Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/w1APfbDKp7x35-zWtg4e116Cftc.roa
File: w1APfbDKp7x35-zWtg4e116Cftc.roa (raw, json)
Hash identifier: uCHLbQdaFaiJDjg1GJ92MfxXHyFCxY+i5SLBBuGsIwU=
Subject key identifier: C3:50:0F:7D:B0:CA:A7:BC:77:E7:EC:D6:B6:0E:1E:D7:5E:82:7E:D7
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 01857042A50D922FACBB992E61A681E4C6B5
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/w1APfbDKp7x35-zWtg4e116Cftc.roa
Signing time: Mon 02 Jan 2023 02:14:53 +0000
ROA not before: Mon 02 Jan 2023 02:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60509
IP address blocks: 84.247.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:a5:0d:92:2f:ac:bb:99:2e:61:a6:81:e4:c6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 2 02:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3500f7db0caa7bc77e7ecd6b60e1ed75e827ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:2b:79:bd:68:f0:9c:0b:ea:0c:36:3a:2d:
e9:b3:d2:72:ea:89:d6:f7:40:61:e5:f9:e0:9a:6a:
df:e8:ec:67:ad:79:2a:22:a9:61:ae:ff:d8:79:e7:
8f:0f:84:cd:04:6e:04:9c:5c:84:95:a1:5f:bd:36:
d0:fe:d6:69:41:5f:8a:7c:52:77:ea:53:03:46:05:
59:4b:70:db:b3:94:58:1d:1b:33:07:0c:29:b8:6b:
cc:19:b6:cc:ac:71:1c:c5:13:90:c8:31:4e:40:a1:
45:42:9d:cd:62:55:0f:ad:cf:84:d5:23:5b:6a:57:
3d:5d:1e:ff:18:a5:76:35:54:3a:a6:f9:10:53:6e:
fb:28:1e:85:0c:92:81:36:4b:83:b2:82:95:a7:83:
87:fb:ad:59:34:78:7d:26:37:7a:6f:b8:a3:92:11:
78:a3:92:7e:c8:fb:0e:89:49:6f:a9:81:00:70:97:
8f:2c:81:65:f8:ae:19:10:4e:5d:b7:d4:68:57:d0:
90:b9:25:65:bc:d1:59:82:e6:73:2a:cf:6c:35:a4:
56:41:10:a9:61:12:59:64:4b:a0:2d:1b:d2:f2:ea:
20:10:8b:fc:6f:41:ad:a9:1d:bc:7a:4a:3b:2a:2e:
40:f1:3f:7b:f1:5e:55:c2:0c:02:2a:21:15:86:cc:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:50:0F:7D:B0:CA:A7:BC:77:E7:EC:D6:B6:0E:1E:D7:5E:82:7E:D7
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/w1APfbDKp7x35-zWtg4e116Cftc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:fb:5d:e7:6b:7b:e3:c2:77:b4:7a:9f:d6:5a:7f:8c:7b:2b:
5c:58:0f:96:0a:ac:be:61:39:87:45:9c:eb:4b:d4:c3:b4:d5:
73:20:22:b9:a0:bb:ca:a8:33:4c:24:25:23:ee:63:27:1d:10:
df:49:6f:1e:1b:72:ab:a0:84:49:c2:50:65:7e:a9:5a:b2:56:
dd:bc:a0:43:e7:2a:cc:42:9e:4f:7d:43:dd:a3:1d:da:86:48:
2f:f1:dc:dc:09:4d:a0:ff:55:85:0e:76:06:ab:34:df:59:b0:
1f:7f:cc:ab:ac:30:0b:db:85:13:64:40:73:f7:dd:d0:b5:ae:
d5:96:cb:58:88:11:91:a6:81:49:f2:5f:a5:59:5a:b9:0c:6d:
a0:e4:b5:8d:29:f6:df:5a:91:b8:2b:bc:1b:5f:a3:46:4f:71:
5e:79:91:a6:23:30:0c:18:44:b0:fd:e5:ad:dd:48:f3:f8:ba:
c3:32:2e:59:0a:ce:2d:75:1e:9e:3d:3a:ed:d9:ff:11:c5:a8:
f9:e7:d4:d2:23:a8:d6:7e:b6:07:d5:8a:8c:13:4b:2d:98:a2:
79:5f:f5:d5:33:bc:5a:aa:81:06:fe:8c:ea:2d:dc:49:30:fe:
71:c4:a2:55:5c:8d:b0:5c:04:5d:14:e4:ed:75:b3:3c:7f:ec:
32:d9:81:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:29 2024 by rpki-client on console-fra.rpki-client.org