Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/whOs3Ou8xFeRf008Fa0JJ864j4w.roa
File: whOs3Ou8xFeRf008Fa0JJ864j4w.roa (raw, json)
Hash identifier: 0zmkCRZj4nXoxDnHLQAktXW2hzwrWLOUMywM786X2DU=
Subject key identifier: C2:13:AC:DC:EB:BC:C4:57:91:7F:4D:3C:15:AD:09:27:CE:B8:8F:8C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7E260E344160A7F9494446F80F2BD
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/whOs3Ou8xFeRf008Fa0JJ864j4w.roa
Signing time: Mon 02 Jan 2023 09:37:31 +0000
ROA not before: Mon 02 Jan 2023 09:37:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 109.121.36.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:e2:60:e3:44:16:0a:7f:94:94:44:6f:80:f2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c213acdcebbcc457917f4d3c15ad0927ceb88f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:4b:8c:1c:d7:bd:de:5e:4d:7e:80:9f:0f:
77:ed:c2:1c:b1:f5:7c:9f:e5:8e:8b:61:57:a3:ae:
27:11:4d:4d:c8:90:92:6c:5b:44:2b:8a:4f:84:b9:
ae:14:04:42:bb:9c:2a:ed:85:44:d2:72:dd:ea:fd:
93:7f:2c:0f:ed:8b:f9:06:28:af:28:ac:bf:9a:c4:
cf:b4:37:82:9d:af:2a:2d:2d:af:e1:7a:ee:12:46:
a3:a7:c5:77:24:21:e3:7a:b6:4d:be:74:d6:bd:04:
11:c4:f3:4f:39:1c:88:9d:54:6c:88:28:ea:bc:90:
b4:92:0a:cd:89:8f:eb:89:9e:da:4f:fc:88:21:02:
58:aa:09:ec:3e:6a:f3:98:73:29:de:53:bc:a8:2a:
e2:cd:f8:62:bf:5a:60:ae:a8:46:80:58:9b:25:6b:
fa:0f:f6:f5:ec:4b:8c:ce:d0:95:e2:c5:cd:65:6c:
0c:2a:3f:cf:4c:53:5a:91:15:21:98:8b:f9:24:36:
ec:b2:ce:2c:37:30:61:f7:66:18:4a:2a:32:5c:df:
ca:6e:90:a1:d5:7f:7e:05:08:8f:fa:78:f5:31:f3:
e1:43:a2:c3:c1:e6:a8:db:48:2e:7a:ef:0b:49:b5:
f0:da:f0:59:a0:a9:92:57:b7:d0:39:39:54:92:9b:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:AC:DC:EB:BC:C4:57:91:7F:4D:3C:15:AD:09:27:CE:B8:8F:8C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/whOs3Ou8xFeRf008Fa0JJ864j4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.36.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
55:68:54:08:d5:73:6c:05:88:9f:05:a8:c0:fa:e1:6d:cb:9b:
1f:9f:0b:b0:12:63:53:c0:2e:ea:df:45:1a:4f:d0:fe:1d:2e:
3d:51:ec:2b:f2:3b:32:61:86:44:22:ac:bf:62:66:cd:17:d3:
cc:a5:66:01:09:a4:72:61:1b:c6:82:ef:dc:49:f9:47:ec:b2:
a2:ed:7d:91:b4:3c:b4:9a:a0:13:b6:d0:d4:0d:c8:3e:6e:10:
ad:6c:b3:48:50:ff:5e:87:9c:88:9b:1b:7d:29:5b:bf:94:3a:
8a:98:3e:c9:7c:69:59:ba:01:18:43:b7:f4:1e:04:79:0a:3a:
90:3f:3f:8a:07:bc:e5:3c:a4:e2:ca:20:52:ac:ad:7b:e9:c1:
cd:f8:f6:f3:bd:70:54:41:66:fd:64:1f:9d:e2:2a:e6:7b:f5:
0f:d3:30:fe:ee:15:93:66:1d:da:de:ef:6c:df:6e:6f:94:ee:
d6:60:ab:3e:f4:7a:0d:62:e1:83:31:d7:72:3a:e2:0f:b6:af:
2e:58:20:db:37:59:08:42:3d:04:ee:7f:1c:55:63:7b:bf:99:
a3:25:57:a6:4e:3f:f3:71:4b:6f:32:01:91:be:ff:c0:70:1f:
8f:66:62:2c:2b:d8:47:fb:01:af:2e:8f:1f:c9:9a:9e:0e:12:
03:12:4a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org