Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/NqI-lRzpyEC1s6q5ELQF9WVRjuQ.roa
File: NqI-lRzpyEC1s6q5ELQF9WVRjuQ.roa (raw, json)
Hash identifier: LbklImm4IG1QxbpacMhBatnIuuEaSiTW/dXRLs5PvGk=
Subject key identifier: 36:A2:3E:95:1C:E9:C8:40:B5:B3:AA:B9:10:B4:05:F5:65:51:8E:E4
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 01856E4B004D4046FC05BF46C8929AB960A9
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/NqI-lRzpyEC1s6q5ELQF9WVRjuQ.roa
Signing time: Sun 01 Jan 2023 17:04:46 +0000
ROA not before: Sun 01 Jan 2023 17:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207839
IP address blocks: 84.234.104.0/23 maxlen: 23
84.234.104.0/22 maxlen: 22
84.234.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:4b:00:4d:40:46:fc:05:bf:46:c8:92:9a:b9:60:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Jan 1 17:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36a23e951ce9c840b5b3aab910b405f565518ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:bd:c8:e4:7a:45:27:90:5a:e2:d8:4b:78:
c0:05:7f:bf:fd:57:f3:39:78:ba:1c:21:e4:41:d9:
7c:cc:08:81:d0:80:01:a9:21:96:6f:a9:a7:41:93:
ce:3e:79:cc:e0:29:a4:cb:36:da:3c:cb:01:d3:e3:
42:38:3c:c3:dc:13:27:f0:8c:3a:55:34:56:6e:ab:
d0:93:ce:e8:c4:f6:d3:2e:67:bb:01:e0:88:00:4c:
44:fe:4d:b0:fa:50:ae:17:1e:88:25:32:e1:4b:e8:
a3:be:a2:51:82:e9:59:b1:ea:f5:cb:af:80:45:7b:
f1:0c:31:82:69:0e:50:83:75:33:f7:5b:31:f9:05:
38:91:e1:b8:01:fc:46:86:0b:cc:98:0b:49:59:d2:
ec:de:af:88:9e:cc:4c:b2:20:bd:26:e0:cf:86:bb:
8a:6a:f6:23:b2:8c:34:03:82:f8:a4:48:b4:ac:37:
ee:7f:dc:67:47:16:1b:69:c4:23:c0:73:df:a7:51:
76:ee:2d:98:de:88:db:c5:46:db:f1:2d:5c:92:2f:
09:0a:3e:05:67:b3:15:25:8c:32:51:7a:f9:60:6a:
7d:8d:64:a3:56:4e:f0:e4:4a:4f:54:51:3a:48:72:
5e:1a:97:36:fb:3c:08:1b:bd:df:c2:68:db:35:30:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A2:3E:95:1C:E9:C8:40:B5:B3:AA:B9:10:B4:05:F5:65:51:8E:E4
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/NqI-lRzpyEC1s6q5ELQF9WVRjuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:7c:9b:3e:22:09:86:c9:19:5b:fe:68:0c:47:93:62:9c:34:
7b:0c:90:23:ab:53:43:82:1b:61:29:9f:54:c4:3f:03:f9:62:
54:68:b3:7f:9f:d4:bb:56:7d:3c:f7:33:d9:17:b9:00:e6:80:
5e:df:c5:57:83:e4:a0:1b:95:27:fd:f5:35:03:0a:ed:7b:fc:
15:e0:f9:65:6b:1a:35:cf:01:eb:ec:a8:26:c3:50:e7:81:fb:
39:e1:cd:94:cc:fc:21:9d:71:18:0d:ac:c0:a0:c3:b5:93:a6:
32:0c:4d:51:8e:b9:2c:0b:fe:58:26:58:b7:7f:78:06:fc:20:
f9:9e:0b:28:d0:c0:f2:5b:d5:46:bb:0c:35:20:64:47:5e:8b:
c3:d1:82:f6:b6:b2:52:55:ed:9b:41:0d:75:23:c0:ac:58:71:
43:b3:21:80:43:62:4f:41:8e:da:82:8a:d1:c4:e4:bf:c6:2d:
81:7e:99:34:72:2a:a2:50:90:2b:c1:80:0f:d9:2e:33:75:e3:
73:11:65:80:e1:97:be:36:17:43:91:ba:50:87:d4:bc:cd:fb:
37:f1:75:99:d0:8f:6c:3a:44:8e:21:80:3c:43:0b:56:d5:e8:
f9:15:b4:9f:bb:2e:7f:b7:ea:3f:95:70:6b:5f:12:6a:21:d4:
0a:6e:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:45 2024 by rpki-client on console-ams.rpki-client.org