Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jSbdutieOKSMaWQxvG0PfuRbW8I.roa
File: jSbdutieOKSMaWQxvG0PfuRbW8I.roa (raw, json)
Hash identifier: bPhEFDQiHOvnpiCKm8pH5dhBUza1/ECM44sxzoBwwkY=
Subject key identifier: 8D:26:DD:BA:D8:9E:38:A4:8C:69:64:31:BC:6D:0F:7E:E4:5B:5B:C2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0187BC84A2BCBE4AD760634892CC75A07F7E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jSbdutieOKSMaWQxvG0PfuRbW8I.roa
Signing time: Wed 26 Apr 2023 07:43:41 +0000
ROA not before: Wed 26 Apr 2023 07:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 109.121.38.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 May 2023 19:21:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:84:a2:bc:be:4a:d7:60:63:48:92:cc:75:a0:7f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 26 07:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d26ddbad89e38a48c696431bc6d0f7ee45b5bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:94:ae:33:8d:3f:72:f2:bb:94:8d:df:05:ed:
f1:f3:bf:21:99:7d:86:ee:c3:74:8d:56:d1:67:65:
0d:36:56:65:82:7e:e1:50:12:c1:7f:78:c9:90:c0:
0e:7a:7f:87:2d:d6:28:88:c9:43:f0:bf:da:60:04:
71:4c:08:6d:3e:95:4b:47:f2:62:6f:d5:31:ec:29:
ee:b3:db:8d:2f:57:42:3a:88:82:d9:cd:8c:af:9e:
dd:6d:f7:8f:f2:a0:b9:57:c5:19:66:27:a6:5c:fc:
99:36:aa:c4:2f:8c:9b:9e:5f:27:18:6c:0c:12:6f:
6e:22:cc:cc:1a:65:15:18:7c:2f:44:bd:02:ae:af:
c6:b1:00:8d:e2:03:07:15:96:bd:19:1c:53:e5:df:
bc:cf:06:d8:41:c6:98:97:8c:9b:c1:11:e1:f3:68:
46:f8:61:27:fb:72:3e:3f:1b:08:08:bd:17:f1:40:
71:f6:47:91:4c:f2:56:c2:da:2a:29:af:59:5d:a8:
d8:77:e9:20:bc:76:b5:7b:25:41:37:c6:f6:62:c1:
4a:b0:22:d1:00:27:5f:07:1d:1a:0b:9b:e7:92:e7:
21:e8:ee:87:5c:08:19:58:a1:71:d1:0c:02:6e:d9:
8a:3b:cd:ae:46:06:2f:cc:b5:c8:c8:a9:1b:1f:87:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:26:DD:BA:D8:9E:38:A4:8C:69:64:31:BC:6D:0F:7E:E4:5B:5B:C2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jSbdutieOKSMaWQxvG0PfuRbW8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.38.0/24
109.233.185.0/24
Signature Algorithm: sha256WithRSAEncryption
79:cf:06:4b:77:91:fc:5f:41:1d:22:05:13:88:ba:ba:69:de:
10:9c:45:8c:fe:25:e6:16:39:9f:93:a0:7b:6e:88:b7:d8:fa:
e9:d9:b2:b0:50:8d:1d:c9:2c:81:65:85:90:a4:ec:af:5b:09:
3f:42:26:e0:60:e7:75:15:de:33:1d:cd:3f:f1:08:ce:0d:7d:
8a:78:31:97:5e:66:66:2a:85:0d:3b:a7:3b:89:da:5c:fa:89:
68:c4:10:30:37:95:aa:bd:f6:b3:27:5c:b9:3f:d6:a7:f6:1f:
6d:b5:dd:3b:c2:ce:16:a2:25:1f:0c:96:4c:ce:2d:9a:9f:22:
dd:63:86:de:6a:e0:77:c2:af:57:f5:18:58:a5:50:d9:1c:3d:
f4:13:f9:50:18:22:a5:96:04:ff:7e:f0:5f:2a:af:e8:28:23:
84:40:82:92:8b:36:5e:d5:f2:12:01:e3:b1:91:de:9f:c8:0c:
e6:2c:f8:41:93:15:d4:c0:6c:a7:80:2f:5f:3f:ad:3a:8f:ea:
b5:c3:ec:cd:ec:b8:3f:a0:fd:c7:8b:4e:08:93:1a:95:24:ca:
e7:4b:c5:5f:ec:1d:02:38:45:e3:39:86:08:59:54:21:44:99:
5d:5b:01:7d:6b:64:5a:e7:0e:bb:76:d4:67:fa:92:82:ec:79:
03:7e:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org