Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/jzseSlbbtQIxKisM9n8B0qrWmuo.roa
File: jzseSlbbtQIxKisM9n8B0qrWmuo.roa (raw, json)
Hash identifier: 0eU1oDPiC+Q6O8vbgfUWvh21RjDUaBkDVgne2x4gT6U=
Subject key identifier: 8F:3B:1E:4A:56:DB:B5:02:31:2A:2B:0C:F6:7F:01:D2:AA:D6:9A:EA
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 01856C813A80A0F86BA16B961235F023AE91
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/jzseSlbbtQIxKisM9n8B0qrWmuo.roa
Signing time: Sun 01 Jan 2023 08:44:46 +0000
ROA not before: Sun 01 Jan 2023 08:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 666
IP address blocks: 84.205.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3a:80:a0:f8:6b:a1:6b:96:12:35:f0:23:ae:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 1 08:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f3b1e4a56dbb502312a2b0cf67f01d2aad69aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:aa:22:f4:3f:27:26:61:86:65:58:dc:9b:
a4:8a:88:0c:df:96:f1:e5:cc:5e:36:45:36:6d:80:
1e:b2:72:22:49:94:f8:50:fb:f5:c7:77:9f:a6:6b:
a8:7f:66:7c:d7:d5:7d:f7:60:9a:d2:ec:4d:54:de:
40:fb:e7:d0:0a:36:25:c1:60:29:21:94:b0:ce:3a:
1c:78:60:69:49:e1:ec:33:d5:f4:b3:19:21:ca:e6:
d9:f7:ea:7f:ce:ca:6b:3a:da:7f:e4:ce:18:e1:15:
35:69:35:67:59:2d:3f:e5:e6:e3:c6:8f:8e:9d:9c:
78:e0:77:76:ec:aa:f9:9e:bc:ce:40:66:40:b8:38:
a6:0c:64:00:62:21:85:14:81:87:bf:fd:6b:ae:3f:
4f:d9:c0:01:c0:0f:06:1c:76:97:0f:61:b1:6c:87:
ae:b3:96:ee:45:b1:ef:a0:d6:7c:e2:81:d9:a7:b8:
67:fd:7a:53:28:66:76:71:12:d3:96:ff:38:7c:fe:
af:8d:db:a1:81:56:bf:b6:8d:d6:95:68:83:08:c8:
7e:ba:4c:50:70:a3:7d:ac:96:93:38:bd:9b:aa:91:
bb:1f:40:56:9c:8f:dc:f7:38:16:86:e0:52:32:30:
bd:cb:48:8e:b0:30:98:6c:8c:49:c4:ca:65:cf:02:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3B:1E:4A:56:DB:B5:02:31:2A:2B:0C:F6:7F:01:D2:AA:D6:9A:EA
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/jzseSlbbtQIxKisM9n8B0qrWmuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.81.0/24
Signature Algorithm: sha256WithRSAEncryption
34:37:90:1c:3f:24:89:7d:f6:54:3a:d5:ba:63:fa:6c:3e:ac:
80:e5:af:f6:a3:d5:dd:52:5b:d1:68:a7:6c:de:e8:22:ff:08:
6d:16:38:4b:36:26:a6:b9:a2:59:e0:a8:de:e9:d9:bf:dd:4b:
85:78:2e:be:af:a7:df:8a:cf:47:56:d3:3e:af:f0:83:5c:8f:
4a:27:ad:67:38:a1:92:33:b0:bc:ff:65:32:25:f3:7a:7e:da:
1e:e2:83:0f:db:cd:dc:c5:96:40:ca:0a:c7:6b:e1:b0:f9:28:
1c:4c:ea:73:ae:9f:6a:55:80:7b:01:01:a1:d0:e5:3d:ac:c6:
e2:43:3f:d9:ac:f1:af:29:d6:00:f5:37:7c:d5:4d:32:96:a5:
90:af:69:00:a1:c5:3f:b8:a7:5d:32:02:e4:b1:d0:ce:39:30:
6b:70:c6:c2:3b:e6:11:66:97:9a:2a:d5:57:26:25:54:b5:95:
6d:65:ff:49:bf:93:e2:6e:03:0b:2d:70:51:49:af:fe:fb:bf:
c3:c6:8d:ad:4c:a8:40:fb:2b:29:d7:90:57:26:e8:89:98:2a:
8f:5e:0e:5c:e7:89:86:c1:05:68:a3:c5:b5:aa:0e:d5:25:66:
2b:e7:a2:8c:75:d4:aa:c1:f4:ad:1f:d5:c5:16:40:18:b3:e4:
80:e1:09:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:34 2024 by rpki-client on console-ams.rpki-client.org