Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/SC_MBR_mjP_l_MIwSWljWO8Zz7Q.roa
File: SC_MBR_mjP_l_MIwSWljWO8Zz7Q.roa (raw, json)
Hash identifier: aOyiMbFMxDj51Abavp71sia9vwXR6fVBBsXiArAW9MY=
Subject key identifier: 48:2F:CC:05:1F:E6:8C:FF:E5:FC:C2:30:49:69:63:58:EF:19:CF:B4
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 01856EB8F2F023E0C3AFA4470C739FA8EFA7
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/SC_MBR_mjP_l_MIwSWljWO8Zz7Q.roa
Signing time: Sun 01 Jan 2023 19:04:52 +0000
ROA not before: Sun 01 Jan 2023 19:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201388
IP address blocks: 84.47.154.0/24 maxlen: 24
84.47.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:f2:f0:23:e0:c3:af:a4:47:0c:73:9f:a8:ef:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jan 1 19:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=482fcc051fe68cffe5fcc23049696358ef19cfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:20:44:4b:02:c1:77:10:8c:25:e0:db:0f:
66:dc:f3:86:63:ce:65:59:5d:13:cb:9a:36:75:3d:
ba:1f:25:0d:33:b1:46:8a:11:0c:99:88:f0:b1:7f:
e0:8b:1f:74:05:91:34:98:cc:84:6f:33:f4:64:30:
de:b0:66:dd:b3:81:97:a3:e5:09:aa:b9:ab:a1:59:
fb:0c:ab:45:e5:9b:33:3a:f0:b7:4b:75:9b:90:23:
71:74:94:b7:d0:08:f7:cb:40:7a:e0:f0:93:26:de:
ac:2d:63:63:be:da:bf:88:cd:1d:0b:37:b8:8a:79:
15:d7:e4:59:31:69:79:f3:d2:12:88:df:63:e4:28:
79:a8:ce:76:c3:95:09:93:08:2c:10:8d:b9:b5:49:
99:2a:03:2c:1d:85:46:f0:0d:7d:dd:50:f2:17:1d:
a1:ef:ce:db:b7:69:66:e8:62:70:4c:3b:85:2d:90:
22:af:62:b9:bb:45:6a:a2:c1:82:84:d0:d2:5f:1a:
f6:23:73:7e:0e:85:0e:c2:5c:c9:15:a2:28:e7:ec:
ad:96:28:0b:70:d0:ce:81:57:fb:20:82:e5:d1:4c:
8f:4e:37:ca:42:2f:32:3b:66:f6:06:0c:09:ca:2a:
d5:85:67:a7:3c:ef:da:48:6b:df:08:e3:aa:0b:2b:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2F:CC:05:1F:E6:8C:FF:E5:FC:C2:30:49:69:63:58:EF:19:CF:B4
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/SC_MBR_mjP_l_MIwSWljWO8Zz7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.154.0/23
Signature Algorithm: sha256WithRSAEncryption
27:9c:4c:33:18:02:12:82:76:09:ad:74:98:b4:00:7a:7e:c6:
46:69:da:02:f1:8d:f2:eb:91:98:08:ed:a0:cc:34:ac:a4:9a:
36:07:70:44:82:39:e0:30:94:cc:59:2e:ce:ce:07:b9:dd:39:
fe:4f:b2:3a:e6:f2:c9:9e:7a:59:3c:8e:02:90:f9:30:03:a3:
58:c4:5b:dc:1a:ff:0d:48:b1:fa:c4:6e:51:19:3a:5a:ed:ec:
42:11:e4:87:5c:72:8f:a4:48:5a:da:e5:ec:f3:25:51:fe:47:
b5:41:5d:37:f8:35:73:09:c9:36:a9:1d:e0:b4:85:cb:39:83:
88:00:c5:3b:ff:1d:13:d0:20:cd:5c:23:85:af:94:4f:6b:94:
26:51:85:93:0c:14:f9:47:ff:9f:d8:3f:d4:9b:bc:3c:75:f9:
a8:5a:6e:ba:1b:61:42:5d:ca:2e:c1:0a:5f:73:5e:72:65:a9:
2c:9b:ba:6e:9d:80:31:75:a3:21:0a:bc:23:ba:ed:1b:20:7d:
9d:96:e1:f4:99:b5:d2:54:02:cc:58:98:b4:f0:a6:04:13:82:
75:47:24:e7:d6:5b:59:e9:d8:91:52:14:04:d2:ed:5f:70:fd:
a0:e2:0f:cf:09:d0:a1:7f:e0:6b:36:4b:d4:a7:7b:47:f4:6d:
f7:88:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:21 2024 by rpki-client on console-ams.rpki-client.org