Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gOC44Db_O8J4Hcb3-U884khv15Y.roa
File: gOC44Db_O8J4Hcb3-U884khv15Y.roa (raw, json)
Hash identifier: HNYgkASS9QWIVzqao77K9l2LqEP6xWCS8Wrb5/7JjTQ=
Subject key identifier: 80:E0:B8:E0:36:FF:3B:C2:78:1D:C6:F7:F9:4F:3C:E2:48:6F:D7:96
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018F57593B9F27341774D0BE3A3782FCED7B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gOC44Db_O8J4Hcb3-U884khv15Y.roa
Signing time: Wed 08 May 2024 08:36:56 +0000
ROA not before: Wed 08 May 2024 08:36:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 09:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:59:3b:9f:27:34:17:74:d0:be:3a:37:82:fc:ed:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 8 08:36:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80e0b8e036ff3bc2781dc6f7f94f3ce2486fd796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:7f:00:7d:48:c0:cc:44:8c:24:b1:e7:1b:
fa:bf:72:32:99:93:89:c6:e2:c1:b9:d5:20:7c:51:
82:c5:00:65:18:6d:ac:8d:8c:3d:d2:1c:c1:71:0c:
61:70:b0:eb:af:c6:93:78:fd:2b:06:3a:cc:c8:79:
2d:b8:d6:4d:e1:2d:0d:36:c6:24:2c:03:a1:f3:fc:
7a:d8:b8:23:bc:34:6d:a5:7b:8c:73:fe:e8:5c:c5:
f4:12:7a:78:7b:88:27:3b:b1:6c:90:63:f1:a1:cf:
06:ef:8d:3d:59:38:ee:fd:4e:00:3b:aa:2c:91:a9:
54:a8:c1:d5:a3:2e:61:6a:08:7d:90:5c:e6:3f:30:
38:73:7b:c2:f0:20:84:ac:91:7e:fd:8a:6a:65:31:
73:b0:d9:4b:51:6f:23:ea:07:ed:82:04:ec:86:62:
d6:6b:19:e1:33:dd:bb:ba:db:e2:5f:ee:26:bc:af:
95:cb:01:c7:f4:94:d1:87:f2:ee:00:91:2c:d5:13:
69:33:7c:c6:54:a2:94:cb:cf:d9:43:4e:8a:cc:a0:
e8:08:ca:8b:9e:9f:60:8e:e5:b2:81:fa:3a:d5:8a:
01:31:f7:d9:3d:98:e4:ff:4f:7a:05:62:14:d1:35:
a5:d1:0c:fd:cc:da:ef:f3:33:44:e1:a9:bf:2a:e8:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E0:B8:E0:36:FF:3B:C2:78:1D:C6:F7:F9:4F:3C:E2:48:6F:D7:96
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gOC44Db_O8J4Hcb3-U884khv15Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.43.0/24
185.47.91.0/24
188.255.128.0/24
188.255.200.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:bb:7f:c3:65:48:f1:2a:bf:a4:20:5f:63:2e:1c:c5:d7:ad:
ee:fc:e7:9c:a3:63:b3:85:3b:dc:4d:50:9d:eb:3e:07:5c:ec:
9e:51:9c:23:4f:e6:96:a7:f2:fe:06:e0:f7:e3:43:57:fa:ec:
9f:75:0d:c2:08:ad:e3:4d:eb:0a:ff:cc:bc:a4:63:66:e0:cb:
77:c2:64:62:b4:55:21:bc:13:b1:4f:29:0d:ad:55:25:be:48:
b4:65:91:c7:be:47:c2:b5:a5:d3:18:40:cb:3b:f9:01:fe:4b:
7a:9e:9f:4a:f3:f0:e7:88:93:0c:c4:67:1a:74:77:d1:51:1c:
ad:ad:45:2b:8c:30:d5:e3:27:ef:f4:c3:09:a0:b0:8c:32:12:
35:6e:1a:8e:5f:f3:11:3a:08:ac:e8:11:d0:e0:76:ee:22:b0:
b5:d9:0f:47:e2:2a:73:3b:c7:5b:13:93:39:e7:ce:fc:a4:93:
38:a2:09:e2:67:14:af:4a:f9:1f:4c:72:db:f0:62:5d:e4:3e:
b3:f7:ba:69:36:53:63:a4:5e:65:7c:56:00:26:ec:7e:52:8b:
7c:41:ab:45:0e:c5:09:9c:f2:29:8f:a5:75:0b:cf:89:98:2a:
ad:1a:5e:bd:be:a0:53:7b:04:75:98:be:d5:c8:3e:9a:64:7e:
74:8a:58:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org