Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/S7w8fWfKJNkzwI9pr8KD3BVjcS0.roa
File: S7w8fWfKJNkzwI9pr8KD3BVjcS0.roa (raw, json)
Hash identifier: tbb/h/ZC5000F78tNAZHy0YnwkDAEG/jUavZaXf02Ps=
Subject key identifier: 4B:BC:3C:7D:67:CA:24:D9:33:C0:8F:69:AF:C2:83:DC:15:63:71:2D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188F91A18F38F228D1BDB3EF94F5A904755
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/S7w8fWfKJNkzwI9pr8KD3BVjcS0.roa
Signing time: Mon 26 Jun 2023 19:06:57 +0000
ROA not before: Mon 26 Jun 2023 19:06:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.32.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f9:1a:18:f3:8f:22:8d:1b:db:3e:f9:4f:5a:90:47:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 26 19:06:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bbc3c7d67ca24d933c08f69afc283dc1563712d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:83:0f:dd:9a:7a:bf:c7:16:ea:73:e1:81:
ed:fd:27:f9:7b:87:7d:8d:8d:94:5f:4c:9e:59:18:
ed:ad:38:65:c3:3e:bc:a0:6c:3b:b6:fa:a6:40:c9:
b8:21:bd:a4:e3:ac:c3:39:2b:93:fa:fd:4d:b2:ad:
64:f2:6b:f1:53:8e:41:a0:18:e5:7b:24:8f:1a:c4:
61:9c:72:d4:a6:6e:be:1f:64:cd:36:47:07:51:19:
33:ec:b3:e0:67:a4:c9:d0:36:8f:0e:a0:dd:c0:d3:
aa:b7:6a:e3:9d:e3:4f:f9:e1:bb:95:39:8c:2b:41:
64:02:a5:97:2c:4b:10:22:c7:0b:d4:39:aa:43:96:
c0:d3:ad:54:ab:4b:5f:93:ca:b0:95:b5:56:b8:a1:
40:32:da:7b:8c:ca:29:ff:6e:25:07:1c:cf:d6:50:
96:22:8e:94:32:a0:05:90:0f:7d:0b:29:83:d0:70:
f3:9e:ac:30:f6:88:31:a5:46:2a:1b:8c:89:3b:f8:
e3:63:cb:da:97:b7:08:81:54:97:6f:6e:31:d1:d1:
59:44:f3:b3:5b:22:02:40:1b:72:92:74:c2:dd:1a:
cd:15:8a:fd:c5:89:74:b4:00:bc:3a:d6:f8:70:11:
b7:80:5a:70:d4:ad:37:a3:60:15:ab:27:7f:db:d4:
42:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BC:3C:7D:67:CA:24:D9:33:C0:8F:69:AF:C2:83:DC:15:63:71:2D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/S7w8fWfKJNkzwI9pr8KD3BVjcS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.32.0/24
109.121.41.0/24
109.121.44.0/24
109.121.46.0/24
188.255.134.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
18:8e:49:5a:d2:cc:0c:91:b6:0d:f9:c0:f7:8c:d9:3f:25:d6:
c0:f1:29:9e:86:f5:97:37:5d:57:d8:b5:b4:12:c7:cb:8a:74:
59:d9:8e:f9:19:17:4a:5c:ab:40:83:8a:b1:73:b2:99:63:ea:
da:53:86:24:c7:e1:63:c5:26:de:9c:41:e6:56:8e:24:1f:1e:
11:76:ba:c1:85:37:88:8e:ba:2c:2c:52:c4:e4:93:d7:09:07:
c5:ee:1c:c2:00:ae:49:f4:df:0e:43:89:b6:c3:a0:ca:12:e2:
e1:54:85:d0:7f:ab:a0:8e:54:1e:0f:21:93:e8:91:4a:8a:6f:
67:4b:38:ec:09:23:ab:dd:08:d0:b2:ae:59:a8:78:89:d1:5e:
18:3d:3e:64:6b:d6:9b:2b:25:7d:3b:c1:a7:50:5b:43:29:67:
50:1c:73:79:f1:b4:de:f4:ea:b5:21:3c:b1:38:df:e0:04:04:
10:d4:af:46:6b:59:01:b1:35:c1:8c:b5:3a:61:80:ab:22:19:
6f:47:c2:e2:2c:b9:41:18:db:fc:ea:f1:7f:e1:4d:46:ed:bf:
3e:6a:ff:fd:bb:26:b9:11:b8:29:81:c7:13:b7:8a:7a:2a:64:
ee:13:ec:a7:ce:87:13:16:db:0a:b9:34:6a:60:9c:f2:c1:a0:
e6:30:48:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:58 2023 by rpki-client on console.sobornost.net