Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lrGoZWWv_bEbQnYMWeFiiHqYNxg.roa
File: lrGoZWWv_bEbQnYMWeFiiHqYNxg.roa (raw, json)
Hash identifier: +VmDGQ/n0qtoDUvHd4oPslrgliYt5crpY9qWYH9tPXA=
Subject key identifier: 96:B1:A8:65:65:AF:FD:B1:1B:42:76:0C:59:E1:62:88:7A:98:37:18
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01890E17A7EDC2DE4110C96DC5A6B2024D36
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lrGoZWWv_bEbQnYMWeFiiHqYNxg.roa
Signing time: Fri 30 Jun 2023 20:56:18 +0000
ROA not before: Fri 30 Jun 2023 20:56:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.35.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0e:17:a7:ed:c2:de:41:10:c9:6d:c5:a6:b2:02:4d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 30 20:56:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96b1a86565affdb11b42760c59e162887a983718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:2b:e1:59:94:76:fb:d4:51:75:de:82:26:
ac:e8:0e:6a:c3:dd:95:bb:4f:77:90:85:ee:ab:a7:
26:5a:38:0b:92:dc:63:e3:f4:fc:b5:29:61:c5:5a:
72:17:b6:fc:1c:ff:29:81:50:e6:84:98:a8:43:73:
85:a6:e4:15:1a:f2:38:f7:10:57:15:dc:68:17:01:
4a:11:0d:b1:87:43:c0:01:23:f1:d4:43:c6:92:28:
54:bf:76:ae:d3:b0:44:95:10:6e:80:31:04:8c:3c:
57:44:9b:f1:5b:cc:1e:84:31:5b:d5:21:94:8e:82:
c6:40:03:f6:46:52:25:64:c9:3d:73:7b:17:b1:57:
12:da:10:ba:e9:4b:2b:0d:3d:fc:03:a8:e1:0a:3e:
66:d0:ec:1a:9d:90:f4:20:9d:84:d4:eb:6f:9d:48:
4a:c2:26:7f:15:53:e7:10:3e:d0:92:f4:70:56:85:
df:6a:33:3a:6d:7a:c6:2c:c6:1e:b0:3c:d6:2c:aa:
5a:72:09:b4:9d:49:0b:23:0c:0d:4d:42:c4:8e:dd:
19:c8:6a:20:8d:1c:bb:23:26:90:01:39:8a:59:6f:
c4:d1:d5:15:69:48:27:51:f6:44:ba:16:9b:ce:0e:
39:38:e5:f2:d9:91:f1:4c:1c:ba:c5:b8:72:1e:52:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B1:A8:65:65:AF:FD:B1:1B:42:76:0C:59:E1:62:88:7A:98:37:18
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lrGoZWWv_bEbQnYMWeFiiHqYNxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
109.121.35.0/24
109.121.43.0/24
188.255.134.0/24
Signature Algorithm: sha256WithRSAEncryption
55:29:f6:fb:27:f2:40:08:3b:fb:b3:2f:db:94:4c:73:ae:65:
9d:6e:88:52:53:c8:47:0f:e4:da:60:55:d1:2d:84:ae:c8:00:
de:51:5f:2b:61:ca:42:56:37:7c:21:ca:e7:61:d0:e3:55:d1:
09:58:80:1d:47:47:d5:7b:b6:21:11:1f:17:98:54:dd:de:ae:
d2:b9:a2:f1:87:3c:fc:4b:79:cb:e3:bf:45:03:b5:97:1f:d3:
f4:96:8c:cb:1c:e2:3b:35:9e:80:33:25:44:31:c4:e9:19:72:
31:fc:fd:c2:b1:6a:4d:da:61:b5:fd:ce:ff:64:ca:81:24:45:
37:62:ae:a9:70:8c:7e:12:d9:32:b2:0e:0a:43:33:35:81:0b:
48:bd:24:50:99:34:c8:70:c4:92:93:a7:fd:12:1b:38:18:ca:
ff:88:2c:38:c1:2a:7e:bb:74:81:d7:33:27:b3:8f:27:b7:71:
2b:08:50:cd:dd:d4:8e:a4:d0:c8:53:2b:45:ef:91:45:1b:5f:
f9:f4:2b:21:b5:4c:72:ed:5b:4d:d0:9d:85:bb:15:ad:6f:58:
6c:0f:81:45:45:e7:f3:c4:1c:f0:3c:75:c1:15:82:80:2f:05:
cc:5b:da:f2:65:7e:b7:e9:c0:23:2e:58:f6:db:e2:12:a5:3b:
e3:e4:28:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:59 2023 by rpki-client on console.sobornost.net