Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/KVIhCSLjyM1XhHJWbU9XZ64dEtg.roa
File: KVIhCSLjyM1XhHJWbU9XZ64dEtg.roa (raw, json)
Hash identifier: 6r47eGbr/bhepDvPF0x1iXcwb2QWf4zlZxQsj0Wte6w=
Subject key identifier: 29:52:21:09:22:E3:C8:CD:57:84:72:56:6D:4F:57:67:AE:1D:12:D8
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 01856F1D8CC8593C2243BB8A5ACB73A9C336
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/KVIhCSLjyM1XhHJWbU9XZ64dEtg.roa
Signing time: Sun 01 Jan 2023 20:54:45 +0000
ROA not before: Sun 01 Jan 2023 20:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51964
IP address blocks: 185.84.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:8c:c8:59:3c:22:43:bb:8a:5a:cb:73:a9:c3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Jan 1 20:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2952210922e3c8cd578472566d4f5767ae1d12d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:c3:22:fc:66:b2:78:a0:7d:e9:3c:a2:e4:
24:29:15:86:08:2d:5d:3c:2c:d3:7c:eb:4e:97:42:
c5:2f:bb:e4:15:f5:43:97:7e:ed:58:84:71:73:30:
c0:de:d2:d8:f3:a4:99:20:86:ab:ed:e5:41:1a:3d:
56:b5:13:02:b5:98:7a:28:61:3c:4f:f1:4a:34:4d:
1f:1f:8b:84:73:e7:30:5f:55:85:80:2a:7c:f2:0b:
47:ce:69:6f:ab:21:ec:17:f7:75:b3:01:3e:68:3c:
bd:98:ae:9d:12:63:6c:fd:e3:ae:a8:d7:ab:22:cd:
ab:e1:f4:46:06:29:79:63:e5:96:2d:7d:72:00:bc:
3d:72:c4:d4:0d:29:6b:46:43:15:01:07:19:51:87:
43:4c:0b:d0:c6:e4:16:e5:ea:2e:1f:7f:3d:d0:5e:
ad:09:2e:d2:03:07:31:75:d7:d3:16:06:52:3f:8b:
f4:a7:40:ae:16:1f:3b:1f:0c:d9:7f:42:be:b7:06:
af:20:83:5b:e9:48:50:ca:1f:10:d4:8b:48:84:d6:
9d:cb:c0:7e:49:e8:44:bb:52:19:df:58:5b:f5:d9:
62:05:58:33:b1:65:88:11:e1:46:63:0c:3b:de:de:
9f:d0:dd:6b:a0:10:ea:0f:35:aa:1f:da:64:a8:ab:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:52:21:09:22:E3:C8:CD:57:84:72:56:6D:4F:57:67:AE:1D:12:D8
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/KVIhCSLjyM1XhHJWbU9XZ64dEtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d8:62:25:27:81:cf:3b:ff:11:4c:16:0e:d2:28:18:ad:72:
4c:65:8f:fb:96:9f:a3:29:8f:7e:b5:a2:ed:41:47:18:e0:ae:
a4:76:af:a7:8e:fe:83:19:d6:b2:35:66:da:4e:29:72:4c:64:
b5:de:5d:c0:60:04:36:da:e4:13:7a:3b:00:73:7d:aa:70:65:
a3:e6:2e:6a:b3:5f:a8:f0:a7:ea:c6:ff:b3:e5:70:c9:58:b3:
31:35:91:a5:93:61:a5:73:a6:29:01:4b:ea:46:e1:f6:29:12:
96:c9:db:9b:81:e2:1c:62:aa:f0:82:61:f1:8c:00:65:b3:ef:
1e:bf:82:e4:f2:cc:b5:0f:5d:4a:07:28:ae:ea:14:35:9d:37:
62:0e:8d:9a:5c:55:8a:3f:7e:91:da:67:2f:88:fe:e5:d0:17:
a6:df:f0:8e:1d:1b:fa:0d:68:0c:ab:78:4e:99:bb:23:87:89:
4d:9c:80:3b:bf:68:12:d2:a0:ae:f2:6b:4c:a1:1b:0d:c5:fe:
3c:e2:29:e4:50:5e:bb:06:31:19:a9:d7:57:56:61:ca:eb:b6:
e3:e0:c8:7c:b8:13:24:53:e9:ec:8a:e1:66:60:2c:65:59:1e:
99:a9:5a:c5:91:07:88:85:3b:a6:fb:35:fb:57:dc:b4:74:c7:
6a:66:29:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:56 2024 by rpki-client on console-ams.rpki-client.org