Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/1-CGWN1FmA-TY3d-61S0eqeXHb0k.roa
File: 1-CGWN1FmA-TY3d-61S0eqeXHb0k.roa (raw, json)
Hash identifier: eNk77BZzOb/aRyPspAjhEa77CqqM2tXRfrv3GHxmfnE=
Subject key identifier: F8:21:96:37:51:66:03:E4:D8:DD:DF:BA:D5:2D:1E:A9:E5:C7:6F:49
Certificate issuer: /CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Certificate serial: 018C2635AF157456BBC9EA8B760F6447D2AE
Authority key identifier: 87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/1-CGWN1FmA-TY3d-61S0eqeXHb0k.roa
Signing time: Fri 01 Dec 2023 16:28:21 +0000
ROA not before: Fri 01 Dec 2023 16:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16589
IP address blocks: 84.238.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:35:af:15:74:56:bb:c9:ea:8b:76:0f:64:47:d2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Validity
Not Before: Dec 1 16:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8219637516603e4d8dddfbad52d1ea9e5c76f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:a6:33:cc:68:43:d5:b7:54:2e:5e:c8:85:
91:f0:5b:74:e9:01:4a:2c:b7:c0:55:bc:03:3f:86:
b9:21:e5:f8:a6:66:a9:1d:5d:60:db:96:3e:fd:be:
ff:70:4a:da:73:58:70:fa:a7:1c:a5:5f:e9:fc:88:
8e:75:bc:14:59:ee:14:9b:8d:60:2a:99:40:92:dc:
6d:fe:a2:22:9f:a9:61:a2:87:d1:5b:93:5b:e3:65:
5e:43:fc:c5:52:1b:4e:02:5f:b8:5f:05:10:50:9c:
3e:90:c3:98:b8:67:9f:e8:1a:77:a2:dd:cb:8a:28:
c6:e6:08:35:10:df:ce:07:eb:5e:fd:09:ed:33:be:
0f:a5:dc:fd:cf:f7:16:fc:8b:79:73:21:29:80:80:
f4:e7:5f:a7:14:6d:94:18:bd:1b:ad:fa:9a:1b:cb:
ed:75:2a:c2:e6:87:0d:cd:5c:2f:aa:d2:08:c0:4a:
a7:72:dc:74:c9:bf:b9:a7:4a:71:8f:ca:18:83:13:
e8:b4:01:db:4b:4e:3d:90:3f:3a:04:92:4a:c3:20:
a9:6a:10:37:bf:1a:67:a6:ba:2f:39:3c:4f:01:eb:
47:b6:0a:ee:80:3b:c7:24:95:91:96:24:1d:d0:b6:
d2:c9:4c:6b:d4:1a:2a:d3:73:f8:06:43:eb:b2:ff:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:21:96:37:51:66:03:E4:D8:DD:DF:BA:D5:2D:1E:A9:E5:C7:6F:49
X509v3 Authority Key Identifier:
keyid:87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/1-CGWN1FmA-TY3d-61S0eqeXHb0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.238.132.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:6a:5c:d5:04:96:35:7c:23:a9:ca:ec:2d:e4:22:1e:98:a9:
b1:93:62:41:8b:e5:e5:6f:f5:14:9c:b3:73:e6:33:a9:6b:70:
99:08:0a:42:14:8e:cc:e3:5c:f5:87:b4:19:81:f2:77:b4:d4:
a7:87:20:7a:06:3b:e5:7d:b5:e0:f5:99:50:35:7d:8f:06:65:
e0:e3:48:79:8a:fc:9d:5d:04:8a:13:d6:0e:6d:f1:13:69:00:
6e:cd:a6:e5:c5:ee:fb:ec:c8:f1:4c:d7:a1:26:8d:e2:97:0b:
5f:29:50:24:2b:1f:11:23:4f:7d:75:b4:fa:e1:49:84:93:fe:
06:bb:74:aa:5e:ca:03:8f:02:e0:9a:a3:30:50:71:4a:10:fb:
88:52:df:b7:6c:70:aa:e9:5f:37:1a:9a:99:56:a9:43:70:23:
20:9a:7e:a7:fe:3a:07:9f:5a:70:68:d0:d7:4b:cc:06:92:27:
9a:a7:f4:fa:04:d5:11:63:a0:8c:a9:20:72:fe:7d:29:b8:eb:
97:d9:86:fd:95:78:89:5d:7f:82:3e:f5:c3:95:76:6c:71:98:
91:e7:63:bb:44:ae:77:76:14:f7:7c:44:9a:fa:da:41:b6:a6:
b9:91:ea:bf:37:87:0c:55:df:27:dc:f9:ca:5f:6b:60:d5:61:
66:18:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:49 2024 by rpki-client on console-ams.rpki-client.org