Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/mjqPGlK7cLYpvPQvuzOn5fFMxsM.roa
File: mjqPGlK7cLYpvPQvuzOn5fFMxsM.roa (raw, json)
Hash identifier: oUJVN+JR6XrWBoMO5bvR/1xc8+4iuS7jaJQvcAERZYg=
Subject key identifier: 9A:3A:8F:1A:52:BB:70:B6:29:BC:F4:2F:BB:33:A7:E5:F1:4C:C6:C3
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0191DE50963BAD520CB73786373138CD3738
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/mjqPGlK7cLYpvPQvuzOn5fFMxsM.roa
Signing time: Tue 10 Sep 2024 23:41:48 +0000
ROA not before: Tue 10 Sep 2024 23:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.247.59.0/24 maxlen: 24
188.241.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 23:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:de:50:96:3b:ad:52:0c:b7:37:86:37:31:38:cd:37:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Sep 10 23:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a3a8f1a52bb70b629bcf42fbb33a7e5f14cc6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:db:0b:e0:04:69:cf:3c:d3:59:8b:bd:e2:
da:62:5f:1b:bb:c2:54:34:08:1f:ed:3c:a8:6c:a0:
9d:f0:c1:6f:76:13:62:a4:0a:61:50:24:82:b2:db:
1c:35:2f:12:8c:97:f3:34:8d:03:e1:56:7d:b6:3b:
4e:68:35:26:cc:ef:47:2d:40:c6:2f:ce:83:ee:6a:
ba:d4:d1:a3:6c:d5:a1:e0:dd:55:ad:1e:f7:64:09:
1c:03:b0:ee:9c:5e:49:0a:1f:88:fa:c9:4e:d4:56:
f5:50:2f:10:fd:5f:27:b5:55:af:55:46:42:08:b5:
d6:68:8f:60:d7:2e:e5:58:4c:53:9a:24:ea:e7:d9:
4a:02:bc:8f:bb:d5:51:d2:28:79:c4:0f:ba:cd:b2:
a9:0b:16:e9:9e:dd:87:5e:17:bc:1c:ad:f7:ff:32:
24:62:66:23:5c:93:77:0a:ea:ae:65:a3:20:b0:b4:
73:dd:63:27:a7:e9:83:51:af:63:ce:26:aa:3d:70:
de:7e:58:27:4e:9e:18:ce:30:79:c5:23:64:c6:b0:
5d:3b:c9:5c:e2:a3:39:4b:9a:37:fd:b0:5c:f5:85:
88:dd:97:cb:84:a3:35:21:ea:1d:c5:e0:1a:e5:db:
dd:e8:ee:11:ca:1c:82:72:2b:50:5e:46:aa:8d:3d:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3A:8F:1A:52:BB:70:B6:29:BC:F4:2F:BB:33:A7:E5:F1:4C:C6:C3
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/mjqPGlK7cLYpvPQvuzOn5fFMxsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
188.241.192.0/24
Signature Algorithm: sha256WithRSAEncryption
91:9e:77:1d:ff:d6:e8:d7:73:62:db:ae:ed:e4:b9:ea:10:60:
69:9d:25:8c:c7:d5:25:a1:cf:20:c6:d5:5e:ee:8c:53:ef:4d:
81:26:79:7e:e2:35:9b:06:7a:06:2a:be:f1:61:cc:70:98:04:
73:95:f8:00:59:0f:f4:4f:05:5a:d5:e8:80:da:aa:5a:b7:cf:
d4:31:0a:a8:8c:0e:fa:72:cc:48:0c:8c:69:4f:1d:79:87:97:
d6:7c:05:68:2a:15:14:0b:f5:96:ba:8a:30:5f:95:d1:1a:9c:
d3:d2:f4:1e:45:a3:b6:dc:2d:f6:f9:41:d2:15:7a:48:10:d6:
cf:c5:33:43:d0:63:51:66:06:3f:5f:1d:7f:d4:7b:a2:8f:89:
b6:21:2e:bc:78:62:72:4d:cf:07:b3:9c:b3:7c:e9:e7:03:64:
11:55:c3:8f:8e:11:72:87:ac:bb:cf:7b:63:08:5e:ad:da:6c:
b7:09:4e:dd:3d:68:f4:be:ff:4a:f0:b7:bd:7e:5b:6a:9c:ff:
ce:69:fa:02:a3:64:74:ac:df:c3:bb:cf:f9:66:08:1f:83:19:
ea:78:f5:2d:c6:37:9a:11:7f:2a:c0:76:63:7d:5c:07:b6:00:
70:24:cb:c8:84:74:3c:00:ff:ba:fd:09:75:74:0f:ba:7b:fe:
59:e3:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:34 2025 by rpki-client