Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/Sc7041Z2AH2Nz4T_Tarm62jgna4.roa
File: Sc7041Z2AH2Nz4T_Tarm62jgna4.roa (raw, json)
Hash identifier: WvfHKZNy647V9UWjnTwQxDHaFp1inY9j0VAKR22ZQ0g=
Subject key identifier: 49:CE:F4:E3:56:76:00:7D:8D:CF:84:FF:4D:AA:E6:EB:68:E0:9D:AE
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 018CC79366FC09E6BC8584D209757AD2389C
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/Sc7041Z2AH2Nz4T_Tarm62jgna4.roa
Signing time: Tue 02 Jan 2024 00:29:35 +0000
ROA not before: Tue 02 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 84.252.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 16 Jan 2024 13:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:66:fc:09:e6:bc:85:84:d2:09:75:7a:d2:38:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Jan 2 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49cef4e35676007d8dcf84ff4daae6eb68e09dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:87:3e:5a:f5:c3:b2:a5:f2:15:76:d5:3f:
40:09:1f:8c:90:a1:a5:48:1b:f2:72:09:5f:49:61:
cf:30:82:dd:b9:c2:f3:a3:f9:3d:8f:02:f3:9a:2b:
af:68:4b:a3:3d:85:b0:18:71:3e:a3:34:4f:a1:89:
9c:88:8b:56:f1:26:ec:44:cb:4b:21:07:cb:18:b4:
e5:f6:97:86:80:3b:dc:49:47:15:06:06:1a:e1:2c:
8b:19:a7:b6:0e:1e:99:26:88:6e:07:66:eb:aa:1b:
f2:16:c6:dc:79:b4:d6:f6:be:47:19:9a:e7:f2:95:
1f:3c:7d:f0:e3:36:d1:cd:a2:e7:7c:9b:cf:b4:5c:
2c:6c:81:5d:b7:97:5e:f0:46:d2:6a:c0:45:1f:df:
0a:9d:fa:dc:03:f0:1e:8a:9b:da:f9:f3:ec:b8:ee:
99:24:92:10:78:42:6a:b9:dc:85:d9:c2:64:ff:32:
a6:e0:60:9b:1b:6c:dc:a8:63:20:1b:62:f7:e9:a6:
a5:de:f8:0d:38:ea:08:d8:2d:5f:f9:1e:27:ec:34:
ba:18:45:3f:33:86:b9:b6:4e:c9:15:cf:f2:5d:b7:
6f:7b:32:21:55:44:2a:4b:1f:29:e5:d3:40:cc:18:
4e:bf:aa:2e:c1:b3:63:f8:c6:e6:68:50:05:23:a7:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CE:F4:E3:56:76:00:7D:8D:CF:84:FF:4D:AA:E6:EB:68:E0:9D:AE
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/Sc7041Z2AH2Nz4T_Tarm62jgna4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.80.0/22
Signature Algorithm: sha256WithRSAEncryption
00:1f:7f:af:f6:d1:d8:27:dc:1e:09:19:d6:d7:f4:f5:00:84:
4b:6f:e9:ce:e0:65:74:43:ce:bc:b3:78:60:83:71:56:14:56:
fb:2f:cb:f0:98:be:0e:1b:f8:e7:ce:16:1a:cc:cb:39:0f:dc:
bb:2b:78:6b:c3:97:7e:3f:54:e4:bf:a9:0e:57:06:c4:de:5a:
73:2c:ce:be:08:a8:44:79:fe:70:e7:6a:43:ba:f4:ef:7d:26:
7b:be:3b:dc:d2:af:93:52:ab:46:1b:b0:f3:34:a0:63:a2:f8:
dd:a2:af:46:1c:28:10:03:d9:6c:44:e7:ef:d2:6b:08:83:ea:
c5:da:b8:00:a8:69:40:75:52:cd:ff:d8:7f:d5:d1:4e:0a:e6:
0e:30:8b:8d:30:2a:79:c7:dd:12:72:2a:42:78:1d:db:d2:fa:
3e:0d:4c:b3:86:61:d7:f3:1c:98:bf:1e:5d:fc:13:7c:05:76:
a7:d1:49:47:e8:f6:82:c0:1d:15:19:71:85:b3:4d:f2:5e:11:
42:c3:63:d4:0b:4f:6c:56:c5:70:97:df:88:c4:67:8e:88:9b:
30:5f:fd:b9:e3:5e:51:7a:47:16:47:5b:8e:57:51:b3:7f:88:
5e:85:fc:65:b7:b3:d9:5c:99:f2:79:f1:c7:4b:9c:7c:61:44:
c9:dc:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:49 2024 by rpki-client on console-ams.rpki-client.org