Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/zMGfV0Xio-mqTevtfK2zsHf4uv4.roa
File: zMGfV0Xio-mqTevtfK2zsHf4uv4.roa (raw, json)
Hash identifier: ET38MlGh/HBVBt0RhoSgj3DCyzIvE28dvpVwllfMx7M=
Subject key identifier: CC:C1:9F:57:45:E2:A3:E9:AA:4D:EB:ED:7C:AD:B3:B0:77:F8:BA:FE
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 018CD279362215C2CA94AC3C9B2FEF81440E
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/zMGfV0Xio-mqTevtfK2zsHf4uv4.roa
Signing time: Thu 04 Jan 2024 03:16:48 +0000
ROA not before: Thu 04 Jan 2024 03:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 84.54.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 06:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d2:79:36:22:15:c2:ca:94:ac:3c:9b:2f:ef:81:44:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Jan 4 03:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccc19f5745e2a3e9aa4debed7cadb3b077f8bafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:c8:67:8e:c7:dd:6b:21:92:3d:19:ec:68:
f9:a2:b9:a6:25:49:43:f0:76:a9:56:dd:fa:3c:54:
32:62:29:0f:70:f6:ee:3b:b6:eb:11:d3:ad:d0:c3:
6e:2c:1e:d3:f8:18:f7:ec:11:8d:4a:18:2d:04:bc:
30:47:e6:61:9d:52:99:3c:8e:a4:d0:ec:73:cc:dc:
67:f8:ca:8b:09:b9:f3:bf:27:9b:bd:35:da:34:9b:
e0:8e:b8:69:db:43:9f:95:7a:c5:f3:e9:43:2c:52:
24:9b:8c:b8:b2:6e:81:37:7e:fb:aa:c4:47:74:c5:
79:a3:04:8b:5e:e4:25:0c:4e:4a:6a:34:dc:b3:49:
39:cb:43:08:09:28:d0:55:9f:7b:80:67:8c:cd:b6:
45:1f:3d:14:f2:d9:e2:fc:3d:d9:0c:57:03:f8:c7:
d7:a7:ae:11:45:69:c1:59:e7:57:e0:15:16:49:b1:
5c:82:fb:9f:68:ef:e5:6e:42:7d:12:49:53:41:1a:
db:da:18:5a:40:d1:9e:d1:ca:c5:b3:e2:68:98:ef:
ec:8f:0e:17:da:0c:45:4b:54:5e:1d:6b:e3:60:53:
c1:fe:81:fe:8e:4d:0c:00:30:b2:f6:31:c3:e7:2c:
67:ee:8e:37:c7:76:87:d4:b6:8d:a4:21:6a:1b:1b:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C1:9F:57:45:E2:A3:E9:AA:4D:EB:ED:7C:AD:B3:B0:77:F8:BA:FE
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/zMGfV0Xio-mqTevtfK2zsHf4uv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.12.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6d:49:bd:48:d3:03:fd:9a:21:dd:0e:c3:6f:44:c1:16:89:
0a:ce:48:a1:7f:91:6f:4e:31:70:b2:b3:3d:9d:50:c8:b6:06:
3c:eb:3b:b4:9d:db:60:26:18:02:3d:3e:75:41:7c:99:b1:df:
07:0c:5c:8d:ab:f8:f2:d6:89:07:7b:0d:e1:23:37:25:fa:71:
92:b5:b4:1c:fb:44:b6:5d:55:19:b9:bd:06:dc:1f:ba:7d:3a:
e6:9c:45:05:5f:64:64:7e:73:bd:2c:f3:24:e4:ed:04:7c:62:
59:a1:e7:4f:04:b7:ff:30:3c:67:5f:86:c9:5a:cb:f3:1b:4d:
4d:5a:f0:d8:62:32:48:3c:44:15:9b:92:8f:4f:bd:47:0d:54:
2b:f0:1d:9c:c8:f0:e6:91:cc:3c:86:80:00:1e:75:32:fa:bb:
be:49:26:60:99:e2:f6:0f:3a:17:ae:1d:dc:dc:32:ae:d7:17:
2d:3e:f1:95:73:00:b6:0b:9f:82:8a:f7:e9:ae:8b:5a:6c:0b:
14:1b:fc:d2:c1:b1:cb:b4:25:22:9e:1a:71:16:2f:e8:f1:a0:
9a:09:06:f4:2b:fd:8d:ff:7d:79:28:25:cb:55:6d:75:07:85:
8f:f6:76:5b:a8:ed:2d:f5:29:99:ec:d5:3c:a7:90:14:4a:dc:
43:9d:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:09 2024 by rpki-client on console-fra.rpki-client.org