Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/7WIkcO9xZasPlBU6pcVcBeKVgS8.roa
File: 7WIkcO9xZasPlBU6pcVcBeKVgS8.roa (raw, json)
Hash identifier: 7bqwoVJX0Y2FQ4we9c/gNZER8ZsqkeOP8zEqsVpFhbs=
Subject key identifier: ED:62:24:70:EF:71:65:AB:0F:94:15:3A:A5:C5:5C:05:E2:95:81:2F
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE66199A8E8BA0609645B78DE2A1202
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/7WIkcO9xZasPlBU6pcVcBeKVgS8.roa
Signing time: Sun 01 Jan 2023 10:35:15 +0000
ROA not before: Sun 01 Jan 2023 10:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196738
IP address blocks: 84.40.81.0/24 maxlen: 24
95.87.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:61:99:a8:e8:ba:06:09:64:5b:78:de:2a:12:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed622470ef7165ab0f94153aa5c55c05e295812f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:35:9d:63:3b:92:69:5d:24:35:68:d6:ea:08:
6f:5b:6d:08:f8:c4:df:1f:55:83:1e:13:6b:72:3e:
5b:22:30:6c:ac:45:b5:5a:be:f1:b2:c0:8d:65:c6:
1b:47:39:94:ff:b2:9e:3e:f8:b2:26:d9:de:d5:4b:
df:a8:45:b9:fe:6d:a6:66:05:3f:b0:20:07:13:7b:
0a:21:44:0a:18:66:56:35:cf:11:0c:5a:92:1d:17:
02:88:6c:3d:f9:fc:da:08:ea:de:da:2b:59:19:f3:
0a:ed:b2:ed:45:82:4d:01:57:fa:7d:79:94:52:66:
27:f4:8d:87:75:fc:bb:a6:7e:52:cf:8c:f3:4b:d2:
0b:27:f6:f8:c5:db:07:63:08:27:9b:d5:54:44:c5:
07:1d:b4:76:7b:59:51:99:92:a7:6d:05:bd:42:a8:
f1:7e:d3:99:a6:3a:f7:71:77:8c:ac:a9:fe:38:df:
da:6b:e4:21:0a:80:b1:0b:18:98:80:cc:19:e0:7e:
16:98:57:b9:9f:59:28:53:6d:1c:8b:d7:39:cc:ac:
ac:94:f5:6b:6f:70:18:3a:b4:cf:ab:55:39:1d:4c:
5c:d9:73:09:2c:0c:51:d0:c6:70:a4:bf:dd:50:e7:
c4:4d:e1:72:ad:f7:d8:77:bd:6f:3e:15:0b:d2:ed:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:62:24:70:EF:71:65:AB:0F:94:15:3A:A5:C5:5C:05:E2:95:81:2F
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/7WIkcO9xZasPlBU6pcVcBeKVgS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.81.0/24
95.87.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:bd:4d:c4:68:59:93:97:56:13:78:d5:ac:3a:9a:22:03:45:
ca:51:2a:38:78:ec:f2:2a:f2:f7:85:6b:d0:54:ff:a6:8d:11:
5f:f8:ea:9e:6a:1c:89:e0:dd:fc:d5:db:79:18:d7:26:de:4a:
1a:4c:b5:9c:fa:91:5f:9d:66:83:ee:ef:75:d1:0b:fe:55:ad:
f7:28:9d:5a:0e:4b:65:83:7f:29:01:de:c8:03:f7:d8:8b:d2:
64:a1:13:be:58:b6:f0:24:24:23:75:99:f3:94:d0:4c:0c:3d:
54:95:1e:4b:51:68:1d:5f:53:36:7e:a4:36:44:e4:49:9e:bb:
b8:0a:5e:e5:11:ae:11:38:6e:05:55:94:9c:03:84:98:a9:be:
fa:55:57:72:ab:99:a6:13:58:ff:a0:e5:3b:17:85:be:10:bf:
42:4e:75:f2:14:1c:59:11:c1:a0:ba:82:01:e8:18:c1:f8:60:
57:04:7d:40:5f:8b:52:ec:40:dc:37:e2:ae:6f:bd:9e:8a:f0:
19:cd:41:c3:86:84:7c:dc:2e:ff:e4:69:27:47:8f:3d:d0:1f:
56:fe:c9:34:97:f1:b5:e2:e2:55:52:b8:3b:7e:06:24:2e:5e:
6a:9b:9f:6b:a1:3e:24:19:17:80:5b:a7:ca:79:b0:48:7b:ca:
a1:c0:72:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org