Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/1-b2oWdjSNk7BJjr79ti_Mc1kVVM.roa
File: 1-b2oWdjSNk7BJjr79ti_Mc1kVVM.roa (raw, json)
Hash identifier: fOJCoBE7jO6ECuB1qUCHf1yTEtEgOHw9FrqPeWanpeY=
Subject key identifier: F9:BD:A8:59:D8:D2:36:4E:C1:26:3A:FB:F6:D8:BF:31:CD:64:55:53
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01882B380F3DC5367356EDABF6C86A36DC82
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/1-b2oWdjSNk7BJjr79ti_Mc1kVVM.roa
Signing time: Wed 17 May 2023 19:37:54 +0000
ROA not before: Wed 17 May 2023 19:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35830
IP address blocks: 84.54.56.0/23 maxlen: 23
84.54.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 10:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2b:38:0f:3d:c5:36:73:56:ed:ab:f6:c8:6a:36:dc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: May 17 19:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9bda859d8d2364ec1263afbf6d8bf31cd645553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:f4:45:03:0a:11:a9:4e:06:2d:30:46:13:
89:d4:b4:82:0c:b3:81:d9:3e:10:30:21:32:f9:07:
67:83:2e:72:8e:4c:ff:50:5b:3d:f1:d8:eb:a3:6d:
a5:9e:4f:af:89:f9:ee:95:c5:af:b3:7c:87:61:db:
1c:54:45:66:99:c1:73:a2:50:95:f8:3e:d8:b0:cb:
2e:08:7d:19:38:b4:7e:dd:d9:80:f9:3f:53:47:ac:
b8:52:4a:6b:b1:00:63:0d:11:49:33:0d:76:66:8e:
bd:d7:49:25:3a:cf:4f:10:a4:17:d9:9a:e7:1c:d2:
c3:cb:1e:d0:06:bc:b5:ae:72:e2:7d:36:a6:61:f9:
17:a4:d2:97:76:00:b5:7e:48:6a:ef:f4:f5:6a:19:
7b:bf:fb:aa:a7:f0:e3:ef:7d:e1:62:87:c4:69:ae:
53:e1:b0:d3:59:ea:26:21:74:23:54:c5:bb:5d:3f:
fb:2f:90:43:2d:63:ab:d4:84:22:a2:8d:ac:7f:02:
d4:d8:56:d6:47:83:90:f7:0d:c4:ff:56:53:4f:dc:
55:f7:6f:f1:bd:0b:d2:ce:04:3c:c3:c9:a3:89:d3:
b8:3e:68:fb:ec:5b:76:45:e7:3b:b3:39:36:77:8d:
46:3e:9a:bb:61:cb:9d:69:9f:6a:40:aa:8d:5e:fe:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BD:A8:59:D8:D2:36:4E:C1:26:3A:FB:F6:D8:BF:31:CD:64:55:53
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/1-b2oWdjSNk7BJjr79ti_Mc1kVVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.56.0-84.54.58.255
Signature Algorithm: sha256WithRSAEncryption
89:99:8c:69:a0:42:39:df:b9:3b:9f:bd:aa:1c:8b:3f:e4:65:
17:80:ba:e4:37:12:87:a9:d1:98:d0:ad:32:dc:9c:f7:46:74:
07:26:23:4b:62:82:ff:72:22:10:d5:96:a6:57:16:63:3f:3d:
72:c2:f9:91:86:14:a1:07:61:d6:db:f8:65:88:1e:92:23:6b:
8d:a2:61:c7:11:7f:92:e3:f6:81:12:0b:dc:f0:80:75:c6:76:
8f:96:52:23:92:46:d7:fb:ee:b6:c8:8f:d0:1c:4b:81:ad:22:
ee:f2:6e:a2:30:07:d1:4c:f2:ce:c7:8e:e3:92:76:f5:80:ce:
f2:52:bc:53:1b:86:f2:cd:64:05:21:a6:26:ce:d2:55:6c:5b:
8a:fc:77:f3:40:cc:b0:27:25:cc:b7:80:c7:23:9b:75:ac:bd:
6c:66:ce:30:07:dd:ed:5e:ad:29:6a:84:ba:45:15:b0:67:7a:
1b:67:b3:74:66:de:cc:0e:55:0f:c7:ab:c3:00:3e:30:86:b0:
31:c0:78:47:6b:50:b6:f9:19:6b:35:84:f9:b7:58:e0:4e:33:
75:c5:19:35:93:89:07:05:c6:31:56:61:cf:c8:91:24:f0:06:
47:e3:4e:71:0f:69:ef:61:b8:96:7d:3c:7a:0a:10:20:c9:f4:
73:58:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org