Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/p_1cs5AYr5k_QSadk-CaRr1m8Hs.roa
File: p_1cs5AYr5k_QSadk-CaRr1m8Hs.roa (raw, json)
Hash identifier: zpRWkzSZ4cP5GLOebl84cX/J3yY0Y8cIa7PgH1hlqIU=
Subject key identifier: A7:FD:5C:B3:90:18:AF:99:3F:41:26:9D:93:E0:9A:46:BD:66:F0:7B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188FC713353BD0D42AE0DF6E045637AD5E3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/p_1cs5AYr5k_QSadk-CaRr1m8Hs.roa
Signing time: Tue 27 Jun 2023 10:40:57 +0000
ROA not before: Tue 27 Jun 2023 10:40:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.32.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Jun 2023 20:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:71:33:53:bd:0d:42:ae:0d:f6:e0:45:63:7a:d5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 27 10:40:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7fd5cb39018af993f41269d93e09a46bd66f07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:05:9d:e5:40:a0:cd:01:2b:93:4f:05:9c:
70:bf:7b:f8:ba:6f:6c:48:6f:11:6d:e1:d3:b0:46:
8f:fb:2a:a9:b6:1d:cf:8d:c4:e7:c8:69:9b:e1:71:
7a:40:b2:f4:b9:97:c4:28:f1:88:61:ef:13:66:19:
dd:32:7e:08:4a:6b:f8:85:b0:c6:52:cb:8f:a3:43:
c0:99:03:85:95:e8:e4:7a:9c:9b:b8:d8:f5:ec:61:
17:a1:ec:99:03:88:28:fa:cc:f0:37:32:cd:5a:4e:
d3:a9:26:64:7a:3e:54:01:ae:88:cf:9c:ea:24:b8:
36:75:8c:1b:67:70:de:b1:ca:a9:37:5c:b4:8f:04:
04:9c:e7:a9:6b:00:2e:3d:b2:5c:b9:80:84:84:7a:
aa:08:47:21:36:30:30:6f:8b:4f:2c:6b:32:a6:65:
b4:22:8f:20:d0:68:f5:10:e2:c9:f3:97:4c:7f:d9:
eb:a5:78:3f:43:04:3d:45:7b:05:9e:b4:c2:f1:b9:
9a:e9:d4:9f:48:3c:c2:29:ba:3b:6b:e0:ac:f4:75:
2a:27:6a:1e:62:6b:f8:68:7f:25:b2:0a:85:84:ed:
a6:50:67:bc:71:31:65:70:50:3f:30:af:b1:19:f1:
3c:05:4c:c5:67:a9:29:ca:b3:3c:cc:c3:0b:ed:92:
25:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:5C:B3:90:18:AF:99:3F:41:26:9D:93:E0:9A:46:BD:66:F0:7B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/p_1cs5AYr5k_QSadk-CaRr1m8Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.32.0/24
109.121.44.0/24
109.121.46.0/24
188.255.134.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:23:77:0f:f9:98:82:f3:80:68:22:89:4e:34:db:ce:63:0a:
7d:fe:86:0b:a5:c1:bc:f6:10:db:ff:7b:c0:f4:56:30:b0:5f:
c1:25:8b:59:a1:7f:21:18:cb:ba:6a:05:ad:72:34:a9:6b:8c:
61:21:84:7a:16:a6:85:a5:20:a8:55:e7:4f:2a:79:e5:80:51:
c9:2e:2d:f2:7d:6b:3e:8b:a1:7e:26:85:78:b7:46:26:0d:d4:
9f:0a:6e:dc:f1:5f:64:ce:10:71:fa:56:1c:ce:60:34:cc:a8:
2b:2f:1c:ba:c2:09:89:ed:6c:1a:03:a4:9c:7e:57:b1:34:e5:
fd:c1:b4:3c:85:63:12:a0:89:23:a5:45:8e:e2:8c:b8:6d:d4:
a1:bd:71:3b:c7:1a:fe:54:e0:01:ac:cc:c7:18:e6:cd:0f:24:
7b:7c:13:3c:6d:18:c9:d6:2e:ae:69:5b:b1:e3:4d:8e:bd:df:
8a:e8:ff:13:ff:d0:47:6e:9a:fe:c3:bd:45:35:fb:8a:3b:32:
9f:cd:a9:0c:a8:7b:ae:ed:4c:3c:a1:49:29:23:00:41:de:d7:
7c:99:c4:d8:1d:8b:1c:24:cf:7e:cf:dc:4a:36:70:f4:bf:4e:
9c:e6:6c:88:3c:a5:90:09:1b:49:da:82:3f:08:2d:ee:0d:5f:
e1:49:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org