Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j9tMzihx5rVGNcsCua_OQJI1ND4.roa
File: j9tMzihx5rVGNcsCua_OQJI1ND4.roa (raw, json)
Hash identifier: J06Ozb97GqiR6lp6Mf+yRi+OU9gZINOTr4/EGOUG7TE=
Subject key identifier: 8F:DB:4C:CE:28:71:E6:B5:46:35:CB:02:B9:AF:CE:40:92:35:34:3E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD0ED9F2434785841F83C423B0DA39
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j9tMzihx5rVGNcsCua_OQJI1ND4.roa
Signing time: Tue 02 Jan 2024 06:29:39 +0000
ROA not before: Tue 02 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212755
IP address blocks: 84.54.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:0e:d9:f2:43:47:85:84:1f:83:c4:23:b0:da:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fdb4cce2871e6b54635cb02b9afce409235343e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:fc:ed:02:36:b0:80:b3:0c:5a:6e:8b:6f:
43:4a:f6:56:7f:64:6d:f0:44:02:73:e5:14:18:b0:
3f:da:e1:07:16:58:28:d0:23:15:15:b4:9e:c5:c0:
71:77:3d:5a:f3:80:6e:03:2d:1d:c2:19:af:86:46:
f9:f2:15:fe:39:2c:2f:4b:8e:b0:41:49:09:67:ee:
6a:48:57:3e:b0:01:16:c1:e8:3a:59:35:36:72:df:
4c:5d:20:ee:bb:ed:dd:2c:59:90:86:53:7b:03:39:
1f:5c:83:c1:e3:fa:0d:59:f3:00:c6:be:4a:ce:2b:
cf:97:6c:59:06:e7:a4:8b:aa:d1:75:96:c4:08:f4:
4c:74:9c:39:8f:72:cb:5c:ca:74:4f:bc:70:4d:f3:
16:7e:cd:4e:88:ef:fb:f8:97:74:2d:c6:bf:0d:4f:
d3:2c:79:0d:96:af:96:ba:f7:e3:a9:5c:ad:29:f1:
5a:0f:77:03:33:3c:4b:8a:9f:a1:f1:0c:99:b7:8c:
eb:25:3b:25:a8:d1:2f:ae:ea:97:bf:93:54:cf:95:
0a:64:ab:ed:69:6c:f9:ca:72:59:71:5a:7a:89:aa:
66:e6:7c:d5:8a:fb:02:37:ce:96:94:d2:5a:44:51:
cb:33:3c:eb:71:15:2d:16:92:57:aa:2e:ab:a2:f3:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DB:4C:CE:28:71:E6:B5:46:35:CB:02:B9:AF:CE:40:92:35:34:3E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j9tMzihx5rVGNcsCua_OQJI1ND4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:fa:fe:08:77:46:88:64:f6:9a:b2:f9:cd:8c:2c:c3:18:40:
09:97:99:94:31:98:5b:92:96:f0:53:30:a4:a1:54:7f:16:df:
77:a9:53:59:be:3d:57:77:c3:a9:00:de:1b:28:d7:92:0e:d7:
bc:a0:34:e5:45:c4:58:9c:60:28:15:c2:16:21:47:f7:e1:ea:
01:af:a7:c2:3f:32:79:c0:6d:3c:e2:40:73:8c:76:f5:bf:6d:
00:02:4c:c6:cd:e7:ed:49:29:81:e3:75:5b:a4:19:08:b8:05:
5d:19:1a:ad:bb:f1:7e:d5:38:b7:0c:51:7c:d7:67:75:f8:35:
cc:e1:91:73:b0:fc:55:e0:1a:36:99:08:20:3d:63:a2:e9:4c:
b2:2c:82:5b:b6:a3:c1:40:f9:c1:2c:bb:e4:7a:22:10:7c:7d:
a9:0a:a0:28:17:fa:46:77:22:29:ee:cb:58:48:ae:a2:6d:3a:
47:87:44:24:59:d8:2f:e9:20:81:e2:7b:03:cc:9f:8b:1d:9d:
bc:4f:46:d4:8f:b8:d7:c0:28:bc:cb:7c:6a:54:71:db:8c:ca:
b2:c8:1b:be:0c:8e:12:bd:09:de:49:a4:07:4c:b6:83:7a:5b:
1f:b9:75:85:14:7b:f1:70:40:4d:b9:b8:e5:e6:98:b1:dd:ea:
df:f5:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:16 2024 by rpki-client on console-ams.rpki-client.org