Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/s6JEMBMIjgHFIqkeHfkUFvMc2jY.roa
File: s6JEMBMIjgHFIqkeHfkUFvMc2jY.roa (raw, json)
Hash identifier: /3M+bJJWqn/EA9SrUIA8Eirt7GB/Yh9bd0tK/U8qBw4=
Subject key identifier: B3:A2:44:30:13:08:8E:01:C5:22:A9:1E:1D:F9:14:16:F3:1C:DA:36
Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial: 018570304E728DEFB8CC96AFFBDB702E2B1E
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/s6JEMBMIjgHFIqkeHfkUFvMc2jY.roa
Signing time: Mon 02 Jan 2023 01:54:52 +0000
ROA not before: Mon 02 Jan 2023 01:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199522
IP address blocks: 84.244.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:4e:72:8d:ef:b8:cc:96:af:fb:db:70:2e:2b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Validity
Not Before: Jan 2 01:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3a2443013088e01c522a91e1df91416f31cda36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:86:97:de:ac:59:23:e3:a1:e2:9c:4e:08:
4e:df:8c:b1:7d:21:68:65:13:7b:42:93:97:4f:67:
3d:d2:bb:ae:1d:e0:9f:d9:e7:f2:7b:ef:d0:f8:69:
d2:6b:3d:66:dc:97:fd:eb:b2:d5:4b:4c:69:df:6d:
29:77:22:df:b9:52:ab:ac:e4:c1:0c:cc:79:c4:7a:
a8:6f:f7:4d:9a:81:0a:1c:be:da:5e:99:9d:f2:69:
c3:8c:77:8e:b6:00:da:52:14:50:95:f2:6e:c7:45:
ed:fc:0f:03:8b:47:fa:73:19:bf:e0:9b:8f:1e:fb:
32:61:e1:17:11:d7:8e:30:f7:16:36:36:0c:f3:bd:
54:75:5e:5e:61:86:d1:04:25:a8:70:60:cb:d7:8a:
5b:24:68:bd:57:7b:ca:9d:66:50:db:f3:92:33:9c:
1b:64:80:36:0c:a2:09:e4:d0:f2:ee:f8:11:d5:37:
b2:f3:53:07:57:fe:cd:6a:a4:03:38:21:d6:80:dc:
f8:f2:23:42:0e:ad:d6:d7:4b:a2:3c:07:f4:0f:2c:
6a:57:ab:bb:37:fe:40:df:b8:b3:f8:6b:a7:41:87:
ee:f4:88:9f:de:a7:07:0d:82:83:9a:3f:52:91:ed:
1b:a0:a7:9a:a9:b4:e8:68:18:09:5f:94:6e:c0:76:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A2:44:30:13:08:8E:01:C5:22:A9:1E:1D:F9:14:16:F3:1C:DA:36
X509v3 Authority Key Identifier:
keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/s6JEMBMIjgHFIqkeHfkUFvMc2jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.244.172.0/24
Signature Algorithm: sha256WithRSAEncryption
08:90:bf:86:e3:12:34:5e:72:ef:fc:75:fa:8a:d5:c9:19:2d:
73:43:12:54:df:b3:02:87:2f:cf:6d:04:f7:c7:b5:2f:91:d8:
85:49:2b:84:6a:7b:25:f7:39:26:6d:98:69:5e:cc:ab:98:87:
0b:13:25:f2:fe:15:16:d4:db:95:f1:d9:0d:a8:f5:43:03:80:
c7:34:11:5d:77:4d:c7:4a:30:60:12:1d:41:8a:c9:22:66:3d:
9d:ec:46:65:6a:3d:9f:fc:d8:6c:2e:65:be:f3:cf:b3:6b:8f:
a4:15:08:2e:a1:37:78:9e:4c:18:b1:fb:dc:03:58:56:12:4f:
38:07:ef:50:37:1a:f4:15:28:99:d5:14:04:7f:75:b6:02:ca:
02:c5:63:9b:16:24:80:78:09:66:f5:cb:15:14:31:b3:58:c0:
89:b7:87:80:c1:19:55:b3:9e:73:20:16:a9:07:3a:6a:24:54:
71:ec:6f:bf:4a:4d:37:48:06:cc:4f:c8:ef:62:7f:61:dd:25:
9d:f1:e5:6c:f6:bb:7f:c8:bd:b8:69:90:2a:e1:cb:f4:5c:42:
4f:59:cb:7e:24:e2:d5:74:55:e4:2f:45:75:36:55:a2:bf:3b:
4d:93:12:ab:a5:26:be:54:e3:68:c3:16:4f:d3:35:97:79:b3:
54:37:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:31 2024 by rpki-client on console-fra.rpki-client.org