Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/2g7BKrddHZ5JTiWQQKOP4rmJlUs.roa
File: 2g7BKrddHZ5JTiWQQKOP4rmJlUs.roa (raw, json)
Hash identifier: v1t0b70NOm9UXzOiQpAVRgCyu7/UkKk4NOGo9I33LzA=
Subject key identifier: DA:0E:C1:2A:B7:5D:1D:9E:49:4E:25:90:40:A3:8F:E2:B9:89:95:4B
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018BCD8F37F42292D02B60AD8C20A9D3F758
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/2g7BKrddHZ5JTiWQQKOP4rmJlUs.roa
Signing time: Tue 14 Nov 2023 11:19:57 +0000
ROA not before: Tue 14 Nov 2023 11:19:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 84.247.105.0/24 maxlen: 24
84.247.104.0/24 maxlen: 24
84.247.110.0/24 maxlen: 24
84.247.109.0/24 maxlen: 24
84.247.108.0/24 maxlen: 24
84.247.107.0/24 maxlen: 24
84.247.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:8f:37:f4:22:92:d0:2b:60:ad:8c:20:a9:d3:f7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Nov 14 11:19:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da0ec12ab75d1d9e494e259040a38fe2b989954b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:f4:fa:24:bc:6b:f0:eb:2f:52:8f:ff:76:
83:84:fb:ef:a8:d4:24:02:d6:d7:dc:a2:57:67:39:
3c:5d:d9:2f:85:04:69:ad:05:db:14:46:57:ac:fa:
a3:63:8a:ae:51:0e:c1:ce:cc:d7:e1:f0:ef:0a:fe:
45:13:32:03:4b:5e:ad:27:9c:94:20:6f:ee:90:cc:
84:7f:7f:08:9e:3b:8a:2d:27:ff:4f:a3:fb:90:fb:
93:4e:3a:81:52:c4:20:9b:a2:f9:90:0b:a5:cf:c6:
c0:56:9c:79:14:cd:ce:5b:28:02:24:15:aa:d5:e7:
e9:6b:7b:ac:02:df:57:fd:64:97:79:8e:b2:0a:7e:
73:76:25:7d:93:de:1a:19:f1:34:d1:48:7e:f9:c9:
b9:22:81:c2:15:fe:a4:ef:c2:7e:f6:9a:f1:7a:6c:
83:f8:49:65:96:e9:d3:79:2e:9a:80:3b:3a:f8:e7:
de:98:02:55:85:eb:e1:e4:ad:6f:50:83:02:90:f3:
d7:83:30:80:e4:0f:59:a6:b5:69:50:e3:75:5a:36:
90:29:f8:df:51:e5:42:f4:4c:56:ba:76:f6:ae:4f:
81:92:12:38:1c:c3:b9:3b:5a:9e:b7:b0:a3:6a:a9:
d8:69:b4:89:59:dd:7b:36:44:b4:7c:c4:62:62:51:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0E:C1:2A:B7:5D:1D:9E:49:4E:25:90:40:A3:8F:E2:B9:89:95:4B
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/2g7BKrddHZ5JTiWQQKOP4rmJlUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.104.0-84.247.110.255
Signature Algorithm: sha256WithRSAEncryption
1d:36:97:e4:46:ff:de:7b:70:cb:34:09:a9:f3:a9:b1:69:9b:
e4:d6:7e:9f:2a:74:ea:4b:65:41:ed:3f:df:f0:79:93:d1:f4:
b3:2c:2d:0a:db:17:1f:d9:5d:c4:49:5f:51:c8:6e:00:fc:e4:
8f:40:45:fe:46:24:56:83:6f:06:3e:31:87:5d:30:85:aa:6f:
90:bb:26:d3:26:33:b0:67:86:b7:11:56:d1:de:b1:61:9b:ac:
6f:74:38:1a:7b:2a:2a:60:ca:3a:a7:e3:e2:fe:ac:29:ef:fa:
d5:ff:11:2c:d4:f6:d5:38:7b:48:7c:4c:b1:bb:2b:7f:fc:4c:
a5:d1:7b:4c:06:a0:84:ac:4d:72:d6:09:34:30:47:27:f3:1a:
76:a9:59:fa:f2:e0:22:e4:ab:51:a4:5b:c6:03:23:4a:5a:f4:
d1:b2:d0:fe:e9:f6:56:6a:35:5d:48:b9:64:cb:bb:67:38:d2:
19:60:84:e6:02:7c:1a:58:62:73:11:81:40:87:2d:f2:12:03:
de:cc:20:6a:63:3f:cf:b8:26:95:d6:a2:f1:48:96:1d:a9:ef:
e7:8d:d5:68:be:3a:b9:59:d7:41:c4:64:b8:a4:97:4c:ec:b5:
d8:95:79:45:1a:aa:6c:49:86:07:57:4a:22:dd:76:ce:2c:bc:
17:e6:cf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:29 2024 by rpki-client on console-fra.rpki-client.org