Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/SEh0CE-VqEMHYKXmUmJAYAriBeM.roa
File: SEh0CE-VqEMHYKXmUmJAYAriBeM.roa (raw, json)
Hash identifier: FF8FATHPlFrMeAvFvT7AdCsQrys0vcmW1YFbtmX4kdI=
Subject key identifier: 48:48:74:08:4F:95:A8:43:07:60:A5:E6:52:62:40:60:0A:E2:05:E3
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 0191EA176BA858A68C4082079DB44036677C
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/SEh0CE-VqEMHYKXmUmJAYAriBeM.roa
Signing time: Fri 13 Sep 2024 06:34:48 +0000
ROA not before: Fri 13 Sep 2024 06:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.247.116.0/24 maxlen: 24
89.149.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 12:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:17:6b:a8:58:a6:8c:40:82:07:9d:b4:40:36:67:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Sep 13 06:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=484874084f95a8430760a5e6526240600ae205e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3d:ac:79:bb:83:a9:42:7c:d7:87:22:75:d2:
97:cc:fb:58:1d:31:92:f3:26:3e:cf:1c:9e:02:8f:
4d:d8:71:6e:fd:f9:b1:c9:5c:37:2c:5a:2d:29:4f:
80:e8:6f:23:65:50:5c:14:ae:27:fc:1c:a5:d3:a4:
e1:30:79:f3:3c:09:cc:1e:83:2f:de:6e:1d:7f:28:
7d:37:2c:5a:7a:3d:78:bf:fd:76:cc:3a:49:36:bd:
32:de:f4:21:a8:8a:89:4f:7f:24:a5:70:08:28:0e:
fe:42:f1:dd:b4:00:6f:1b:92:3b:df:40:b3:94:ea:
66:67:fe:87:d3:49:86:c1:9d:fe:eb:05:40:fb:cb:
af:c7:9b:83:83:28:f1:67:7e:3f:0e:29:f2:25:df:
22:30:18:78:53:b5:12:1e:fe:8d:5c:24:d4:ee:e0:
5e:92:04:e5:59:84:09:41:dd:c1:48:1e:b5:9c:6b:
66:76:3f:7a:ab:da:10:86:dd:9d:3f:fc:c2:56:9f:
37:79:c6:f0:fa:c9:ce:16:3c:b0:20:3b:de:64:2b:
7d:92:9b:e7:54:fd:ec:f3:63:04:d0:31:cb:84:e9:
28:34:ed:7c:52:c7:6c:2b:ff:db:4c:d3:e0:85:45:
d9:44:f9:a8:c7:1f:fc:a1:32:ab:6b:f3:ed:ee:55:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:48:74:08:4F:95:A8:43:07:60:A5:E6:52:62:40:60:0A:E2:05:E3
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/SEh0CE-VqEMHYKXmUmJAYAriBeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.116.0/24
89.149.24.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0c:05:d4:cd:e9:d6:7e:58:03:53:96:55:fe:71:40:5b:56:
67:ac:63:21:a5:b4:4f:61:fa:58:62:bd:f6:03:1c:a1:54:74:
e0:80:03:fd:2a:3a:df:74:8d:6a:43:ee:20:9b:dd:92:cd:64:
a1:e7:0b:6d:97:68:a4:74:85:51:44:0f:a5:1a:57:c4:50:a4:
ad:48:a0:9a:be:0d:70:cc:a6:d7:48:cb:4f:8e:c4:18:d3:45:
50:bd:01:65:53:90:22:90:76:6d:26:42:17:84:58:75:db:bf:
ec:cd:b2:66:c6:c2:0e:0e:04:5e:71:d2:34:3d:af:52:40:d4:
d4:9f:60:29:8d:51:8b:4b:a8:30:15:b0:be:2a:b9:1e:ab:38:
b9:12:04:8a:29:1d:9f:49:dd:96:b4:b0:4f:a5:e8:68:ff:e7:
e8:5a:7b:cd:c3:c5:f9:6c:0d:2f:a7:f3:64:50:9a:a2:70:9e:
f1:a5:bf:3e:0f:16:41:66:8a:f6:d0:72:fb:2c:17:64:1b:29:
d0:c2:25:4b:a7:0d:75:7b:eb:1c:aa:bb:a9:99:41:5a:69:30:
6c:b5:c7:d9:18:94:d6:f1:37:49:fe:0f:c9:36:e5:d1:23:34:
63:13:07:b2:12:a8:06:10:70:69:c0:0f:72:07:3c:72:58:b7:
36:d7:de:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 15:59:08 2024 by rpki-client on console-fra.rpki-client.org