Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/ts8e3b1KN_lfMs9dpdDzusj7GeI.roa
File: ts8e3b1KN_lfMs9dpdDzusj7GeI.roa (raw, json)
Hash identifier: 4zo67iPAU20jlioqlVT7LxLJd4Moh3ySR60VHA7a8DI=
Subject key identifier: B6:CF:1E:DD:BD:4A:37:F9:5F:32:CF:5D:A5:D0:F3:BA:C8:FB:19:E2
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 018AD6AFE8540CE646E0FD6E1F5087369C6F
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/ts8e3b1KN_lfMs9dpdDzusj7GeI.roa
Signing time: Wed 27 Sep 2023 12:49:27 +0000
ROA not before: Wed 27 Sep 2023 12:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12693
IP address blocks: 84.38.72.0/22 maxlen: 22
91.203.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:af:e8:54:0c:e6:46:e0:fd:6e:1f:50:87:36:9c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Sep 27 12:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6cf1eddbd4a37f95f32cf5da5d0f3bac8fb19e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:93:c1:02:fb:20:de:80:a5:d8:4a:d6:80:
1a:78:d5:85:87:36:ad:41:1e:81:5c:f4:db:0c:65:
d1:98:cc:19:47:1f:cf:45:2e:21:17:42:f1:eb:4e:
fd:8c:3a:17:5c:02:62:78:ff:27:ad:94:92:fc:9f:
b3:ca:3a:90:78:89:22:82:ed:2e:9e:a0:1a:d4:de:
cb:05:6c:4a:f9:c7:4b:5c:4b:08:ea:61:bf:08:6b:
f8:3d:1e:55:de:60:47:b1:71:be:86:46:59:44:a7:
f4:b3:84:ac:46:3b:2f:8c:6c:38:e8:56:cc:c5:37:
91:50:26:73:04:aa:12:71:14:73:d1:18:9e:d9:d4:
4e:84:fe:67:2d:47:5b:7b:50:f5:d9:87:5d:0f:07:
a8:28:f4:80:54:6e:5d:dc:1a:4c:08:1c:e6:32:3d:
d7:1f:33:b5:75:92:ca:39:9b:eb:98:cb:60:3c:71:
4f:71:9a:bb:4a:88:48:eb:57:1f:0a:5a:00:77:2f:
7f:c0:67:47:dc:65:1b:5c:5c:72:ce:18:6e:51:e6:
15:b5:73:ec:bd:e5:ca:51:58:76:b2:39:b8:0d:bd:
5b:03:04:54:c9:f9:e5:2a:a7:45:aa:ba:0a:85:c7:
7c:05:9f:22:17:9f:49:98:7a:17:5a:4d:71:4f:aa:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CF:1E:DD:BD:4A:37:F9:5F:32:CF:5D:A5:D0:F3:BA:C8:FB:19:E2
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/ts8e3b1KN_lfMs9dpdDzusj7GeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.72.0/22
91.203.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:fc:81:5b:08:07:64:ed:74:1f:c6:39:a9:2f:90:39:43:8f:
0b:4f:6f:b4:83:bd:f8:51:96:4f:58:b5:35:25:4b:05:89:52:
37:41:d0:d6:ac:ad:da:e0:5c:d6:18:a2:99:8f:48:7a:01:f6:
0c:cf:c9:5a:54:f9:a9:83:03:e9:a9:cf:07:a3:00:bb:99:a2:
fa:26:91:f1:e2:11:ae:24:08:6e:b1:a0:82:11:74:e4:05:a8:
02:d3:f5:59:f1:50:6e:88:f4:af:aa:10:13:df:67:79:fb:5d:
2d:b4:b9:48:f5:3e:a1:df:fe:29:41:ca:74:ee:d2:01:50:6e:
59:e1:29:e1:9a:08:e3:5b:14:bf:f9:d5:70:0a:c9:d4:64:ee:
13:d3:6a:ca:69:7a:42:97:89:7b:a8:09:90:c9:6a:43:71:60:
03:06:2a:3b:85:5e:c8:c7:4d:95:5e:42:da:bf:8c:7b:30:f2:
14:9a:63:71:3c:40:dd:ad:45:18:39:2f:3d:ee:d9:22:4d:16:
4a:1b:a0:df:2f:7b:c5:9b:75:f2:6c:3b:8a:ac:44:e4:44:fa:
44:a0:b2:d7:ac:53:ba:21:17:47:36:2e:a9:4b:31:99:f9:16:
ed:2b:0b:0e:21:1c:8d:91:9c:58:c4:67:cb:f6:87:ff:f2:e8:
c4:48:a1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:11 2024 by rpki-client on console-ams.rpki-client.org