Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tIx74Ha6EuO2oqZhQ9RCiW3qIYM.roa
File: tIx74Ha6EuO2oqZhQ9RCiW3qIYM.roa (raw, json)
Hash identifier: 7eS15D7yI9pQPr/0o1/5ecHgC5CeHtuQVh5zY9yIe50=
Subject key identifier: B4:8C:7B:E0:76:BA:12:E3:B6:A2:A6:61:43:D4:42:89:6D:EA:21:83
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01913257DD2D613B64257CE4017C47F7103E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tIx74Ha6EuO2oqZhQ9RCiW3qIYM.roa
Signing time: Thu 08 Aug 2024 14:15:04 +0000
ROA not before: Thu 08 Aug 2024 14:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:57:dd:2d:61:3b:64:25:7c:e4:01:7c:47:f7:10:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 8 14:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b48c7be076ba12e3b6a2a66143d442896dea2183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:4c:70:a7:60:59:d0:87:45:4d:bc:13:b5:
5e:fa:be:77:95:65:ea:9c:d0:58:e4:8c:88:78:02:
45:34:85:c7:c5:6f:81:e5:c0:06:3c:90:00:76:13:
dd:40:bb:81:0a:3e:a8:fc:fb:5b:fb:30:55:ea:f2:
7a:4b:97:6c:37:2c:7b:31:53:ba:38:69:18:ee:66:
24:fd:34:40:ec:32:00:0a:15:a2:24:8a:13:d3:24:
6d:f7:f6:d4:08:be:71:43:b2:64:af:46:40:c6:3a:
61:21:25:0f:45:a2:b3:44:38:f8:32:8d:e0:8b:04:
af:14:ea:35:f7:34:eb:80:01:f7:c6:c2:ba:91:f5:
a9:b1:52:90:c1:64:cb:90:44:d6:5a:f2:6a:72:2f:
14:56:ac:56:a9:02:2a:00:c2:2a:63:11:7c:cb:97:
a3:2e:49:5a:aa:7f:ca:ef:51:9c:9a:b4:d4:9f:72:
2d:53:4d:63:13:bb:34:a5:9c:f5:cd:07:c7:c7:d7:
fd:13:ba:cf:d5:92:fc:83:a8:cd:bd:c1:b4:49:a7:
3f:c0:8b:62:a4:11:a4:77:11:9d:01:1c:02:66:2e:
a2:08:23:d0:bb:70:94:42:0e:43:1f:9b:80:57:8c:
21:00:e4:87:16:e5:ec:c7:0f:17:f3:7f:3a:f6:a9:
35:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8C:7B:E0:76:BA:12:E3:B6:A2:A6:61:43:D4:42:89:6D:EA:21:83
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tIx74Ha6EuO2oqZhQ9RCiW3qIYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.43.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d2:05:e3:8d:f7:ea:9e:06:4a:ad:af:07:01:d1:8a:64:13:
0e:54:e9:e7:93:8b:8e:b0:29:1e:3e:d4:7e:41:32:a5:ed:dd:
35:6c:df:ce:37:39:09:6c:cd:2c:92:ce:2d:af:8d:94:f9:bb:
30:87:cb:b0:3b:47:5d:3d:bb:63:07:b0:f0:d2:16:da:07:a6:
e9:0d:6a:2c:c5:86:bf:10:22:79:b6:06:a3:db:5b:d8:2e:f1:
f8:7a:fa:80:87:c1:52:26:17:97:4d:09:4e:90:f7:66:59:82:
3a:99:dd:ee:de:86:07:98:e4:b3:99:ec:4e:5a:8c:1b:67:8c:
b9:b6:ec:a9:0e:f4:79:a0:df:a9:26:df:22:62:75:9f:2a:aa:
fa:a4:ff:7f:fe:43:3e:c7:a7:ff:dc:98:1c:49:eb:7c:1e:e3:
3b:a9:a8:15:d3:2d:50:6a:24:38:39:0a:6c:18:cd:db:82:6a:
f0:5a:9f:d3:a6:e3:a9:19:7e:4e:a9:12:50:9e:9c:0b:d1:50:
91:b4:d4:e9:b7:81:cc:d5:c8:f8:de:f5:34:d2:aa:e0:13:5d:
8b:13:bf:5b:e7:d9:ae:de:a4:44:17:8c:7e:98:54:64:f9:ba:
d8:46:23:ff:99:ec:39:fb:ed:07:87:35:21:ee:a8:8d:b0:f2:
d8:fd:5c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:06 2025 by rpki-client