Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kI7VgzK63OH8Qmf5zWsrK_89MLU.roa
File: kI7VgzK63OH8Qmf5zWsrK_89MLU.roa (raw, json)
Hash identifier: q1440FJpoN/jPF/ycDeGRacDLeIlzwWSOssx5EYKBwk=
Subject key identifier: 90:8E:D5:83:32:BA:DC:E1:FC:42:67:F9:CD:6B:2B:2B:FF:3D:30:B5
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018C9FF8499C8BFE13FA7ABB470F26AC51A7
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kI7VgzK63OH8Qmf5zWsrK_89MLU.roa
Signing time: Mon 25 Dec 2023 07:54:58 +0000
ROA not before: Mon 25 Dec 2023 07:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.32.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Dec 2023 09:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9f:f8:49:9c:8b:fe:13:fa:7a:bb:47:0f:26:ac:51:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Dec 25 07:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=908ed58332badce1fc4267f9cd6b2b2bff3d30b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:5d:09:a6:6c:19:aa:0e:e6:c3:71:4b:c1:
85:31:6f:06:1a:2c:e0:17:4f:92:3f:05:ae:c2:8f:
ff:94:c3:30:fe:be:12:3d:f5:fa:9c:c1:8c:96:b8:
19:b0:53:b2:c9:8b:89:58:78:1d:1f:61:9f:40:a8:
82:38:28:46:66:d5:fd:10:ba:1d:e9:cd:e6:69:5c:
26:9b:0e:e4:64:ec:c2:fc:2e:aa:2d:d9:7b:54:68:
28:81:5b:5a:66:da:82:24:0b:2b:c9:6c:1c:a3:87:
93:c3:69:7f:d5:1d:f0:b1:18:53:33:1d:87:ca:cb:
39:e7:59:9b:1e:31:f6:6f:f4:e3:ac:84:57:e9:7a:
e5:14:00:5f:db:0f:f4:d6:8f:df:d0:64:84:1f:22:
fb:d9:d9:fa:5c:65:5a:39:5c:4a:b3:09:64:0b:ab:
52:6a:fd:6d:d2:ef:ae:99:4c:29:70:9f:2f:7b:73:
5c:1e:de:55:29:21:a1:eb:93:bf:58:91:ac:57:39:
d4:11:7a:1a:33:0a:41:2f:5c:20:aa:95:27:be:02:
da:d3:55:f1:24:19:ef:54:ed:fb:7a:df:c7:c2:bd:
f4:83:04:c7:69:6b:d6:82:1c:ec:39:fd:9d:1c:7e:
83:8f:c6:e9:91:59:4e:e1:40:9d:7d:f0:f4:4a:73:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8E:D5:83:32:BA:DC:E1:FC:42:67:F9:CD:6B:2B:2B:FF:3D:30:B5
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kI7VgzK63OH8Qmf5zWsrK_89MLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.32.0/24
109.121.43.0/24
109.121.46.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a1:48:02:14:7c:6a:89:f4:bd:d2:a6:ae:38:46:8e:3c:07:
aa:cc:98:a6:07:8d:ee:1d:e9:3e:a7:43:bd:12:41:8b:78:a9:
87:dd:c8:af:cb:06:34:d4:a3:e5:64:9b:14:56:1b:04:de:7f:
74:a9:44:d9:2c:89:1b:e0:22:14:8b:1f:d8:4e:5b:f6:34:38:
13:c6:8d:13:49:01:a0:73:72:54:d3:00:2e:15:ca:c1:9d:62:
cd:a7:0c:95:c5:83:cc:51:e0:23:b5:1c:09:19:13:21:c7:3e:
92:70:38:73:62:9f:6b:fb:ad:f8:51:6c:25:a3:31:f4:36:b6:
b2:b4:dc:e4:67:78:ac:14:ea:e1:0f:bb:fe:a3:75:5e:f3:a6:
b1:a1:6b:38:c7:e9:fa:a3:1e:f8:65:68:32:61:e7:3f:79:32:
bc:d1:7d:b0:a1:09:b8:44:e7:01:b2:c4:ed:c2:64:97:62:d7:
f0:88:79:e3:bb:c7:b2:34:98:f4:c6:ec:a3:d4:bc:96:72:28:
28:e2:93:49:f5:77:a9:53:c6:71:4c:8f:0b:68:7f:1c:33:ba:
3b:1e:76:8e:9b:f8:b0:ca:d1:8a:6b:68:e9:af:f7:c2:fd:f4:
20:4d:c5:80:04:d2:1e:77:08:96:84:31:4d:96:dd:b1:0d:2d:
46:1a:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org