Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/97k6l_wwXfcEEiH8zJzuhd6CG7k.roa
File: 97k6l_wwXfcEEiH8zJzuhd6CG7k.roa (raw, json)
Hash identifier: gtxMfm/qm+oaGavXLSAF+5ZoD3JiVZk2Ay8laa3y9zE=
Subject key identifier: F7:B9:3A:97:FC:30:5D:F7:04:12:21:FC:CC:9C:EE:85:DE:82:1B:B9
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018CC56E7B3E3FD2087C7458C2A26245E81D
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/97k6l_wwXfcEEiH8zJzuhd6CG7k.roa
Signing time: Mon 01 Jan 2024 14:30:01 +0000
ROA not before: Mon 01 Jan 2024 14:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 84.54.35.0/24 maxlen: 24
178.212.142.0/24 maxlen: 24
185.65.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 12:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:7b:3e:3f:d2:08:7c:74:58:c2:a2:62:45:e8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 14:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7b93a97fc305df7041221fccc9cee85de821bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:14:7f:e0:d3:bb:38:64:ad:19:35:aa:25:
bb:0a:5e:c4:73:a3:9f:ca:c3:95:c5:15:0c:cf:db:
05:d8:c2:e9:bf:25:1f:ac:3a:87:81:36:f7:fe:51:
8f:f9:67:fc:a7:09:74:2a:51:cb:e5:b9:8b:e8:49:
1a:d1:32:66:c6:d5:67:6e:3a:e1:21:d0:27:8c:13:
61:d4:5d:29:f6:81:9b:61:43:0e:19:b1:d7:f6:70:
a3:3f:b5:e8:0f:90:d2:ed:43:23:b2:e3:9d:b8:2c:
67:31:21:c1:f3:0f:1e:65:7f:d2:9f:d4:fe:be:fd:
b2:34:ee:8f:66:c3:c1:2d:7a:6a:88:c7:ba:df:7f:
61:e7:d2:54:a2:b0:ae:16:fb:e1:6e:31:1c:cd:7d:
1a:f2:12:5c:33:cb:5b:4d:da:94:8e:c2:b6:dd:16:
9b:69:89:1f:a8:5d:c2:46:9c:e8:f7:31:8a:5e:54:
6e:ff:fb:2e:09:9c:f6:3c:42:4c:f1:34:89:84:2e:
da:48:61:f0:30:12:f1:7d:16:3e:83:3a:b7:0c:c7:
8f:e4:f0:4d:74:75:c2:e8:55:f8:e8:1f:98:a4:2d:
fb:f4:b6:e3:19:73:f6:e6:19:4a:5e:4f:0d:91:77:
3b:0d:73:3d:f6:80:84:d5:11:ec:1e:7d:b0:54:1e:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B9:3A:97:FC:30:5D:F7:04:12:21:FC:CC:9C:EE:85:DE:82:1B:B9
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/97k6l_wwXfcEEiH8zJzuhd6CG7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.35.0/24
178.212.142.0/24
185.65.70.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d6:6e:e0:ad:1d:96:05:00:f8:b1:3c:e3:b4:24:76:a8:20:
fa:e2:db:03:49:bf:6b:15:de:0b:20:18:14:72:90:f5:a6:81:
28:4b:34:6c:f3:fd:eb:31:e1:d5:6e:aa:1a:7a:18:13:18:74:
5e:99:a1:1b:4a:a4:19:6b:5e:32:cd:15:75:5e:89:be:29:35:
71:3e:88:73:ea:55:7a:9a:b5:05:b7:da:93:2c:f9:ba:e4:12:
af:2d:fd:a4:8f:14:d8:93:59:a6:97:d9:63:bd:42:c3:fc:f2:
fd:00:9c:c9:78:47:b9:11:cf:99:78:1e:d6:b0:61:52:72:77:
c7:a9:c2:4b:20:31:72:9d:c9:25:57:ec:68:ba:47:92:ad:e4:
8c:0f:94:04:e4:37:71:ca:22:24:79:15:f3:59:d7:49:2b:2f:
40:19:1c:35:81:41:64:da:ea:27:fd:e7:cd:65:f5:4b:3d:0b:
70:25:f2:da:7d:c9:f2:d8:b8:44:4b:85:f4:9d:1f:b2:b3:d7:
5d:23:a6:f1:97:c4:3e:e8:72:c2:bd:8f:a0:86:81:c3:b7:bc:
c1:2e:5d:98:44:0e:b3:2c:aa:e3:fe:c4:12:67:f1:fc:78:ef:
9f:42:ce:c7:2b:b4:82:c8:32:16:62:d1:89:0d:ad:12:4d:53:
69:d9:b5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:55:35 2024 by rpki-client on console-ams.rpki-client.org