Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/s_Wyl8Z6nf1UVgNI7oOjSzNU9vs.roa
File: s_Wyl8Z6nf1UVgNI7oOjSzNU9vs.roa (raw, json)
Hash identifier: FNGtxZXFOySURodOdEyeSNhGPt4iQDJ/7WF8Yk1WgrY=
Subject key identifier: B3:F5:B2:97:C6:7A:9D:FD:54:56:03:48:EE:83:A3:4B:33:54:F6:FB
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE66A1F0CC0F26ABD585BE7C0B7F976
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/s_Wyl8Z6nf1UVgNI7oOjSzNU9vs.roa
Signing time: Sun 01 Jan 2023 10:35:17 +0000
ROA not before: Sun 01 Jan 2023 10:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201583
IP address blocks: 84.40.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:6a:1f:0c:c0:f2:6a:bd:58:5b:e7:c0:b7:f9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3f5b297c67a9dfd54560348ee83a34b3354f6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:14:8a:91:20:a3:33:ea:e0:f9:49:0e:5e:
1c:dd:25:10:e7:a9:bb:03:3d:70:0e:66:07:fe:84:
df:f4:f8:73:01:bb:ae:ca:61:80:b8:57:d1:a1:0e:
c4:ca:65:3d:4f:b6:e5:6d:4e:0a:b8:13:73:6d:11:
50:06:d0:8a:c3:00:0b:1c:29:ee:e7:cb:9e:5a:94:
b5:0e:7c:5c:d2:ae:c5:cd:00:ce:47:22:ce:11:68:
91:ea:a8:e4:db:d6:19:b2:fd:d9:63:ed:c9:4d:75:
a5:90:b0:54:9d:6a:00:2c:7e:db:ad:87:37:db:9e:
93:61:92:ac:4b:f1:e0:dd:83:8b:be:de:6a:09:10:
ad:e4:5c:8f:28:3f:1f:ac:53:26:96:c8:86:21:9e:
4d:67:3b:bb:b0:bd:71:e3:b6:5d:e2:db:d5:9e:4d:
8f:3d:4b:65:87:94:7a:aa:7e:10:06:e6:07:9f:ae:
ac:1f:25:07:89:80:8a:b4:d9:f4:fc:10:5c:71:21:
4c:a5:77:e5:cc:44:55:cf:26:89:c1:ac:c5:39:46:
1c:3f:31:79:cb:8d:d1:77:43:20:71:d8:18:4e:ec:
58:0c:4e:27:a6:17:66:9d:28:8d:6a:57:f5:b5:bb:
be:71:c9:31:ab:23:2e:85:2d:de:61:bf:ab:71:5e:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F5:B2:97:C6:7A:9D:FD:54:56:03:48:EE:83:A3:4B:33:54:F6:FB
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/s_Wyl8Z6nf1UVgNI7oOjSzNU9vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.114.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:0c:46:a6:7d:24:5b:d2:dc:47:3a:77:65:66:62:95:7c:a2:
e9:e3:d1:9c:20:c5:a3:80:2f:e3:05:0b:4b:6e:fa:d8:66:cd:
df:94:d7:da:7a:81:e6:6f:1a:b2:4f:50:d6:12:09:88:30:3e:
5f:5e:69:32:35:f2:9c:2a:c3:13:f4:d2:7b:22:4f:41:b0:f5:
d3:8c:19:f2:26:a5:ec:00:5b:51:5c:60:b1:3e:17:5f:aa:00:
79:c4:12:68:97:56:aa:5c:72:91:06:0c:47:2b:7a:ec:f3:cb:
3f:bf:15:19:09:55:0d:cc:9a:29:0d:91:6b:14:a7:15:23:6f:
53:de:56:2f:1c:19:91:25:3d:32:30:f5:4d:a4:0e:b0:c1:bd:
15:8c:a7:bc:2d:27:9f:88:2c:8d:8e:4d:e7:94:e4:77:eb:4c:
4c:c6:ab:18:64:bc:bb:5f:28:56:e4:47:5e:d5:aa:a6:8d:da:
6c:38:f1:b1:3e:ad:4c:42:24:f4:a4:30:04:97:8f:15:27:44:
4f:dc:e1:e1:9b:13:f1:d3:1d:39:aa:e6:18:87:12:6b:fa:84:
15:ac:e0:2a:32:ca:bb:06:e8:31:2b:08:55:bd:37:19:8a:7e:
ae:08:fd:4e:28:32:cc:c2:c7:57:ef:12:26:e7:fa:44:56:75:
65:4c:7a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:05 2024 by rpki-client on console-fra.rpki-client.org