Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mXFTrACmDS9Luu_-p2to7rSyNNM.roa
File: mXFTrACmDS9Luu_-p2to7rSyNNM.roa (raw, json)
Hash identifier: SetqBWPA9IgZy1FdlzaQfm3GG3txjzH9cFSiCgqcYjg=
Subject key identifier: 99:71:53:AC:00:A6:0D:2F:4B:BA:EF:FE:A7:6B:68:EE:B4:B2:34:D3
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188AA62ABACCD9614903204F76B69964302
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mXFTrACmDS9Luu_-p2to7rSyNNM.roa
Signing time: Sun 11 Jun 2023 12:16:13 +0000
ROA not before: Sun 11 Jun 2023 12:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.32.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Jun 2023 19:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:aa:62:ab:ac:cd:96:14:90:32:04:f7:6b:69:96:43:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 11 12:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=997153ac00a60d2f4bbaeffea76b68eeb4b234d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:f6:26:1d:4c:53:0e:f3:95:48:e2:b2:f4:
f9:a2:2b:98:11:94:c8:34:c0:6d:20:23:80:b0:bb:
c3:78:fc:0b:ad:48:64:ff:bc:5a:52:7a:b5:95:f8:
3f:f0:c6:4a:de:71:b3:7f:6e:69:d0:5d:c0:8e:51:
c0:6f:35:6b:fe:ff:f2:b6:d8:ae:e7:b5:ee:69:d1:
47:7c:35:05:f2:cd:4b:21:10:42:1f:7e:a3:9c:77:
27:9d:94:3e:ba:ce:96:26:bd:4d:ff:65:ff:27:b3:
be:d3:89:9f:e0:2c:81:f8:e7:25:42:b1:2f:8b:4f:
3e:98:ab:48:fd:07:dc:a2:f8:33:81:f7:6d:87:ea:
7e:bf:17:81:4b:17:ef:e7:b8:86:8c:4f:8a:e9:a6:
87:8e:e0:5c:c2:cf:9c:81:e0:96:fa:d5:6a:d3:a3:
29:66:b4:f3:a8:38:65:f0:13:a5:a3:2b:78:55:3f:
12:fc:80:91:03:6e:8a:5c:90:ef:ee:61:0b:06:75:
13:d2:04:27:ea:5d:52:62:0d:6c:39:22:71:4a:dd:
f7:13:d6:45:3f:73:56:59:46:31:f9:bd:01:3f:e5:
33:00:3b:20:30:2a:50:0a:60:df:22:25:58:e1:e3:
a8:4d:55:74:e2:17:97:a5:7e:a7:38:c8:10:56:f9:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:71:53:AC:00:A6:0D:2F:4B:BA:EF:FE:A7:6B:68:EE:B4:B2:34:D3
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mXFTrACmDS9Luu_-p2to7rSyNNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.32.0/24
109.121.44.0/24
109.121.46.0/24
188.255.134.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ce:fb:6d:95:50:72:01:e1:2e:13:b8:50:44:cf:6a:28:d7:
38:29:da:7b:0b:a8:0c:24:e7:4d:41:80:d5:fe:aa:c6:03:40:
39:60:2b:37:11:82:9e:ef:e7:76:ba:17:91:6f:31:67:30:9b:
d1:b5:42:02:6a:11:6e:6d:d8:63:30:f4:76:55:fc:50:58:04:
11:af:94:f6:25:86:08:ce:10:f0:75:70:8b:1e:14:73:15:f3:
a6:94:eb:af:e6:27:3b:1d:85:63:20:43:aa:a9:c9:d6:74:26:
cb:fb:8f:76:8c:a1:c4:7b:98:16:15:3c:8b:58:27:7c:c1:f6:
6a:a5:d3:1c:d9:29:ff:13:2b:f0:c4:bc:82:f0:18:1a:a5:77:
d6:7c:21:83:d6:90:2e:7c:f3:54:f8:e2:73:9a:89:9b:b6:e1:
5a:58:83:a4:82:64:83:86:b7:64:b0:72:1c:ae:77:15:15:68:
88:c0:11:0f:87:fb:cb:91:f7:45:a0:2e:d3:da:9b:28:1d:66:
72:8e:16:75:98:01:85:05:80:5c:93:46:fe:c3:1b:b8:e0:3f:
22:35:4c:63:7d:17:59:cc:bb:5e:c0:79:dd:80:27:e3:0f:70:
13:22:31:4c:e8:b2:34:fa:7a:ef:9d:9b:25:c1:13:0d:41:fb:
bf:26:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org