Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/sTJIGzCPZgMymf5v5R5X4cRB4lQ.roa
File: sTJIGzCPZgMymf5v5R5X4cRB4lQ.roa (raw, json)
Hash identifier: A4wH0TJnsHN4pleiOi3KT1jwvLFdphNBe1T0dZIqyT4=
Subject key identifier: B1:32:48:1B:30:8F:66:03:32:99:FE:6F:E5:1E:57:E1:C4:41:E2:54
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018746422CC7488F91AC884A2D1D29777C14
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/sTJIGzCPZgMymf5v5R5X4cRB4lQ.roa
Signing time: Mon 03 Apr 2023 08:35:54 +0000
ROA not before: Mon 03 Apr 2023 08:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 16:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:42:2c:c7:48:8f:91:ac:88:4a:2d:1d:29:77:7c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 3 08:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b132481b308f66033299fe6fe51e57e1c441e254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:15:c4:3a:50:0c:26:0b:39:d8:17:5b:01:ea:
48:fa:a3:e9:7a:11:36:a5:eb:3f:76:30:ab:ba:ce:
5c:42:aa:4d:4b:75:1d:56:dc:d9:1c:f3:9c:f0:a6:
41:34:f9:27:5c:97:b0:59:a4:c2:83:da:09:3e:42:
2b:6e:05:8a:f6:d5:50:87:48:b0:22:2e:84:5d:10:
f9:15:d4:34:a4:fe:2d:1d:ec:a8:93:90:5d:81:65:
6d:80:71:8d:54:5f:71:c6:99:88:79:80:ec:a0:26:
05:03:b8:8e:2f:cd:2c:84:7e:c6:1b:56:d4:0f:6b:
78:ff:d9:dd:46:51:e4:c5:33:14:fe:45:bb:70:64:
ba:4f:ff:75:79:93:18:bc:c2:b7:35:5b:ad:41:b7:
5c:6e:fb:5e:16:fe:eb:52:f1:3e:ac:f8:eb:92:a0:
6b:37:dd:1f:9a:8a:6d:31:67:21:92:f7:27:0c:4f:
e7:4d:76:72:ee:4f:f9:7b:e8:1c:a8:7d:a5:b8:07:
c6:57:5c:92:fe:07:66:23:d8:cc:a0:04:d1:62:59:
6c:2a:4c:96:ec:cc:54:00:0d:3f:d5:27:87:1c:12:
d6:a2:12:31:2b:5d:ef:7e:51:3a:6f:12:54:7b:db:
31:99:05:ae:ec:5a:78:83:03:39:72:4a:0c:e7:93:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:48:1B:30:8F:66:03:32:99:FE:6F:E5:1E:57:E1:C4:41:E2:54
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/sTJIGzCPZgMymf5v5R5X4cRB4lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.40.0/24
Signature Algorithm: sha256WithRSAEncryption
45:48:2d:0f:9a:d8:7b:3a:cb:86:51:58:e3:cd:ce:e5:63:e0:
17:23:37:d4:08:00:d4:24:8b:f3:c2:4b:6e:dd:32:e3:9b:27:
26:fc:8c:17:3e:95:39:27:eb:bf:f0:63:42:79:40:89:36:ae:
74:41:8e:b2:0f:7b:d7:03:28:fd:34:05:cd:fd:58:d3:f4:c0:
0e:1b:c2:45:a9:e9:be:eb:e2:4d:3a:76:ff:e6:65:44:c7:3d:
7e:ec:11:a4:26:20:a1:fd:00:3f:b5:66:6b:ec:b0:31:46:66:
d5:8e:2c:2b:f8:b1:c3:c5:48:24:f0:64:e7:90:f0:ef:1f:0a:
39:0f:f6:70:0e:6f:0c:0d:ed:d3:19:1c:e2:fe:2f:98:9d:5f:
2d:93:c6:d8:92:1a:13:68:8a:a1:64:75:ec:fd:93:b9:f7:22:
34:cb:cd:13:12:2d:50:29:06:32:a1:d8:73:ec:3d:85:f0:d7:
11:13:a2:64:0e:af:9f:70:a0:c7:ae:66:96:34:23:8f:20:be:
7c:04:cd:b7:11:3e:33:47:de:8e:db:f6:aa:71:51:0e:6e:85:
97:0d:1f:0d:87:40:61:ae:26:ae:08:84:29:cf:e9:cc:d5:d8:
f9:47:6a:d1:58:ed:cb:5d:72:50:4a:f8:b3:37:85:75:b8:ac:
fd:f2:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org