Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/O7zPrsRkYAkKJvXdl52VBTjJMPA.roa
File: O7zPrsRkYAkKJvXdl52VBTjJMPA.roa (raw, json)
Hash identifier: xwjevURWq/ou8CrBG8uT8zzCikzTT1se0A4h7EfEPTA=
Subject key identifier: 3B:BC:CF:AE:C4:64:60:09:0A:26:F5:DD:97:9D:95:05:38:C9:30:F0
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0185720C5A8678334D8B077C3F39248E5C5B
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/O7zPrsRkYAkKJvXdl52VBTjJMPA.roa
Signing time: Mon 02 Jan 2023 10:34:50 +0000
ROA not before: Mon 02 Jan 2023 10:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 84.254.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Mar 2023 14:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:5a:86:78:33:4d:8b:07:7c:3f:39:24:8e:5c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jan 2 10:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bbccfaec46460090a26f5dd979d950538c930f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:be:26:49:12:74:af:d1:39:c9:b0:6e:e2:
9f:ed:91:1c:96:3c:1a:f4:dd:0d:22:e6:19:ae:95:
ac:64:bf:4c:44:46:1d:0b:8c:a8:7a:d4:85:5d:25:
ea:28:2b:82:7f:20:76:48:c7:a5:07:52:18:fc:0c:
9b:4b:41:55:36:a9:09:be:4f:87:85:a0:e3:68:18:
19:ac:12:de:5b:30:ec:9b:4c:5c:7c:d5:ec:b1:1a:
b4:bc:4a:b6:0c:ec:2a:c0:4d:24:c9:d1:71:fe:a4:
e6:58:86:18:cb:a9:b3:54:80:a0:c0:a7:01:6f:65:
34:d7:6a:94:d0:e5:4c:c7:b2:39:be:8b:53:af:b6:
ef:ba:5b:99:e9:32:5c:98:73:37:5a:5b:94:e2:69:
cc:98:2c:24:83:ef:fd:dd:72:0e:47:ee:b6:64:f7:
dd:c6:6a:50:e6:9b:f7:af:3b:0f:e9:c5:18:56:b5:
e0:65:43:a1:81:b9:9f:4d:17:bf:07:6c:3c:0e:f1:
7e:c0:13:e7:5c:5f:36:f6:30:67:ea:89:e8:9a:3f:
d7:fc:11:47:d0:4b:cf:ce:5e:54:9b:2e:25:0e:43:
3f:e5:de:72:f8:f6:b7:fe:3d:d0:7c:b7:8e:ec:13:
59:38:f6:ac:91:28:4e:61:5d:aa:74:cd:78:72:12:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BC:CF:AE:C4:64:60:09:0A:26:F5:DD:97:9D:95:05:38:C9:30:F0
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/O7zPrsRkYAkKJvXdl52VBTjJMPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.254.134.0/24
Signature Algorithm: sha256WithRSAEncryption
68:93:fc:2c:00:60:70:ad:0d:17:1d:39:52:36:aa:0f:a5:65:
43:6d:29:63:cc:0b:b8:8e:d2:b0:42:33:3a:ac:99:d6:0b:ca:
2c:55:97:64:b2:d2:e0:0c:9d:93:68:9a:cc:f7:0b:de:f7:c7:
f1:3c:8f:29:2c:15:7b:5f:30:9a:4d:11:41:2e:9b:c6:29:b6:
7f:93:5a:6c:5a:68:5d:9a:4c:d1:67:fd:52:1f:4f:af:7b:fc:
91:0a:30:91:63:10:de:39:28:53:34:41:1c:ca:65:0e:2c:c3:
2f:cf:ea:cb:da:28:d2:c8:8b:19:0b:0d:ea:09:a8:70:04:3a:
1a:7c:fd:99:76:2d:b1:73:59:85:10:ce:d2:16:d9:23:52:87:
a3:4c:2c:28:52:b8:c3:70:69:99:fa:5d:ff:c0:16:14:a2:f8:
3f:c6:f2:ad:3f:c4:21:9b:1d:81:17:71:8c:10:67:cd:80:46:
bc:f1:90:0e:22:eb:c8:ed:7b:a9:c2:47:84:59:73:c3:06:6b:
1b:3c:e5:8b:12:9f:af:ac:37:aa:10:d7:a4:b0:93:bb:4e:05:
48:5c:f9:bd:be:0f:0b:91:fe:b4:cc:0f:2d:69:d3:e4:0d:fb:
a3:29:47:97:4c:ac:ba:cd:d7:d6:6c:ac:7d:a1:d1:bd:a7:78:
fb:5c:1a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:19 2024 by rpki-client on console-fra.rpki-client.org