Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/x0Q4IAj_63vtC0QAF7KM8Zw3OY8.roa
File: x0Q4IAj_63vtC0QAF7KM8Zw3OY8.roa (raw, json)
Hash identifier: dr1SrhWbphuYq3AIqOvOOYRpHIHl6GlhJPYCAwLYBLI=
Subject key identifier: C7:44:38:20:08:FF:EB:7B:ED:0B:44:00:17:B2:8C:F1:9C:37:39:8F
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 0190DC2659FB33192C768C9B744829A2BBC0
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/x0Q4IAj_63vtC0QAF7KM8Zw3OY8.roa
Signing time: Mon 22 Jul 2024 20:33:39 +0000
ROA not before: Mon 22 Jul 2024 20:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214529
IP address blocks: 84.247.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 20:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:dc:26:59:fb:33:19:2c:76:8c:9b:74:48:29:a2:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jul 22 20:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c744382008ffeb7bed0b440017b28cf19c37398f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:17:2a:c9:e7:ab:31:fa:6b:62:c0:29:12:
4e:f7:e7:73:19:21:58:3c:a0:ed:98:58:05:01:12:
ac:91:04:20:f9:71:d1:f8:e9:3b:7d:01:19:06:44:
9e:79:38:4c:c2:1e:f9:64:6e:22:97:44:a2:c2:ed:
dd:a8:f7:6c:be:04:25:eb:1b:1f:98:d9:04:d1:7c:
98:b9:4a:9e:cf:28:51:e2:1e:3a:98:01:81:0d:c4:
33:3e:31:e6:c6:1f:74:ca:69:1a:74:3a:5f:fe:52:
e9:d6:f9:0e:bf:87:0f:a0:d1:1e:b6:53:f0:cc:82:
ed:06:bc:de:2c:46:a6:32:0c:55:41:80:b3:d7:3a:
95:d0:f7:d3:61:d5:ea:42:01:36:d9:8a:eb:df:ad:
95:c2:1f:bc:69:af:bc:73:d8:3b:be:54:b2:14:09:
3c:a0:54:8a:e7:be:09:64:32:7b:dd:b9:0a:25:5d:
9b:4f:fc:6a:06:e4:8a:4d:f5:94:f6:30:ed:67:a9:
08:0e:95:e5:29:a2:58:c9:8c:84:3f:43:b5:c5:f2:
b2:da:11:80:00:37:4b:e8:2f:9c:f6:80:0c:48:73:
02:4d:7d:b5:4a:82:86:75:8e:6c:39:28:be:38:03:
26:e0:e9:87:95:44:ed:44:1b:84:60:3a:d0:dc:0d:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:44:38:20:08:FF:EB:7B:ED:0B:44:00:17:B2:8C:F1:9C:37:39:8F
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/x0Q4IAj_63vtC0QAF7KM8Zw3OY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:fe:6c:78:7a:51:53:b9:09:7c:c4:0c:9d:c3:f2:1b:21:1f:
5b:84:c5:61:2e:d6:cc:18:56:fb:ed:3c:1e:72:7b:03:79:78:
e6:af:7b:3f:be:6c:9f:44:d9:a9:9e:fc:1d:2d:75:66:d3:67:
af:b9:11:38:ac:b0:bf:c4:cc:64:15:87:78:2f:06:dd:55:f2:
82:ae:48:30:86:78:9d:48:aa:b4:f0:0f:34:4b:d4:9e:ee:a0:
84:af:65:d1:1e:76:6f:6a:77:94:35:cb:98:8f:58:f9:b7:32:
d2:8c:d4:b2:68:03:b4:b2:ce:97:42:ba:5f:14:b6:1f:38:01:
d4:cb:56:d1:0f:a2:1f:35:3a:a7:67:f2:97:0c:72:52:bf:81:
f0:20:4b:19:90:cd:aa:6f:f1:3b:97:06:f8:f7:06:2f:50:3e:
a3:e3:73:eb:27:cf:30:f8:eb:8c:bd:b0:0e:aa:01:09:c4:07:
d8:1c:3d:65:db:4f:38:a2:b8:e0:fe:60:65:89:c3:47:a0:3b:
65:69:10:72:75:ed:9b:06:5c:c8:d8:f5:d0:d9:a3:7c:b5:92:
e7:40:9e:83:a8:2a:9f:2a:61:4b:8a:bc:02:2a:2c:9d:b9:53:
1f:8c:69:72:d2:c6:fa:5b:9d:51:31:93:c6:4f:27:e1:70:4a:
9d:74:bd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 23:41:15 2024 by rpki-client on console-ams.rpki-client.org