Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/9agpI5nmPg5kn3uoi2mNmjOwivE.roa
File: 9agpI5nmPg5kn3uoi2mNmjOwivE.roa (raw, json)
Hash identifier: mwohYLpXjda8aRjM45Z+9gRKS04KnU5bJ7D+usqr+0U=
Subject key identifier: F5:A8:29:23:99:E6:3E:0E:64:9F:7B:A8:8B:69:8D:9A:33:B0:8A:F1
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DE15DD89E814611386B8045766CAF
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/9agpI5nmPg5kn3uoi2mNmjOwivE.roa
Signing time: Sun 01 Jan 2023 22:05:01 +0000
ROA not before: Sun 01 Jan 2023 22:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57801
IP address blocks: 84.245.96.0/24 maxlen: 24
195.12.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e1:5d:d8:9e:81:46:11:38:6b:80:45:76:6c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5a8292399e63e0e649f7ba88b698d9a33b08af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:c0:99:16:2f:90:59:3b:57:25:a2:15:9f:
41:a4:c9:5f:3c:13:9f:12:c8:90:5c:74:17:47:90:
dd:39:c7:11:8a:97:44:c6:8e:ca:f3:ae:96:ad:bd:
7a:a0:4b:4c:d9:ba:fd:d7:9c:b7:4e:e7:7c:2f:19:
18:42:21:53:d9:d7:d4:d6:17:4b:01:d7:10:ab:eb:
eb:9f:65:52:a3:3e:bc:39:cf:58:09:a5:08:6f:53:
b8:b9:7b:29:06:45:bf:01:3f:eb:9a:49:b0:fd:2d:
38:50:04:b1:e8:3a:24:f8:45:6a:fc:11:53:a8:84:
ba:3e:cc:48:f5:ac:57:e0:db:6b:2f:09:27:9c:90:
fb:30:5c:ae:b1:53:ef:7b:23:0e:07:48:22:fe:45:
2d:ce:39:d1:f7:74:34:0c:e1:de:9e:29:7a:3b:f9:
31:43:9a:c3:58:91:9a:9f:ee:d2:a9:35:57:34:f5:
26:8a:4d:41:31:35:05:67:3d:57:7c:a9:58:12:81:
5b:05:bf:e8:5c:fc:d6:14:0a:a1:a3:77:9d:89:56:
d2:54:b6:a2:31:49:88:52:2b:93:05:c7:f3:10:0d:
53:b0:ef:d8:92:c2:55:a7:ea:ca:c9:97:60:18:e4:
16:d9:0b:a7:c7:1e:4b:62:21:61:cf:9b:73:0b:24:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A8:29:23:99:E6:3E:0E:64:9F:7B:A8:8B:69:8D:9A:33:B0:8A:F1
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/9agpI5nmPg5kn3uoi2mNmjOwivE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.96.0/24
195.12.159.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5e:4b:4b:d6:fd:3f:e3:dc:27:aa:4f:10:03:ff:6e:79:aa:
58:f2:76:a6:0d:c6:91:a4:f8:6b:45:78:56:ee:8a:c0:24:c5:
01:df:95:17:6e:71:de:1c:cc:ae:8a:b6:a7:f2:19:4e:44:37:
c1:0c:e1:51:c6:fe:5a:70:f0:7e:4a:58:1b:8d:a1:03:5f:2b:
47:4e:5a:56:a8:b0:88:53:10:2a:e7:73:78:03:0f:f5:f1:8a:
a1:6e:4e:c5:ca:06:c2:c6:ec:14:b9:a0:51:e1:ec:d4:2c:17:
80:b8:f0:b1:c6:99:36:59:40:3e:39:82:9b:09:4e:84:8b:c4:
42:5b:0d:b5:f2:f4:c0:b6:0a:c1:54:24:c6:ea:e5:46:53:91:
9e:4e:80:09:dd:8f:d9:68:72:c8:4f:7a:16:91:8d:eb:ca:a8:
10:d1:5c:76:2c:d2:2c:52:2b:f4:15:fc:c4:04:a3:86:cb:07:
bb:0a:04:38:64:dd:b9:17:67:7e:cf:0d:59:f0:0b:17:7a:10:
e5:15:87:86:1e:0b:e6:f4:51:b5:68:09:94:88:04:cc:d9:d5:
13:92:58:c4:3b:1d:32:b2:1f:c3:bb:df:9b:cc:30:43:90:d9:
17:d6:08:76:7a:ff:2c:1d:6f:dc:59:d0:a6:19:86:9a:0c:74:
2a:f3:a3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:18 2024 by rpki-client on console-ams.rpki-client.org