Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9GuJcw_nztDUQ9cgImzPsBezgiA.roa
File: 9GuJcw_nztDUQ9cgImzPsBezgiA.roa (raw, json)
Hash identifier: gTYkFWwJCsZ4SXsdLNLgSd4DWw/k0RUvu+nKNNhIjPI=
Subject key identifier: F4:6B:89:73:0F:E7:CE:D0:D4:43:D7:20:22:6C:CF:B0:17:B3:82:20
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4DFE4E10B7C789297083D49BDE6E1
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9GuJcw_nztDUQ9cgImzPsBezgiA.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16321
IP address blocks: 84.204.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:df:e4:e1:0b:7c:78:92:97:08:3d:49:bd:e6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f46b89730fe7ced0d443d720226ccfb017b38220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:89:22:70:72:e6:c7:7e:f9:d9:28:85:6f:
86:ad:f9:40:8b:9a:25:05:de:ea:21:c9:c3:7a:a9:
27:96:d1:29:e4:57:96:89:ad:34:eb:95:8e:1e:90:
57:3e:26:ed:68:1e:ff:e6:11:c7:4f:b9:e3:fe:4f:
3c:54:50:23:a5:8c:8c:68:ff:fa:01:86:02:ec:93:
9b:a8:d8:a9:53:1f:8b:5c:41:17:c4:5e:08:0e:7b:
4d:91:04:09:77:2a:c8:cf:fb:9c:86:61:fa:53:f3:
e9:4a:09:3d:21:7d:e8:2c:63:db:79:a1:03:e9:55:
59:42:63:9b:ed:ce:33:c4:5d:5d:e3:82:42:e3:8e:
dc:bd:6b:75:2b:ae:3a:77:88:ac:a2:46:07:11:c8:
bc:f2:1d:c6:4f:4c:a4:18:f5:60:30:32:b9:34:52:
63:e7:cd:27:fb:01:93:bc:ca:eb:f3:12:cc:c8:eb:
94:d5:f5:0c:26:81:9c:d2:ca:d3:8d:38:95:b8:04:
45:f2:18:fc:99:f2:6c:21:a3:e0:90:d1:fb:4d:69:
0f:0c:36:d1:80:50:91:8a:58:94:e2:0e:94:88:d7:
ac:e4:0c:03:cc:65:31:27:bf:67:61:b8:40:7e:b8:
d5:1a:94:cb:fc:29:09:f3:2b:9a:ca:f4:96:fe:4f:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6B:89:73:0F:E7:CE:D0:D4:43:D7:20:22:6C:CF:B0:17:B3:82:20
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9GuJcw_nztDUQ9cgImzPsBezgiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.204.225.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e4:c0:15:71:35:82:14:d9:23:7b:eb:c3:4d:7b:85:b2:6a:
cb:da:33:0e:15:37:de:83:db:33:92:c6:79:96:ab:7c:aa:57:
3a:95:56:0a:0b:45:ce:6d:26:da:c6:fa:f9:2f:5e:dd:e9:ad:
f7:4b:e3:f5:87:16:28:de:3a:01:a7:16:1c:eb:43:e7:05:27:
d9:13:8e:d3:b2:25:ec:2b:98:1d:2e:97:86:30:ec:18:f1:f3:
03:0c:a0:94:a9:37:e5:28:bf:c6:44:7d:b1:fe:2a:a4:77:2e:
1f:66:8d:f3:8f:a0:be:fc:89:46:e9:b8:37:ca:20:f2:50:a0:
ea:ae:b6:51:3c:90:ae:a1:db:83:85:a5:87:69:58:a7:a9:a9:
65:84:de:46:af:a3:79:b1:7c:83:17:0b:0a:16:d0:de:d9:5e:
4b:ce:61:6f:48:fc:2d:e2:e5:ac:d1:ef:42:7f:32:09:8b:ca:
a3:86:43:fb:a3:0e:34:46:fa:4f:a3:da:6f:e2:d7:65:86:a6:
9c:b8:2d:97:f5:fe:95:74:1c:f6:a0:f7:97:95:e0:92:39:bf:
79:47:29:4d:1f:fe:06:7e:e6:c2:b2:8d:99:3c:35:90:d5:31:
d8:a6:c6:13:93:b2:a7:1c:e4:4c:73:8f:b5:e2:e9:72:11:03:
fc:4e:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org