Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/0sKpTH5HyVhQNX2uDoQMOhNG3Bs.roa
File: 0sKpTH5HyVhQNX2uDoQMOhNG3Bs.roa (raw, json)
Hash identifier: I1/VwvqgkIkrexzitXPifeFH6n0KMwZWA27D7QBoCnw=
Subject key identifier: D2:C2:A9:4C:7E:47:C9:58:50:35:7D:AE:0E:84:0C:3A:13:46:DC:1B
Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial: 0186E93B10282E46DF161CBF862CA4BFD160
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/0sKpTH5HyVhQNX2uDoQMOhNG3Bs.roa
Signing time: Thu 16 Mar 2023 07:03:27 +0000
ROA not before: Thu 16 Mar 2023 07:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48940
IP address blocks: 84.23.46.0/23 maxlen: 32
84.23.51.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 02 Oct 2023 18:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:3b:10:28:2e:46:df:16:1c:bf:86:2c:a4:bf:d1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Validity
Not Before: Mar 16 07:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2c2a94c7e47c95850357dae0e840c3a1346dc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:88:07:a1:a0:65:b7:e3:d0:27:4d:1f:3f:
f2:f5:94:b1:a5:1b:7b:89:26:03:ea:4b:56:f8:bb:
58:84:28:7b:29:95:f3:97:9a:de:e9:78:da:07:27:
b2:1e:f8:94:79:df:e6:84:1b:7b:d8:45:5b:37:91:
32:6f:c7:fd:21:3e:00:bd:c7:38:82:8c:30:48:2d:
75:7b:bc:9d:7b:ff:9b:d3:6c:cb:52:0a:30:1f:2d:
00:76:d6:8a:5f:9a:98:79:45:06:27:a5:6e:3f:b9:
e9:93:16:82:ec:6b:3f:73:bb:64:84:00:e8:06:c7:
6e:dd:7c:08:f3:fb:5c:16:55:5f:f4:91:29:26:a6:
ea:b2:15:1e:e1:cd:21:1a:89:12:3f:14:3a:06:33:
9d:73:68:db:a8:30:6c:cb:92:f0:c4:49:f6:3e:f7:
4e:52:b3:49:74:16:ff:9f:c1:eb:ec:fe:4d:28:cb:
8e:4a:3b:68:aa:9c:3d:a6:40:e4:c6:37:fe:58:fc:
e0:3a:b1:85:67:49:2f:7f:c5:1d:6d:c5:30:00:80:
4e:bd:f2:30:5b:62:72:5a:f9:99:0f:a3:94:b2:58:
52:5d:24:5a:1c:81:4a:6f:3f:ea:ba:2f:8d:08:4c:
ed:cc:13:e2:1d:bf:63:b2:94:d5:8d:1a:0a:1a:70:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C2:A9:4C:7E:47:C9:58:50:35:7D:AE:0E:84:0C:3A:13:46:DC:1B
X509v3 Authority Key Identifier:
keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/0sKpTH5HyVhQNX2uDoQMOhNG3Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.23.46.0/23
84.23.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d5:ec:a7:cb:55:5c:05:45:24:3c:02:ed:11:44:30:37:f8:
6b:0e:8a:2d:6d:61:4b:5d:fe:11:1c:7e:26:56:53:6f:96:eb:
3c:21:05:37:13:05:7a:64:ab:60:01:05:11:a8:1a:b0:02:d6:
63:78:69:71:46:f3:16:79:17:e4:14:70:3b:cd:d4:56:dc:9c:
31:ef:da:92:10:94:b5:7f:de:a7:65:1a:ec:23:51:6d:45:3e:
cc:cb:56:d5:d2:a8:86:9b:25:bf:9b:f9:7e:ca:3e:a3:29:cd:
cc:ac:1c:09:f8:2b:af:3e:cd:d1:b1:57:8b:3c:41:4f:a3:a6:
4a:00:f5:24:39:09:71:a4:a0:5f:23:cb:07:80:63:0c:62:1e:
28:3b:d7:df:b2:db:09:e9:68:56:26:06:15:66:eb:6e:c4:88:
dd:0f:82:35:1d:56:c8:d7:4f:52:c8:ba:2c:a7:c7:68:72:d0:
56:a1:71:08:ec:bb:f1:9e:47:45:92:a6:c6:0a:7d:25:6e:72:
ec:20:49:a1:c0:7d:e3:0c:f6:8a:2e:52:1d:98:11:4f:9e:62:
d6:a6:80:fa:d2:c7:94:ac:af:d3:92:e9:1e:15:48:b4:0a:11:
eb:1c:9f:eb:c7:71:c6:54:50:22:9b:49:ce:15:77:40:b6:35:
2a:19:fd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:46 2024 by rpki-client on console-ams.rpki-client.org