Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/4mRfizpk0jhpxoM5PYEmwm0B9Qc.roa
File: 4mRfizpk0jhpxoM5PYEmwm0B9Qc.roa (raw, json)
Hash identifier: YQ2qw3jx47UGhL29IimIDO7+HGK+bYf8mxyH6TjA15U=
Subject key identifier: E2:64:5F:8B:3A:64:D2:38:69:C6:83:39:3D:81:26:C2:6D:01:F5:07
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01856FF9736B9C9EE530EE27F9747366F508
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/4mRfizpk0jhpxoM5PYEmwm0B9Qc.roa
Signing time: Mon 02 Jan 2023 00:54:57 +0000
ROA not before: Mon 02 Jan 2023 00:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jan 2023 08:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:73:6b:9c:9e:e5:30:ee:27:f9:74:73:66:f5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 2 00:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2645f8b3a64d23869c683393d8126c26d01f507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:4a:29:5f:06:5f:cb:d6:64:17:fd:b8:50:
ce:c8:0d:ef:e2:f7:0d:0d:a3:b8:51:c5:4d:eb:c8:
d0:d9:ba:2f:e5:78:bd:26:cd:2f:9b:c4:ee:f0:1f:
6a:1d:84:c6:36:0d:f2:f6:d8:a0:af:d0:0d:4c:80:
2d:99:e3:b4:a8:47:18:4a:f4:24:79:44:97:52:d4:
0e:c5:6d:9f:c0:76:42:44:d8:0a:94:d6:dc:8f:77:
b1:6e:74:82:71:7a:13:7f:d4:48:08:1d:58:fa:99:
65:d0:7d:d5:7d:28:24:88:48:84:b0:b0:a7:72:6c:
c0:55:8b:d6:18:0f:07:15:0c:ce:6c:e4:12:6c:ec:
02:5c:1d:9b:a9:32:7a:fa:c9:2c:d9:4f:55:cb:6e:
30:1b:93:05:f5:7a:32:1b:36:3c:66:cc:5b:01:90:
c7:8c:54:44:e3:54:5a:12:4f:b6:fa:b7:b4:15:7e:
13:03:b8:48:29:88:8e:23:69:10:36:5b:e4:55:4c:
04:17:64:ac:69:43:69:18:5a:a1:08:1e:65:70:f0:
b6:c1:89:84:f7:fa:d8:42:c4:23:f5:a8:c5:56:9c:
48:c2:75:54:d4:01:5f:8d:a5:0f:0b:17:c9:bb:7c:
32:52:6d:d9:f7:1e:c6:d6:a1:99:21:00:fa:a9:80:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:5F:8B:3A:64:D2:38:69:C6:83:39:3D:81:26:C2:6D:01:F5:07
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/4mRfizpk0jhpxoM5PYEmwm0B9Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.240.0/22
84.54.36.0/24
Signature Algorithm: sha256WithRSAEncryption
86:8e:22:4a:0c:de:a8:87:c2:da:23:9f:20:09:c7:bd:42:c9:
95:2a:0d:79:f4:5b:e0:66:22:d2:4e:31:87:6b:45:98:c0:4a:
06:37:95:d6:41:ae:9c:8d:0b:7b:76:c3:44:b0:e1:6d:79:d4:
9c:e9:d7:53:40:dc:34:eb:56:00:d4:71:51:60:4d:c0:2d:98:
1a:0f:77:2b:22:4e:cc:14:bd:8a:13:b4:50:75:6a:92:85:a9:
1d:74:ab:6b:f0:77:f6:41:d4:1b:67:4f:16:7d:a8:f9:0d:82:
46:41:b7:9b:be:c1:9c:36:c4:ca:93:de:42:1e:5f:2c:bd:04:
99:d0:84:ba:62:d6:31:ec:07:ba:5a:fd:89:ab:5f:15:1d:20:
e1:28:f0:ac:f4:16:0b:f8:a3:66:8c:36:51:ed:26:c0:2f:72:
27:5c:d1:60:2d:89:a7:76:9e:a8:bb:13:18:a3:fd:c3:84:f2:
43:28:08:e4:30:82:2c:de:5e:65:56:79:51:ae:9f:7e:c5:86:
b1:2b:4c:9d:e5:5f:46:c8:fc:3e:1c:33:50:dc:1c:3c:a0:25:
de:43:a6:c5:84:03:5a:e8:ce:16:94:22:06:3f:d6:e1:8c:71:
9f:21:59:81:36:f1:a3:70:cf:e0:b2:65:5e:1b:ef:d6:e7:ba:
7f:25:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org