Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/a-Esba59zHwECwYN4Fe3iQQG95s.roa
File: a-Esba59zHwECwYN4Fe3iQQG95s.roa (raw, json)
Hash identifier: zB+E8YB2VQeBrV2mPLCancPHWx00asgTDbU7WOHTxyQ=
Subject key identifier: 6B:E1:2C:6D:AE:7D:CC:7C:04:0B:06:0D:E0:57:B7:89:04:06:F7:9B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188712A3938B9E62D3E49CB23691AF11365
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/a-Esba59zHwECwYN4Fe3iQQG95s.roa
Signing time: Wed 31 May 2023 09:36:12 +0000
ROA not before: Wed 31 May 2023 09:36:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.32.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:2a:39:38:b9:e6:2d:3e:49:cb:23:69:1a:f1:13:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 31 09:36:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6be12c6dae7dcc7c040b060de057b7890406f79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:c8:d6:a0:8e:4e:32:d1:23:17:56:e1:c7:
2d:16:c5:b8:aa:9f:68:71:1b:fc:d2:b0:b4:fc:6b:
ee:37:10:b6:c2:9d:ab:a3:f3:44:67:1b:b9:cd:50:
44:a0:7f:b7:b6:7a:f9:87:06:d9:76:c7:a5:b6:49:
b5:df:50:3f:4e:01:c7:a5:4a:ef:8b:d0:e0:78:f4:
2d:f5:7f:a7:ea:ec:8e:51:3a:1d:a4:e9:92:45:12:
e3:8d:d4:56:6f:e4:c3:fa:ac:25:3e:a2:81:6f:c3:
d5:ba:05:9c:d2:0d:b6:99:e7:19:45:66:6f:ca:aa:
b3:9e:f9:c1:89:68:d0:72:75:7b:69:14:f8:ee:ba:
5e:3c:05:a2:d5:44:ee:c5:bb:e2:5d:6e:25:e7:26:
d8:1b:17:5d:76:93:d9:3b:cc:13:66:bf:5d:70:19:
93:73:e7:5c:67:90:68:fb:55:99:7b:67:9e:bb:8c:
e5:40:fc:55:37:25:ff:a8:11:78:bc:61:64:97:81:
c1:9c:a1:f8:d2:dc:57:d8:7c:73:13:ac:eb:1a:ba:
42:19:55:87:d3:7f:2b:4d:a3:27:34:de:8e:ab:52:
37:f1:57:e2:8f:25:8b:88:10:36:91:eb:3f:69:ac:
9a:43:ef:67:b0:0f:ce:be:df:55:37:34:11:7d:49:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E1:2C:6D:AE:7D:CC:7C:04:0B:06:0D:E0:57:B7:89:04:06:F7:9B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/a-Esba59zHwECwYN4Fe3iQQG95s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.32.0/24
109.121.44.0/24
109.121.46.0/24
188.255.128.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0c:ed:68:28:ed:e8:0d:84:25:9d:10:75:d1:8b:13:c5:53:
d7:5b:28:b8:2d:f3:28:15:4d:e0:dd:8a:59:86:9d:04:c7:25:
2c:e8:7e:cb:77:10:a2:5b:c4:c7:af:15:21:63:67:a0:e7:33:
9b:7d:51:a9:e6:9a:ae:73:6e:ec:28:13:e4:31:68:d2:90:68:
09:6e:3b:f1:69:8d:e0:fe:cd:bb:d3:ae:c1:b1:c8:04:d9:49:
09:01:e4:9b:80:03:ce:b2:d8:b8:95:36:e3:f8:96:32:54:80:
fe:a6:1d:07:6c:4b:0a:1a:61:ed:36:82:f6:3e:b4:3c:f5:f6:
77:39:2c:75:c6:b2:45:e4:33:ba:98:05:5c:69:d1:f3:95:35:
3e:ad:6f:f3:19:2a:29:d3:ed:ae:3b:bf:90:9c:2f:63:c6:1a:
ce:8f:a2:f5:3c:63:8c:ef:ab:cc:68:77:17:ed:68:6a:02:f3:
cf:01:bf:87:43:fa:05:0c:e1:42:09:e7:dc:90:b4:53:d2:34:
29:ed:2d:74:3e:a9:f6:a7:98:49:8c:93:45:29:35:7c:03:99:
00:c5:6b:02:c8:4b:f3:57:70:6d:be:8b:f5:70:48:01:75:82:
a9:15:38:e6:b5:a7:17:4d:ab:ee:1d:b1:11:b7:01:a3:1c:a6:
0d:2c:a7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org