Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/sRhdJnxde27J38MkMSgJQTvQAhA.roa
File: sRhdJnxde27J38MkMSgJQTvQAhA.roa (raw, json)
Hash identifier: 19HuPt/y43s47CcFlVad6A0P63owkdgej9ffazCK+5M=
Subject key identifier: B1:18:5D:26:7C:5D:7B:6E:C9:DF:C3:24:31:28:09:41:3B:D0:02:10
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018AB6E073D445655E25EFAFC6826564D741
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/sRhdJnxde27J38MkMSgJQTvQAhA.roa
Signing time: Thu 21 Sep 2023 08:34:37 +0000
ROA not before: Thu 21 Sep 2023 08:34:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.69.10.0/23 maxlen: 23
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:e0:73:d4:45:65:5e:25:ef:af:c6:82:65:64:d7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 21 08:34:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1185d267c5d7b6ec9dfc324312809413bd00210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:8e:2a:e0:08:92:91:88:f7:db:17:b4:4c:
31:dd:9d:ca:82:6b:60:e7:b7:a8:51:da:de:4f:2b:
4e:7e:7e:51:98:26:18:14:9b:f0:09:2f:90:73:74:
1d:46:c7:7b:5b:53:83:d8:56:42:ed:b4:ce:6d:ae:
55:d4:8f:83:42:82:96:6b:0c:8c:24:3c:1d:87:81:
c1:b8:9d:25:e8:01:b8:0a:d4:27:5f:20:00:ef:8a:
9d:8a:4e:f0:cf:5a:df:a0:0a:c6:bf:67:43:93:53:
21:ec:6d:99:c6:2d:b5:70:82:a6:6b:bc:0d:e8:a1:
3f:36:b2:59:81:eb:82:01:e6:34:35:6b:5d:cb:09:
58:e9:44:ef:b7:59:31:20:cc:1e:85:6c:1f:a2:7a:
b6:12:d2:e6:2a:91:99:43:04:0e:8c:e1:09:5a:a7:
38:66:be:aa:a6:94:38:a5:ca:d4:2e:69:66:0e:08:
f5:4c:df:33:15:b5:31:2f:90:70:c7:92:c8:56:ba:
48:94:98:bd:9f:0d:9c:54:8c:ce:38:17:43:17:49:
55:d1:64:e3:c5:e6:c1:90:7c:48:88:68:d9:29:ad:
b2:ee:44:65:d0:8f:37:1b:32:6b:ab:7d:4b:74:99:
71:96:e0:91:7b:d3:f1:d3:30:a3:e4:34:19:7b:58:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:5D:26:7C:5D:7B:6E:C9:DF:C3:24:31:28:09:41:3B:D0:02:10
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/sRhdJnxde27J38MkMSgJQTvQAhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
178.253.237.0/24
212.69.10.0/23
Signature Algorithm: sha256WithRSAEncryption
24:3c:8e:fa:d9:a2:11:02:0c:99:95:7a:1b:78:8b:10:a9:e3:
54:c9:54:3a:d8:b4:b4:cb:92:9a:2c:9d:a5:bb:1e:4c:7f:8d:
04:49:0e:5d:ee:fc:e2:3d:05:bd:11:cf:c6:8d:da:41:48:b2:
ae:a6:2e:53:03:7b:85:e8:24:5f:fb:ce:a6:13:4a:0f:96:83:
87:77:a6:86:dd:d7:ae:18:65:e2:09:9d:b6:db:0a:7a:7b:6b:
6c:5c:7d:9e:63:77:6f:50:34:46:8d:e9:27:49:78:a2:15:a2:
51:03:17:ef:54:1f:cd:91:dd:5d:4d:52:31:54:79:8c:a2:43:
d6:16:44:d4:32:0a:34:91:1c:8b:1e:7a:5c:cc:f4:32:49:b1:
56:3d:c7:ea:b6:78:4b:a8:12:19:64:9c:1b:70:74:ca:09:f2:
97:93:da:57:2d:b8:10:17:13:61:6f:70:cd:99:a1:92:a7:e0:
83:28:a6:77:bd:85:b6:bc:42:26:e3:59:a7:26:d0:bc:c5:ec:
e6:ce:08:69:e6:1d:a9:0d:de:c0:dc:3c:a3:c4:40:27:4b:3c:
ee:ad:b5:31:4f:16:f3:bf:13:7c:16:f4:7b:89:3a:23:81:ab:
c9:db:cd:6d:70:1b:9c:4d:b0:cd:8d:6a:35:6c:58:ed:4a:41:
55:8b:f4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org