Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/z4Pvcd8EFwWqZT91FzJccArjBcw.roa
File: z4Pvcd8EFwWqZT91FzJccArjBcw.roa (raw, json)
Hash identifier: sQt5eprJxqqSK9mee+uPtE4Hp5nNxhxxIuhfuiqYNSU=
Subject key identifier: CF:83:EF:71:DF:04:17:05:AA:65:3F:75:17:32:5C:70:0A:E3:05:CC
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01877AE021CBFB7318AB6D543BEDCD80C057
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/z4Pvcd8EFwWqZT91FzJccArjBcw.roa
Signing time: Thu 13 Apr 2023 13:48:41 +0000
ROA not before: Thu 13 Apr 2023 13:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 84.54.38.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:e0:21:cb:fb:73:18:ab:6d:54:3b:ed:cd:80:c0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Apr 13 13:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf83ef71df041705aa653f7517325c700ae305cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:f1:09:dd:b5:c7:f6:26:25:14:26:47:5e:
be:b7:5a:74:a8:04:e8:9f:25:07:1a:1f:17:ea:b9:
96:6c:87:fc:02:90:bc:97:7b:ce:34:0c:0c:fd:f0:
6c:35:5e:c4:c0:85:3a:77:8c:a3:0e:35:11:3f:fe:
57:23:6a:f6:ee:8a:fc:27:02:e2:1a:3b:99:b4:86:
62:c7:6d:49:d0:4f:fa:f6:2f:b0:c5:9b:bc:10:67:
9e:18:21:de:51:f7:84:a3:04:c6:da:2a:9c:4a:af:
b7:64:98:3a:53:61:b6:d0:20:05:8a:17:71:8e:94:
4c:11:59:f2:ff:09:0a:39:8f:f3:20:17:30:34:8b:
b3:bd:0f:50:77:74:5a:d6:18:19:37:cb:be:e2:e7:
4d:aa:59:63:79:ad:d3:9f:ad:65:2c:69:e7:72:04:
f9:fc:0f:5d:de:45:93:bc:23:50:07:86:35:ee:9c:
31:33:3f:45:77:07:a6:fa:07:14:37:06:ed:6a:f3:
b7:a0:c9:01:b3:36:6f:ab:8b:b6:a8:20:2c:47:52:
7a:97:ee:56:ed:3c:d2:28:f5:7c:86:80:91:27:44:
79:c2:63:40:e9:72:7f:42:e2:81:02:df:3f:2c:57:
0a:2e:a5:90:41:a4:35:2f:fa:4a:39:cc:3d:1f:53:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:83:EF:71:DF:04:17:05:AA:65:3F:75:17:32:5C:70:0A:E3:05:CC
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/z4Pvcd8EFwWqZT91FzJccArjBcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.241.0-83.171.243.255
84.54.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:63:75:47:46:a2:12:94:6d:6c:80:38:84:93:c5:80:e5:fa:
b8:73:9c:24:0f:31:4e:4b:87:98:28:b5:f7:73:b8:af:28:70:
7a:2a:e8:fc:d4:14:c6:b7:5c:ec:0b:06:0e:e0:6c:3b:99:da:
94:2f:74:f2:c4:e6:72:c7:2b:ec:bb:fe:18:ea:76:b3:df:87:
2a:1d:e9:dc:7d:3b:d5:2f:12:b2:a0:14:87:db:ef:b9:18:b9:
28:a4:e1:a3:e5:58:79:81:cc:79:f5:a7:42:73:0d:2b:9c:bb:
8c:a9:0d:5c:1d:ab:15:d9:c0:82:33:da:e9:b2:ef:52:3e:3d:
bf:db:30:43:f9:67:3f:51:13:cd:f9:4f:16:22:e3:b1:74:c3:
6f:c4:c7:ee:6c:5d:4a:d8:5c:bc:52:41:18:1c:31:41:9c:57:
13:67:a7:7f:89:1a:3e:22:3d:76:b1:83:f2:76:49:f8:2f:49:
d4:2d:1f:ca:d9:d2:6b:4b:21:d4:33:5a:04:8d:81:7b:91:90:
35:47:a8:4f:ca:f1:a4:1e:57:21:9d:db:b6:d9:63:ad:55:d3:
c0:cc:af:3a:4f:fe:f6:8c:52:c0:44:f6:48:5a:9d:5d:cb:29:
52:ca:9e:79:e2:e8:c1:ac:9f:bd:56:3c:02:63:d3:a5:bb:88:
ef:79:62:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:59 2024 by rpki-client on console-ams.rpki-client.org