Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kgIx59PiEp2OkcJvoc7M6dA-Uj0.roa
File: kgIx59PiEp2OkcJvoc7M6dA-Uj0.roa (raw, json)
Hash identifier: mHBn4YgHYOKVx3kSCS+14qWBc/93bI7VeyTageqNkH8=
Subject key identifier: 92:02:31:E7:D3:E2:12:9D:8E:91:C2:6F:A1:CE:CC:E9:D0:3E:52:3D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188F91B03E4FDFDE92C1BEBEC041A833E09
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kgIx59PiEp2OkcJvoc7M6dA-Uj0.roa
Signing time: Mon 26 Jun 2023 19:07:57 +0000
ROA not before: Mon 26 Jun 2023 19:07:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.35.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f9:1b:03:e4:fd:fd:e9:2c:1b:eb:ec:04:1a:83:3e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 26 19:07:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=920231e7d3e2129d8e91c26fa1cecce9d03e523d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:fe:62:50:b3:9e:e9:31:cd:5e:db:11:72:
e7:94:e9:6b:8f:96:49:25:c4:c5:b0:84:4f:9e:19:
96:85:f9:66:2b:a9:28:1e:d0:17:1a:06:7f:3d:b5:
7d:de:da:91:97:40:6e:79:d5:46:62:5f:ae:fc:4b:
5c:a0:ff:28:68:d8:78:b5:b0:50:82:3a:69:95:c1:
63:4a:db:78:ca:ee:b1:a6:fb:b0:34:59:37:33:bf:
5e:8c:f4:b7:ad:aa:cd:10:a0:ba:db:b0:c7:c8:d9:
ed:7a:36:5d:c5:eb:3a:63:60:0c:f8:85:25:0b:5f:
44:46:95:67:8c:92:2f:16:ca:a0:ac:4e:ae:45:b9:
34:1b:9a:39:0a:82:5e:25:1e:ea:a4:a0:99:e2:af:
94:1d:05:93:80:81:ac:17:1c:8f:fd:32:50:2b:5f:
df:b8:09:93:d5:75:4a:c8:69:24:b6:12:a5:16:be:
55:fd:8c:19:80:3c:61:94:12:ee:bd:4d:38:5d:42:
0b:03:c8:b1:95:6e:06:93:58:98:89:87:a8:13:9a:
f9:07:db:8f:83:87:10:58:17:a2:b3:03:8e:11:0d:
1e:e3:49:e8:f9:36:ce:25:07:a7:16:39:7b:95:03:
f8:b4:5c:e4:43:09:cc:73:a6:c9:92:c6:f4:49:9a:
08:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:31:E7:D3:E2:12:9D:8E:91:C2:6F:A1:CE:CC:E9:D0:3E:52:3D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kgIx59PiEp2OkcJvoc7M6dA-Uj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
79.175.67.0/24
109.121.35.0/24
109.121.43.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1e:a3:4d:79:6d:62:63:95:55:38:d1:d2:47:8b:00:f0:04:
5e:17:a3:59:88:cd:5c:e1:27:74:e3:dd:ad:a5:b1:5d:e0:85:
38:64:8a:23:00:97:03:89:16:0d:3a:81:d9:ce:41:0a:76:cb:
2d:b4:90:52:b5:2e:7b:22:22:48:4f:3a:a2:29:0b:9e:18:ce:
61:ff:99:07:d7:45:65:fc:a1:f8:19:4b:8d:6b:f6:11:e1:af:
ca:10:98:6f:02:97:4e:21:2a:b0:1b:aa:ef:23:ce:60:85:99:
e6:5b:3c:d5:a8:08:6c:f4:d2:12:31:a2:ba:ab:74:ab:57:18:
1b:33:9b:29:fb:94:41:75:21:61:61:4f:86:65:44:35:e3:98:
58:42:8f:b3:c2:77:fe:9c:95:cd:a5:98:8f:6b:27:94:de:a5:
47:d6:74:18:22:95:16:0d:ed:5b:84:76:ab:64:fa:fc:7a:a4:
79:80:86:40:4b:38:68:ed:45:3a:75:e3:15:f5:8f:bb:da:b9:
41:db:72:58:c8:17:dd:dd:34:a3:3e:c8:f8:ec:69:f7:7c:4c:
b2:a4:63:e2:10:8c:43:f3:fd:f3:a7:9e:fe:fb:ec:de:2a:bf:
7b:dc:d0:a2:59:6e:22:db:0a:9e:45:d8:38:53:09:57:16:b4:
7c:6d:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:59 2023 by rpki-client on console.sobornost.net