Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mTeTJp4tGsfeua9LNHLuoIgeIuQ.roa
File: mTeTJp4tGsfeua9LNHLuoIgeIuQ.roa (raw, json)
Hash identifier: /q9maNuiAV3wt/4Nw45VMEVzhH8ESkRJjqV26eZNYTw=
Subject key identifier: 99:37:93:26:9E:2D:1A:C7:DE:B9:AF:4B:34:72:EE:A0:88:1E:22:E4
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018F617E95D627A3A4DF461D0831F40CA3AF
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mTeTJp4tGsfeua9LNHLuoIgeIuQ.roa
Signing time: Fri 10 May 2024 07:53:56 +0000
ROA not before: Fri 10 May 2024 07:53:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 07:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:7e:95:d6:27:a3:a4:df:46:1d:08:31:f4:0c:a3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 10 07:53:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=993793269e2d1ac7deb9af4b3472eea0881e22e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:0e:fb:0e:50:72:95:83:0e:7e:ab:d4:2c:
6e:c7:e9:47:22:5f:80:ec:4f:46:48:c6:c6:f7:cb:
73:37:dd:2f:d7:8f:68:92:94:fa:81:7e:68:56:85:
30:6d:24:e7:d0:57:28:b6:05:02:ee:e1:0b:c0:b1:
f7:92:f2:98:a8:aa:7b:41:cf:cd:bc:8e:d8:ce:63:
3c:35:60:4d:ee:a4:be:e7:c9:b8:74:d8:9c:73:50:
94:58:d5:f7:13:a1:ce:27:0e:a6:72:bf:43:23:5e:
2b:50:2e:91:67:7a:c1:84:48:1e:8e:e9:86:b7:7f:
0f:2e:7c:3a:c8:bb:f3:11:a8:34:e3:d1:0c:63:59:
2a:45:e4:4d:3c:50:1d:d4:9a:fb:8b:2d:9c:25:96:
ae:1c:58:1f:c9:70:90:36:87:89:92:73:3b:54:17:
13:da:4f:b1:e5:72:9f:e0:7b:d4:2a:af:e1:03:d7:
6a:dd:9d:8e:3a:d6:73:c6:82:25:d9:d4:0f:ec:3d:
75:d5:3c:0c:33:b3:9e:16:9b:99:d2:5e:5d:40:08:
03:b6:c2:4a:6e:ae:7a:f0:24:f3:b5:92:b9:dc:a6:
0a:94:17:ef:77:97:7a:64:5c:e4:bb:4f:8d:0a:05:
b9:5e:43:fa:fd:56:46:3c:be:ca:12:fd:df:25:76:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:37:93:26:9E:2D:1A:C7:DE:B9:AF:4B:34:72:EE:A0:88:1E:22:E4
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mTeTJp4tGsfeua9LNHLuoIgeIuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.43.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
03:55:32:c6:0c:89:db:99:dd:4b:ab:e5:e7:37:49:a2:b5:5c:
5c:f1:7a:d2:1b:95:a0:49:27:bd:01:85:f0:ee:37:5d:28:39:
8f:91:67:81:8e:0e:3e:15:8d:f2:05:b2:94:f3:a8:5d:93:bd:
10:e9:ca:cd:41:81:43:01:25:b0:34:d7:16:c9:23:c9:9d:81:
a6:1a:7d:34:64:e6:6c:67:89:b1:01:b2:eb:4d:6b:58:e6:51:
b5:b9:e2:93:d8:03:f6:97:9a:db:b4:0c:6f:c1:59:bc:89:49:
cd:6b:96:e9:3c:a5:a0:a6:85:b9:e9:64:04:84:94:9f:7e:db:
70:3d:0e:a9:7f:5f:62:38:5a:35:e2:e0:90:cc:e1:3f:7c:1c:
72:3c:9a:91:78:dc:48:14:ed:2f:5b:71:21:7d:b1:4b:f1:a1:
5a:77:6b:36:01:a4:c3:96:df:4a:92:0f:49:9c:db:f2:a3:83:
fa:a9:64:11:9a:42:e6:74:df:c0:ee:c0:04:45:be:21:50:89:
31:54:2a:62:07:7b:be:b7:34:3a:11:dd:f0:90:fa:bc:58:70:
db:d2:a9:de:6a:cd:ea:21:ac:97:ef:a9:46:d6:3e:6f:95:cf:
ff:dc:4c:8d:6b:fb:c9:3c:ce:f1:56:40:03:04:c8:78:b7:ca:
7b:bd:e8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org