Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YC9Us-za0QsCAq0a6cBbrqnqA3U.roa
File: YC9Us-za0QsCAq0a6cBbrqnqA3U.roa (raw, json)
Hash identifier: R1K+OgMxi4M+gtNUiC/WZdhbBI1JFSKt9zbZKkj6htk=
Subject key identifier: 60:2F:54:B3:EC:DA:D1:0B:02:02:AD:1A:E9:C0:5B:AE:A9:EA:03:75
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018C3AAEACA385805643E70C0D1A14EE27FE
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YC9Us-za0QsCAq0a6cBbrqnqA3U.roa
Signing time: Tue 05 Dec 2023 15:52:55 +0000
ROA not before: Tue 05 Dec 2023 15:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42689
IP address blocks: 109.121.35.0/24 maxlen: 24
212.69.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:ae:ac:a3:85:80:56:43:e7:0c:0d:1a:14:ee:27:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Dec 5 15:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=602f54b3ecdad10b0202ad1ae9c05baea9ea0375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:a6:3d:25:85:0a:b3:9d:df:c6:bd:15:10:
88:9a:a9:59:e2:da:f2:4f:7e:15:2a:c3:8d:c3:01:
49:d1:b8:84:22:51:d1:15:be:79:22:33:6f:91:1d:
96:a9:42:5b:6c:18:73:e4:f4:8e:19:b6:cc:57:5a:
bd:01:ea:92:4f:c9:13:53:16:4d:25:18:06:26:f5:
fd:59:c0:8b:26:b9:b7:74:4b:0e:95:d3:b1:b1:1b:
05:85:f6:c7:cf:90:da:a3:b6:cc:33:e6:dc:85:74:
e2:1c:3e:82:a3:39:5f:49:9d:9a:35:b6:c3:00:f2:
ab:58:4f:94:f9:1f:04:0c:0c:d8:e3:24:5a:c9:9a:
92:83:02:b4:36:50:db:53:62:43:80:74:76:ee:69:
e4:fb:79:92:39:07:1f:87:e6:4a:90:37:b8:f2:13:
e4:bc:58:8b:91:f4:ad:02:f4:a8:be:4e:47:21:db:
e3:5a:ec:a0:c1:52:05:ca:ab:9f:e5:12:66:fc:c3:
68:3f:3b:72:41:fa:ba:e0:57:e6:96:ad:f9:d0:ed:
3b:20:77:c5:5d:81:20:0e:1e:e2:4c:16:7c:77:e0:
eb:3a:e8:1a:06:d6:42:d8:34:c4:25:d9:7f:e9:fc:
ef:68:24:41:e4:06:92:f2:6e:a7:9d:15:25:44:f1:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2F:54:B3:EC:DA:D1:0B:02:02:AD:1A:E9:C0:5B:AE:A9:EA:03:75
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YC9Us-za0QsCAq0a6cBbrqnqA3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.35.0/24
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
23:03:2f:44:cc:35:32:0b:ce:d6:77:87:f4:52:d7:49:fe:81:
02:dd:8d:31:76:dc:c1:a6:7a:90:8c:4c:c4:bb:a4:a9:9f:7c:
66:49:3f:19:51:19:0b:4e:a3:dd:c6:cb:a6:ec:66:e3:b6:d6:
f3:87:d9:f2:1b:dd:8a:bd:e5:1b:15:28:0c:c1:a6:f4:c1:87:
27:b9:24:cd:21:05:e8:13:30:98:f8:ba:89:42:77:40:a9:81:
7d:f6:f6:3d:6d:50:a6:cd:1f:17:dc:7c:fc:3a:5f:e4:a1:d0:
f7:4f:a5:77:bb:38:d4:64:86:8e:84:fa:d2:7b:ad:32:99:95:
8e:f5:69:8b:c6:9e:ba:a8:46:5a:dd:a5:15:cd:b4:93:74:bd:
6f:b6:33:6a:fe:3b:cd:58:12:11:66:98:6a:f2:aa:06:67:0f:
da:dd:a9:3a:63:83:b7:2b:5d:45:01:3c:73:ad:26:08:83:5b:
fa:71:2b:4a:58:ed:bc:d0:6f:fd:0a:b0:91:00:bc:da:4a:3e:
f9:be:fc:d4:95:93:a7:53:82:2a:67:bd:03:45:35:38:2c:71:
d6:1d:f2:65:81:33:01:34:d0:bd:14:68:d0:52:b4:bc:29:35:
57:7d:4c:52:38:aa:a3:b6:95:58:78:68:2e:7d:85:73:fc:a3:
6d:4d:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org