Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b8TSkmGaKnBfD11UZFY6S8_Fdow.roa
File: b8TSkmGaKnBfD11UZFY6S8_Fdow.roa (raw, json)
Hash identifier: fZFfafHa0CrWTuzl5frD2KWPTBwF/gmsmY+uyUyOXsI=
Subject key identifier: 6F:C4:D2:92:61:9A:2A:70:5F:0F:5D:54:64:56:3A:4B:CF:C5:76:8C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E0EBD9C3AABF308AEFEF2E0350612
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b8TSkmGaKnBfD11UZFY6S8_Fdow.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 109.121.35.0/24 maxlen: 24
212.69.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0e:bd:9c:3a:ab:f3:08:ae:fe:f2:e0:35:06:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fc4d292619a2a705f0f5d5464563a4bcfc5768c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:30:a8:e9:34:00:1c:5d:9d:1d:a1:45:9f:
85:da:10:bf:f0:4d:44:44:ca:61:aa:55:f2:b6:9d:
6d:83:7f:64:4c:01:93:6f:94:2d:c5:6a:e9:b4:c3:
53:30:1d:84:bd:40:1e:e2:d6:ff:77:8a:f4:67:8c:
f4:5d:a5:d5:43:97:44:f0:7c:24:68:62:53:77:1b:
72:48:40:94:1d:6e:ad:41:f6:f2:c2:6c:18:65:6e:
2a:63:9e:41:7e:be:ca:c9:7e:49:c4:6b:6b:71:0c:
22:82:ab:74:46:66:23:8f:15:05:95:2d:0c:36:3a:
75:94:a5:76:4a:d1:2c:56:0b:2b:53:06:7c:8e:7f:
91:81:b3:fd:fd:a6:34:26:c3:49:8f:4a:a7:ae:d1:
f3:56:dd:1a:c9:78:a3:dd:a1:b6:2f:09:a5:3c:11:
2d:06:77:fe:b3:26:65:ea:2b:4c:ad:af:de:0d:9e:
62:e3:21:c9:36:f1:6e:79:fd:da:68:5d:19:dc:c4:
6f:7a:70:b5:be:a6:01:1d:de:f7:0d:d6:41:d3:f4:
d4:8d:8a:36:2a:d9:47:7d:8a:5c:ec:08:7b:d5:8f:
34:04:a2:15:fb:fa:32:69:2a:0f:35:25:32:6e:3f:
bc:c1:ee:d0:35:c1:e7:55:be:bf:c2:1d:75:96:ec:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C4:D2:92:61:9A:2A:70:5F:0F:5D:54:64:56:3A:4B:CF:C5:76:8C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b8TSkmGaKnBfD11UZFY6S8_Fdow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.35.0/24
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
18:0f:63:7f:22:8a:e7:79:0c:70:c0:6e:98:95:4f:d3:3d:30:
be:ba:f8:5f:ac:96:25:90:e5:f9:e3:37:f7:96:48:ac:35:d6:
04:8d:bf:af:16:18:46:4e:3b:b7:ee:30:07:0b:67:fd:ca:91:
59:2d:44:94:31:e8:d9:fc:16:a7:d6:9b:6c:79:21:58:e2:d1:
66:84:40:13:58:18:85:a9:7d:21:54:eb:1e:c3:6f:ee:a0:b5:
b7:73:58:c6:67:8c:71:fd:f4:1d:34:c2:c3:85:fc:4a:bd:88:
f4:c2:8f:dc:cb:e0:f1:44:ea:90:47:3a:d3:5d:2b:fc:eb:3e:
9e:5c:a3:0e:75:df:b2:1f:d3:5c:73:f5:36:81:f3:c6:4c:ed:
e7:6c:95:59:e2:96:3f:5a:7d:ac:e3:d3:25:71:8f:56:41:66:
29:0f:35:94:ce:4e:43:aa:d7:91:8c:ee:f4:03:0a:ea:8f:1e:
12:d3:ac:a8:ae:35:f8:23:b9:2b:3e:a5:6e:c7:90:7d:79:a6:
d5:4b:12:74:3f:63:75:13:42:66:df:a7:4c:43:ae:58:c6:7a:
dc:3a:8c:46:0e:73:42:29:36:73:0d:29:4a:b7:2f:77:29:59:
25:c4:16:57:c0:53:c1:6f:1e:1c:b5:51:86:44:86:2c:ed:5d:
6b:6f:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 13:09:57 2024 by rpki-client on console-fra.rpki-client.org