Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/73Ygxhrf601fTl-wZfyRn5xcpR8.roa
File: 73Ygxhrf601fTl-wZfyRn5xcpR8.roa (raw, json)
Hash identifier: I2f1TX9JI1wCNVVQcMIjxnt4vINTM3B1v395cKmZFcY=
Subject key identifier: EF:76:20:C6:1A:DF:EB:4D:5F:4E:5F:B0:65:FC:91:9F:9C:5C:A5:1F
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018DF5152AF45FA630C78FCF1ED105E26434
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/73Ygxhrf601fTl-wZfyRn5xcpR8.roa
Signing time: Thu 29 Feb 2024 13:37:01 +0000
ROA not before: Thu 29 Feb 2024 13:37:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 84.247.105.0/24 maxlen: 24
89.149.23.0/24 maxlen: 24
89.149.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 12:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:15:2a:f4:5f:a6:30:c7:8f:cf:1e:d1:05:e2:64:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Feb 29 13:37:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef7620c61adfeb4d5f4e5fb065fc919f9c5ca51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:bc:f9:2e:d5:25:a3:ed:cb:21:2f:b5:3d:
e1:1b:c1:45:8d:e1:e3:bc:cb:48:a3:45:70:4e:1a:
9c:b9:6e:7f:e8:c0:65:d6:c7:99:53:74:c2:7b:cd:
e1:8e:1e:de:51:c1:1e:6c:ae:97:c2:42:47:dc:c5:
b3:63:26:ea:b7:07:68:25:f3:15:18:a6:a8:af:8a:
32:81:f2:1a:45:59:5f:2d:6b:c6:d4:c7:01:1c:7a:
23:08:07:8b:cd:d2:08:4d:19:a1:e9:52:3e:cd:2e:
0c:49:e6:df:75:f9:53:d3:ae:b7:83:ab:b4:f1:9f:
5a:26:57:03:a4:a7:01:7b:a9:23:8c:cd:95:8a:1f:
47:8f:0a:55:0a:b8:1f:40:8d:1e:1c:ef:f7:ee:da:
ad:74:32:21:ff:d3:04:e1:f8:5b:1e:a0:70:8b:31:
3e:41:9a:cc:21:eb:6c:60:9c:94:85:13:40:b5:d7:
ef:3c:5c:4f:29:2c:14:d4:f7:df:33:da:a7:fa:97:
82:17:54:01:08:b5:0b:fa:6d:00:06:70:f2:56:d3:
a4:f9:54:7d:a2:b5:11:c8:f3:5e:a1:94:1f:af:ef:
0c:b8:16:f0:ef:93:cf:ba:d1:71:fa:e9:58:3c:a3:
fa:5a:91:20:5e:d1:a7:e5:48:80:25:2c:24:9d:cd:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:76:20:C6:1A:DF:EB:4D:5F:4E:5F:B0:65:FC:91:9F:9C:5C:A5:1F
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/73Ygxhrf601fTl-wZfyRn5xcpR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.105.0/24
89.149.23.0-89.149.24.255
Signature Algorithm: sha256WithRSAEncryption
01:f4:8b:10:04:e0:ff:96:88:66:c4:90:62:b7:a2:a5:2d:50:
9a:14:55:be:95:e1:36:a9:af:15:9e:15:6c:59:66:65:d3:56:
10:99:c1:2b:d3:2c:4d:ef:6c:1c:d1:a6:ce:7b:88:5f:63:98:
77:86:90:75:41:7c:45:87:33:ca:de:ca:38:1a:4b:62:cb:e4:
46:85:48:41:a8:b7:d0:28:3e:1e:4a:b9:0a:5a:fe:80:ec:c4:
8a:a0:8e:a4:43:b0:aa:4f:0e:fb:a5:46:9a:d2:78:f0:29:a0:
65:29:bb:5f:7f:c2:7c:33:5a:76:4f:f8:c9:e7:dc:a7:9a:57:
b0:9f:cb:d0:44:f6:a6:36:76:2c:33:22:33:ec:18:59:dc:71:
5e:1d:e4:d3:e4:61:a3:eb:8f:10:a1:34:90:be:23:30:1f:54:
4d:ba:22:64:f4:f0:3b:46:74:0d:63:27:33:13:5c:74:38:bf:
36:77:fb:97:01:85:72:3f:6d:14:32:39:71:89:43:b3:60:bb:
64:31:af:86:dc:5a:9e:11:87:bc:6e:34:be:73:a9:81:61:69:
37:c2:c2:48:f0:8b:b9:38:4a:25:92:47:e5:5e:d7:ec:47:db:
36:b2:4a:84:4f:b9:41:6e:bf:b6:6d:2d:84:ea:2d:d8:a1:a5:
0d:fd:23:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:47 2024 by rpki-client on console-ams.rpki-client.org