Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Ac6YZzl_7V5A90Wg3TUxho3maqY.roa
File: Ac6YZzl_7V5A90Wg3TUxho3maqY.roa (raw, json)
Hash identifier: OWZppkmnXI8WV5xqT65rClUJQPF6RYBcwJD+gfOrJ9s=
Subject key identifier: 01:CE:98:67:39:7F:ED:5E:40:F7:45:A0:DD:35:31:86:8D:E6:6A:A6
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 018704907152C9E02763ECDF23D6597EEF9F
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Ac6YZzl_7V5A90Wg3TUxho3maqY.roa
Signing time: Tue 21 Mar 2023 14:26:27 +0000
ROA not before: Tue 21 Mar 2023 14:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 84.254.136.0/24 maxlen: 24
84.254.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:90:71:52:c9:e0:27:63:ec:df:23:d6:59:7e:ef:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Mar 21 14:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01ce9867397fed5e40f745a0dd3531868de66aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:66:13:75:3b:0e:72:e6:c1:59:a3:23:32:
d7:81:4f:9b:f7:cc:3c:b3:6b:94:13:64:fd:b7:05:
0e:30:dd:f9:8d:f9:16:73:7a:40:bd:9f:4c:4e:18:
e2:2c:0d:7f:f0:20:4e:f3:47:51:68:2a:91:ee:e4:
f0:db:4d:a5:34:e7:0b:96:40:ec:85:4d:63:61:43:
65:e6:1b:9a:6b:b8:20:d4:0c:8d:e4:4f:ca:e0:31:
07:05:d7:11:99:c8:22:4c:83:02:00:72:8e:41:d5:
eb:24:5d:05:65:29:ce:4e:6c:15:d1:bd:cf:b9:ef:
8a:f8:44:e0:83:63:17:2a:3e:c2:05:f2:dc:29:21:
4f:4c:f3:bc:bb:88:92:c3:ce:4f:79:4b:4d:59:6e:
43:db:ba:b8:e2:45:33:f1:98:5f:79:1c:81:fe:55:
cf:8c:ed:e8:76:33:d4:ac:22:a2:42:ed:8a:90:f9:
95:69:83:38:b8:0d:f5:21:83:57:40:72:47:58:47:
e9:73:7a:28:22:5a:71:53:1a:92:e1:7d:bc:10:e2:
5b:2d:83:4e:ec:eb:d1:a9:e0:73:ae:57:c0:6c:40:
68:b7:a4:1f:e2:c0:73:32:97:0d:a6:dd:69:83:2d:
28:0a:4e:8c:9e:e7:b4:d1:eb:9b:24:63:39:09:f4:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CE:98:67:39:7F:ED:5E:40:F7:45:A0:DD:35:31:86:8D:E6:6A:A6
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Ac6YZzl_7V5A90Wg3TUxho3maqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.254.134.0/24
84.254.136.0/24
Signature Algorithm: sha256WithRSAEncryption
92:42:79:40:0e:e4:63:63:6c:82:5c:f7:05:37:d6:47:3b:be:
a7:bc:6e:0a:f3:f5:95:91:12:b0:a8:55:ed:80:c8:6d:ff:45:
18:df:34:94:3a:04:30:99:35:f3:99:34:5e:e5:c1:e7:cf:df:
75:68:13:a6:85:c0:62:14:69:73:44:13:cc:ce:19:c4:56:12:
fa:62:a4:09:ff:2b:4c:4d:68:11:69:c6:55:e1:f2:7c:57:2c:
3e:92:6e:6b:3f:9f:92:c7:7e:7f:09:d2:9d:02:cc:6d:7a:7b:
aa:d4:ff:37:d9:f3:d9:10:8e:52:38:7c:5f:92:df:43:1e:a6:
40:71:65:49:0b:ad:2d:eb:e0:49:5f:51:72:6e:15:3f:93:dc:
62:0f:fd:ae:91:4d:72:f9:19:9c:00:ee:11:f1:9c:47:ab:ec:
6d:41:a3:88:b0:8e:a1:f9:5d:b8:3d:e5:d4:85:5c:6b:fb:fe:
81:0f:78:e1:fc:0d:8d:4c:49:d1:b1:b6:1f:1d:1e:ff:9e:f3:
71:04:72:e8:8f:8b:70:89:4c:8b:30:c0:c0:6b:a9:30:5b:bd:
6e:fb:02:94:53:a7:27:15:61:56:b0:f0:58:38:b6:20:4b:fb:
8f:2e:4d:d9:ea:b1:36:d6:57:28:45:a4:8e:92:f0:6f:b4:1c:
e0:28:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:19 2024 by rpki-client on console-fra.rpki-client.org