:54:ce:10:e3:5a:a4:af:54:84:
9f:83:b2:02:7a:1d:d7:18:aa:b4:df:e0:db:96:ec:
a8:ba:bf:ed:e7:73:38:77:29:a4:d8:c9:ce:be:c9:
89:ca:0c:d7:ad:7f:9a:9c:75:36:4b:e1:e9:8c:04:
04:e2:69:8d:8c:53:2a:5d:55:47:2d:4e:f1:52:02:
f8:39:6b:9c:a0:d8:cc:9a:13:34:9d:b2:34:b7:38:
b4:41:fb:9e:b5:08:9f:91:65:61:75:32:9a:15:83:
00:74:fc:b6:37:68:60:54:6c:05:b9:6e:40:cf:f3:
f4:b3:f8:d9:8d:ce:f5:97:75:f9:68:50:23:2d:78:
07:d7:fa:3f:48:97:f1:18:e5:ac:99:b3:dc:72:c0:
9d:6a:8f:fa:1c:8b:47:d5:7a:f9:84:fe:80:42:91:
29:d7:f7:d9:e1:bb:22:de:84:99:74:9e:0a:6a:da:
b5:b1:3e:3f:31:56:3b:48:1b:1b:eb:b1:be:7e:19:
7e:25:22:86:65:6c:29:95:f8:8b:cc:bc:b4:04:75:
10:1c:62:c9:68:c8:80:1c:dd:16:17:fd:44:0c:e1:
83:ca:06:97:eb:13:28:5a:ad:c4:13:ca:86:34:62:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F8:3D:4B:DB:7D:6E:C1:6B:BA:1B:34:B0:2D:B6:C0:16:AB:F4:41
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/X_g9S9t9bsFruhs0sC22wBar9EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.185.0/24
188.255.135.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c0:1a:3f:70:e0:d7:43:72:2e:17:3f:00:d6:de:c0:64:02:
bd:a1:a6:a7:6a:18:3f:2d:cc:71:a0:a2:40:0d:0d:04:d7:2e:
34:6a:75:8d:f8:5d:6d:8b:89:c4:78:b8:2c:ad:5c:5c:06:c4:
84:48:8f:8c:76:36:2c:6a:12:fa:e7:56:60:8f:80:94:a3:8e:
7f:89:01:8e:46:4b:ff:62:56:15:b1:e2:04:b9:de:21:ba:e0:
fb:bd:38:ba:e2:24:16:5e:ea:14:cc:d6:c7:ba:15:ad:27:01:
e8:c8:e4:3c:58:2e:50:10:00:44:f1:20:4d:c7:8f:6d:e6:e3:
ee:73:73:f5:5b:8c:dc:09:09:fc:c0:ad:cd:42:7f:a3:95:e5:
90:98:b4:4b:c4:cb:09:b4:4a:1b:65:d5:c3:2b:a7:83:d9:a6:
2a:a5:67:ca:d1:7c:25:3a:e6:f4:55:8a:8f:89:a1:10:f9:ff:
16:5e:33:7d:ab:d5:e4:60:46:ce:fb:7a:e8:9f:59:31:62:5c:
34:1e:d7:d0:b9:42:de:6d:aa:90:54:8b:67:4a:f4:ae:d1:d9:
ec:fc:99:40:aa:b9:11:1d:1b:4c:57:c1:34:10:9a:7b:bd:5d:
da:cf:0e:f8:d9:ca:ff:ca:7d:7a:0d:ad:05:5a:85:c5:4b:fe:
c4:91:d8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org