Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jcGHl_e0fOcWYsKIvoS7IPF84qs.roa
File: jcGHl_e0fOcWYsKIvoS7IPF84qs.roa (raw, json)
Hash identifier: T3pYSqR4zhTNfyG8E71gjuZj52aht4dya9dp8rQlTZA=
Subject key identifier: 8D:C1:87:97:F7:B4:7C:E7:16:62:C2:88:BE:84:BB:20:F1:7C:E2:AB
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018926B51C44F692EEE6EF666A9A25F06771
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jcGHl_e0fOcWYsKIvoS7IPF84qs.roa
Signing time: Wed 05 Jul 2023 15:39:10 +0000
ROA not before: Wed 05 Jul 2023 15:39:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201971
IP address blocks: 84.54.54.0/24 maxlen: 24
193.148.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:b5:1c:44:f6:92:ee:e6:ef:66:6a:9a:25:f0:67:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 5 15:39:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dc18797f7b47ce71662c288be84bb20f17ce2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:c0:53:dd:9a:9d:96:eb:e5:83:d3:46:97:
0e:3d:02:ba:76:0d:8c:b5:fb:86:c5:75:09:a9:bf:
4b:33:3a:e6:93:79:2d:83:0a:19:2b:2f:d7:08:01:
72:27:53:6a:ce:0f:a8:35:27:94:b5:9d:ba:c9:61:
ef:c7:75:4a:82:c2:9e:dd:42:d9:27:95:78:12:ee:
e9:e6:94:9d:7c:75:b8:34:b2:0b:91:c0:7c:fa:84:
41:21:4d:07:3b:31:a8:2d:b1:7c:ce:f9:2e:9d:5a:
22:a9:fd:5e:d0:a7:eb:52:8a:88:51:5a:45:67:06:
ec:80:1b:58:73:9e:a6:a1:cd:b1:fb:ae:67:0a:fc:
b6:8a:27:b0:4c:ae:a3:5e:d8:db:12:b5:ff:8b:b8:
98:83:fc:56:bd:f2:30:43:ab:bd:12:39:15:c3:2d:
30:70:36:23:d9:c1:07:ff:c5:2b:d6:e7:96:86:39:
57:02:a4:77:32:08:70:92:c2:30:5d:f3:df:36:59:
3b:0d:27:ac:46:78:2d:46:75:b9:da:bb:25:1d:b4:
96:34:f4:c8:34:c0:93:a2:ae:46:d0:12:c2:20:e1:
93:d6:d6:ec:c5:e0:ca:be:96:27:5e:08:5a:78:da:
fa:22:fd:cf:b2:7f:30:df:b9:ee:81:d4:7c:b7:15:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C1:87:97:F7:B4:7C:E7:16:62:C2:88:BE:84:BB:20:F1:7C:E2:AB
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jcGHl_e0fOcWYsKIvoS7IPF84qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.54.0/24
193.148.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:56:3b:05:e7:33:28:bc:34:16:94:56:95:41:88:e2:e9:b5:
c5:89:68:27:e5:59:9a:54:40:eb:9e:96:41:2b:bd:db:63:89:
68:c0:ee:02:b4:b7:04:f9:b8:68:16:60:71:37:7c:9e:b6:7f:
fe:81:af:65:7f:7b:98:28:57:51:23:11:ef:44:c3:5a:02:08:
ea:ac:b7:e5:20:9d:c7:c9:ab:ba:a2:05:f8:b3:2d:90:ad:13:
72:a3:5a:fc:cd:ee:45:66:cc:1b:89:f2:92:48:c9:e8:9c:e4:
00:2a:ff:52:0f:0c:13:92:28:4c:a6:b3:73:3c:b9:47:37:3b:
f2:1e:2b:ed:9a:1f:1b:5f:2e:ae:af:fc:2c:47:ef:bc:4b:17:
60:9f:a7:08:e6:e4:9f:15:b7:9c:27:99:7c:cd:ed:fc:d0:af:
df:5d:34:55:07:ea:e6:8b:fd:79:26:93:05:0e:a8:f9:92:95:
49:f9:3a:ce:46:dd:32:80:be:a1:12:b0:e8:19:8b:6c:1b:e4:
ba:9c:78:84:27:5b:94:be:fd:9a:51:49:3d:3a:e6:81:85:a0:
64:cd:4a:73:c4:c9:65:3e:0f:58:a2:58:b8:7f:fe:75:eb:3b:
c1:cf:3e:fc:40:bb:e3:25:4c:68:19:87:99:87:a0:cb:2a:6b:
c0:f7:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 22:42:00 2023 by rpki-client on console-ams.rpki-client.org