Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/43x80nvG2AB9VkN43sNGVbdJkMY.roa
File: 43x80nvG2AB9VkN43sNGVbdJkMY.roa (raw, json)
Hash identifier: teZCnL1AiSMNxvm6kw8ZRBhthwfB0wyqSMKv7PRBbXQ=
Subject key identifier: E3:7C:7C:D2:7B:C6:D8:00:7D:56:43:78:DE:C3:46:55:B7:49:90:C6
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018CC2DB26E32B102837E51EA424E04A769E
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/43x80nvG2AB9VkN43sNGVbdJkMY.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 84.247.105.0/24 maxlen: 24
84.247.104.0/24 maxlen: 24
84.247.110.0/24 maxlen: 24
84.247.109.0/24 maxlen: 24
84.247.108.0/24 maxlen: 24
84.247.107.0/24 maxlen: 24
84.247.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 13:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:26:e3:2b:10:28:37:e5:1e:a4:24:e0:4a:76:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e37c7cd27bc6d8007d564378dec34655b74990c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:81:ed:ea:3a:05:14:0e:72:93:12:85:b9:
ff:3b:15:a1:7c:0a:85:7e:29:25:02:3e:08:dd:ff:
03:d0:1d:34:0c:c8:b2:ae:fa:96:16:a7:56:95:53:
8d:80:51:32:47:bd:2a:a7:9c:aa:99:de:38:fa:7a:
99:e9:93:dd:57:55:3c:a3:92:3e:3f:5e:dd:a0:f5:
4f:2a:dc:37:af:2c:9c:96:d9:99:9d:88:5a:c0:dc:
63:0a:d3:eb:5e:b7:8b:67:2b:f7:64:74:b9:22:81:
69:f1:6d:cb:f8:f8:fd:50:9b:f2:43:a8:5b:d1:7e:
99:43:59:d7:97:d8:21:c7:a8:83:ad:b8:df:74:34:
cf:36:e0:e5:db:95:0b:76:90:0f:8b:57:77:3b:0b:
09:08:48:99:e1:50:12:92:53:b6:2a:d4:c4:50:fa:
db:28:55:d1:48:87:7f:8d:9d:cc:bc:00:f5:ba:21:
aa:45:18:a5:61:d1:93:47:58:f2:c7:68:f5:3c:f4:
91:a5:69:8f:d2:78:18:48:d7:b6:4d:04:fe:83:ad:
8e:fc:f1:01:5b:05:e3:64:d5:3d:ee:72:62:b4:a2:
40:aa:87:07:27:0f:42:8f:b4:6f:d0:a7:f6:2a:50:
f7:55:94:a0:75:79:49:96:85:b3:f1:05:92:c3:2b:
64:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7C:7C:D2:7B:C6:D8:00:7D:56:43:78:DE:C3:46:55:B7:49:90:C6
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/43x80nvG2AB9VkN43sNGVbdJkMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.104.0-84.247.110.255
Signature Algorithm: sha256WithRSAEncryption
31:2d:8c:be:f8:e8:ff:48:73:89:a2:d4:60:60:8a:08:b5:94:
c3:f8:89:9c:69:34:96:a9:0d:2b:0c:6f:f5:ed:82:11:6b:cf:
af:c4:83:af:3d:27:4b:23:9c:c3:a1:f3:9d:ed:b6:67:0d:42:
9b:39:bc:da:d1:f4:40:22:0e:1f:1a:65:4f:61:eb:9c:1a:58:
b1:43:3f:c0:f7:0e:eb:32:db:e8:e8:e2:d3:eb:17:06:f7:bb:
5b:18:1f:56:03:dd:de:fa:b6:d2:6f:af:d9:3a:a0:f4:b5:bd:
cf:fd:8c:bc:ab:88:23:b9:28:84:e5:04:92:bb:ea:13:04:6f:
89:40:ad:e4:91:76:a3:dc:d0:51:d4:b2:7d:7e:05:77:fb:d9:
93:be:1c:69:c1:35:8b:65:61:69:a1:0a:13:65:3e:b7:71:22:
81:0c:32:bb:05:56:36:29:e3:b6:02:c0:ec:9b:36:dd:da:eb:
bb:17:f1:ea:ba:13:67:c4:3a:ad:bb:9c:b6:75:f5:43:6b:76:
73:90:9e:61:d7:d3:c4:41:30:e0:e9:f2:4f:6b:a2:ae:fd:fb:
0c:d8:aa:c7:49:d2:d2:e8:61:e4:97:2e:7a:cc:51:d8:5f:14:
6d:38:dc:3e:ab:59:2f:97:93:e2:0a:0f:f9:b7:3b:2e:0c:ee:
95:a0:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:29 2024 by rpki-client on console-fra.rpki-client.org