Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/jy8fJjojwurUB4Uj8U5K4sWQyeg.roa
File: jy8fJjojwurUB4Uj8U5K4sWQyeg.roa (raw, json)
Hash identifier: sRRz2rJmR6VZRnuVwhGS588/TkVhHDSEdGB1OQl5VDY=
Subject key identifier: 8F:2F:1F:26:3A:23:C2:EA:D4:07:85:23:F1:4E:4A:E2:C5:90:C9:E8
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0187E6227B562C19844B44B0A4F293FC6AB7
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/jy8fJjojwurUB4Uj8U5K4sWQyeg.roa
Signing time: Thu 04 May 2023 09:40:32 +0000
ROA not before: Thu 04 May 2023 09:40:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202491
IP address blocks: 84.236.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:22:7b:56:2c:19:84:4b:44:b0:a4:f2:93:fc:6a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: May 4 09:40:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f2f1f263a23c2ead4078523f14e4ae2c590c9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:33:c6:6f:8e:2f:09:f3:67:16:c5:59:b7:
75:02:ba:90:e8:e0:7d:29:b1:06:d6:0e:43:6b:38:
18:36:7e:20:a2:c8:0d:12:40:fc:37:48:08:d2:17:
31:a4:04:74:a3:7b:d3:ac:12:09:59:2e:9c:fd:c3:
19:ef:87:b9:58:68:e6:33:a6:d0:bb:51:51:28:98:
4f:4b:99:0d:1b:99:bf:f4:34:cb:75:d4:2d:ed:f2:
b5:0f:f4:0e:dd:c6:e9:56:5c:0f:25:96:fe:92:32:
52:11:90:f4:cf:c7:63:71:87:a4:7e:ab:f1:c0:fc:
50:f8:7c:bf:52:ad:a3:31:75:bb:aa:5d:bc:c4:14:
2e:f4:c3:f3:c4:be:65:1f:83:33:d2:ef:f6:2c:cf:
7a:a9:44:43:55:64:9a:b6:24:b8:14:cc:52:57:09:
c4:d3:6c:db:23:04:66:31:3b:15:fa:1b:9f:1b:cb:
96:75:c7:73:c2:8c:67:ee:f6:5d:bb:7e:43:e4:90:
33:12:ce:26:cb:a5:cd:cf:c6:a1:57:1f:55:6d:17:
c1:62:10:4c:8c:e3:03:f4:a4:3c:2d:bd:2f:3e:37:
bd:9d:e8:d2:87:b7:67:50:ac:20:69:b3:ec:5b:51:
4d:e6:72:f0:70:16:56:57:bb:9a:9a:58:af:08:89:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2F:1F:26:3A:23:C2:EA:D4:07:85:23:F1:4E:4A:E2:C5:90:C9:E8
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/jy8fJjojwurUB4Uj8U5K4sWQyeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.137.0/24
Signature Algorithm: sha256WithRSAEncryption
57:70:0d:5c:a4:0f:c8:9e:d4:47:19:94:d8:de:3c:d3:df:a6:
19:81:6e:43:14:49:41:5e:b6:63:79:ad:1c:05:79:83:8e:fc:
c0:e2:9b:40:39:47:1d:51:e0:b8:8a:26:e6:e8:52:39:da:98:
db:44:84:a1:66:03:3b:86:3e:ea:13:2d:0b:bd:32:ed:f8:c4:
6c:5f:24:37:00:7d:b4:dc:b7:c3:df:52:b8:3b:dc:25:19:3b:
9a:88:27:01:ab:86:33:a8:62:4a:4a:dd:4f:35:99:82:f8:4a:
af:46:5d:8d:a1:72:80:b9:69:71:ed:4b:91:57:ce:d9:81:2f:
eb:58:25:55:12:00:9a:74:a3:2f:9c:90:a2:65:85:36:e2:a1:
4a:a2:de:73:b9:7d:d7:61:26:43:e4:b7:df:95:a8:d8:88:51:
8e:a4:ee:8b:e4:13:27:6a:3a:4c:96:4b:bd:40:28:83:da:73:
08:b0:ec:01:6d:bb:0c:89:d5:23:66:5f:bd:fc:c8:d8:9d:e4:
b5:88:fb:a0:75:62:cc:a0:f5:d5:ce:15:8e:53:2b:bb:b8:37:
1e:55:f8:0d:d4:21:06:dd:0d:92:a7:0c:8a:d5:e0:6f:70:62:
b9:ce:db:03:c0:6d:62:2f:43:c3:94:a5:a5:b6:af:45:cb:0a:
e4:7e:23:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:46 2024 by rpki-client on console-ams.rpki-client.org