Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oFdeWIKoK1JX-86jKKbIQs6KkTM.roa
File: oFdeWIKoK1JX-86jKKbIQs6KkTM.roa (raw, json)
Hash identifier: 3PNE86syWndPe6UJyC2p3efAGQiuefFwRM8LHIdcFL0=
Subject key identifier: A0:57:5E:58:82:A8:2B:52:57:FB:CE:A3:28:A6:C8:42:CE:8A:91:33
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CCE8FF3C939F0B85176EAB2CEEEFE3E00
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oFdeWIKoK1JX-86jKKbIQs6KkTM.roa
Signing time: Wed 03 Jan 2024 09:03:09 +0000
ROA not before: Wed 03 Jan 2024 09:03:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.121.41.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 13:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:8f:f3:c9:39:f0:b8:51:76:ea:b2:ce:ee:fe:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 3 09:03:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0575e5882a82b5257fbcea328a6c842ce8a9133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:5e:c9:ef:09:a1:3e:e6:e6:e5:1e:4d:8a:
16:22:c5:a7:de:64:63:05:86:4e:5d:d1:b4:01:7b:
8f:48:7d:e4:94:2d:a1:f9:5e:1d:e1:0e:dd:80:ef:
80:9c:e0:37:a3:6c:3f:ba:e6:14:04:f0:50:0b:f4:
13:b9:29:0e:6b:b7:7b:9d:c2:2f:97:45:93:cb:5f:
54:a4:73:2b:97:91:e3:5c:b0:91:82:5e:91:07:be:
8e:87:cc:54:6c:10:b0:ba:f6:c4:0e:d3:3d:f9:86:
cc:2e:ac:1e:03:6f:35:21:58:6c:ce:12:db:fc:ba:
40:6a:56:f0:3c:b2:9a:2e:32:90:7a:bf:de:f8:76:
44:3c:7f:70:8d:78:48:41:fc:da:34:fa:ed:0f:ff:
a7:06:01:1f:5a:50:64:31:6a:c3:d3:97:f8:fb:ef:
e1:51:6e:8d:a4:5a:f6:57:10:0f:9e:81:7e:11:62:
6e:cf:2b:99:0d:e3:9f:6c:94:53:49:b5:c8:69:1f:
ab:f6:19:8e:05:26:8a:02:bc:ec:81:26:d9:b3:79:
60:d7:ec:e5:37:97:6b:a7:1e:57:96:20:96:b8:3a:
fa:48:9f:ff:02:a3:6a:a9:f9:cd:a8:b5:07:3b:9f:
69:80:05:64:2f:5e:fb:80:30:ed:ea:52:35:f6:92:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:5E:58:82:A8:2B:52:57:FB:CE:A3:28:A6:C8:42:CE:8A:91:33
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oFdeWIKoK1JX-86jKKbIQs6KkTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.41.0/24
109.121.43.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
30:aa:1d:9f:d1:5c:14:ba:7a:8c:3e:fe:a7:ed:a2:3c:fd:6d:
1b:12:3a:5a:83:63:c8:b7:93:5f:9c:1f:b1:4c:8f:ad:40:63:
8a:09:29:6e:19:d8:b4:dc:0e:7a:17:a1:f6:76:1c:08:e2:35:
36:c5:b3:4b:bf:da:e4:f4:6b:ce:21:7c:e5:58:87:22:05:ad:
7f:8d:0f:f9:ba:2e:a3:54:c2:1a:74:59:a2:56:f9:2a:e9:a1:
f7:ed:67:29:fe:8e:47:7c:7b:ef:c6:48:7b:8a:db:37:b2:9e:
e6:39:12:64:4a:f5:49:38:06:4d:fb:d0:4f:8f:ea:51:cb:1a:
5a:7e:d7:09:3b:bf:e8:94:e5:fa:37:b6:10:2e:32:dd:11:cb:
c9:22:2e:5f:bf:59:1d:76:91:12:b4:28:e5:f3:5f:07:35:31:
13:14:ed:24:4a:ae:ed:e5:40:ca:dd:f9:d2:e3:32:7e:a6:37:
16:d0:ab:8a:1f:d7:76:3b:b3:4a:a3:e2:8f:f5:55:3e:ea:6c:
5d:c0:74:91:c8:24:b1:ae:e2:25:95:e8:ff:39:75:b0:8c:cb:
38:9d:af:27:e8:87:c6:c2:cb:af:54:1c:6e:59:4f:a6:3b:01:
95:8c:98:1c:1a:9f:46:7b:72:4e:3e:3e:fd:c2:4d:d0:53:c7:
eb:72:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org