Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mtaqzfCwMDxjx1Y_Crk3Dz8vRRc.roa
File: mtaqzfCwMDxjx1Y_Crk3Dz8vRRc.roa (raw, json)
Hash identifier: 2BZQtCkSBCd8CjX/cElrwPciMrG/O5KzcqUj3cLmErk=
Subject key identifier: 9A:D6:AA:CD:F0:B0:30:3C:63:C7:56:3F:0A:B9:37:0F:3F:2F:45:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCD03DFB34382828BC823832A1BA84
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mtaqzfCwMDxjx1Y_Crk3Dz8vRRc.roa
Signing time: Tue 02 Jan 2024 06:29:23 +0000
ROA not before: Tue 02 Jan 2024 06:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16097
IP address blocks: 84.54.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Mar 2024 08:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d0:3d:fb:34:38:28:28:bc:82:38:32:a1:ba:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ad6aacdf0b0303c63c7563f0ab9370f3f2f4517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:90:dc:9f:2c:f6:7d:e6:1c:f2:64:9d:d5:
cc:88:b9:8f:c3:8c:61:6f:d9:b3:ec:c3:de:07:db:
af:90:bd:7a:74:c5:7b:2e:7f:b5:0b:e7:94:1c:2b:
28:82:9b:7f:35:0c:30:ba:02:2a:86:0a:60:37:3c:
40:c9:f2:4c:41:b0:c2:3d:da:97:59:6d:a6:82:f2:
fe:2d:5c:49:d6:95:89:85:17:58:2a:3f:04:45:74:
ae:7d:49:e2:8b:b8:cc:67:4a:d3:45:6e:20:3a:c0:
5b:5f:21:ef:0c:94:85:e8:fb:8f:63:98:a4:bb:91:
a3:47:92:98:76:04:e3:93:51:d2:c0:5b:51:73:79:
74:52:22:92:3b:fb:5f:a8:e7:ff:35:17:7c:f5:44:
79:47:33:cf:0c:82:d1:95:fc:a5:ce:ec:e2:99:ff:
b3:3b:b7:c4:bf:4b:76:0f:75:02:62:58:3b:58:49:
93:28:23:de:22:bc:f8:3e:cf:f5:c1:db:cf:bf:46:
18:38:c5:8a:ea:31:7d:1e:ca:c2:f8:3e:59:27:fb:
92:0a:4f:60:a2:0c:00:30:78:1e:92:34:27:a1:24:
0a:41:45:15:82:6b:df:f5:ac:ef:b4:0a:41:d7:6c:
3a:6b:44:ba:13:8c:ce:30:26:97:2b:b5:50:c9:c9:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D6:AA:CD:F0:B0:30:3C:63:C7:56:3F:0A:B9:37:0F:3F:2F:45:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mtaqzfCwMDxjx1Y_Crk3Dz8vRRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.48.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d0:6e:d9:35:b8:7a:99:12:f3:5c:42:56:1e:17:92:4c:80:
44:f0:25:2a:a3:22:a6:88:5e:f9:5b:05:0c:2e:f6:ff:44:28:
9d:71:b6:02:79:67:66:6c:c0:21:37:b0:da:32:3d:7d:e2:e9:
e0:ce:6b:5a:fc:f2:93:97:fd:5c:fa:ac:03:d3:7d:90:9f:53:
43:29:a8:3a:a6:8f:c4:89:d9:ca:81:d5:cc:cc:37:ee:0c:23:
3c:7b:12:19:cc:c4:04:4d:c5:31:31:a1:de:0b:42:4f:f8:04:
87:ac:ed:06:e0:4d:d3:45:7e:8b:fd:f9:82:99:d1:fc:3c:d8:
e7:38:95:ea:da:9f:9a:a8:31:21:37:4c:b0:64:5f:8f:84:7c:
7c:51:ed:33:ab:97:d1:79:8a:e4:e1:2c:82:bd:83:11:99:3d:
ef:ff:ce:ca:4a:62:4e:d1:48:ed:fe:af:58:8f:22:56:e2:e3:
45:21:75:2c:8a:59:a3:3a:d2:7e:90:8c:98:0b:a8:1a:93:b8:
71:bb:1d:3f:49:2b:0f:c7:0e:29:ed:e4:97:c0:7e:ce:8a:ab:
7d:cc:83:07:64:e5:9d:59:5e:62:b9:95:0d:25:d2:2d:16:b7:
9f:fb:1e:7d:d9:b6:2f:7a:49:15:6d:50:87:9c:15:68:cd:04:
af:59:83:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 10 10:00:39 2024 by rpki-client on console-ams.rpki-client.org