Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/2mkrfwwvJqp_-b5iJ1OMRVrZ21g.roa
File: 2mkrfwwvJqp_-b5iJ1OMRVrZ21g.roa (raw, json)
Hash identifier: P5U4AiUJDI586GuzRvoK0Wd47flbLQSAjIlTev2FSGY=
Subject key identifier: DA:69:2B:7F:0C:2F:26:AA:7F:F9:BE:62:27:53:8C:45:5A:D9:DB:58
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 018570D52FF7513F94D44E01504D5D65F3ED
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/2mkrfwwvJqp_-b5iJ1OMRVrZ21g.roa
Signing time: Mon 02 Jan 2023 04:54:57 +0000
ROA not before: Mon 02 Jan 2023 04:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198394
IP address blocks: 84.17.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:2f:f7:51:3f:94:d4:4e:01:50:4d:5d:65:f3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Jan 2 04:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da692b7f0c2f26aa7ff9be6227538c455ad9db58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e0:79:63:e6:32:c8:ae:b8:db:2a:80:38:b6:
1f:bb:53:f1:8b:47:6f:82:29:a9:35:17:86:8d:2c:
e2:f3:23:a6:90:ae:ae:15:bd:b7:46:23:78:28:2a:
06:0a:9d:37:3e:54:7c:c2:f1:5a:85:30:e5:32:b3:
ee:ca:f6:8d:62:4b:39:a7:7e:6f:a4:45:a5:18:d9:
dd:bb:0e:9c:05:0b:71:e4:88:b2:2d:22:01:4b:ab:
c9:61:ad:2e:2a:5e:3b:5a:9f:e1:66:5e:4a:5d:d4:
91:21:fc:c6:75:e2:25:4a:71:e4:04:1c:60:ed:71:
f6:2f:35:40:15:e0:ca:0a:00:b4:a8:f6:bc:36:fb:
4a:e7:8d:01:1c:08:44:0f:ec:8c:e8:e9:2d:37:ff:
0b:40:13:dd:f3:94:c0:f8:4d:d1:d0:99:e3:a9:64:
6b:aa:68:ab:f0:44:3e:41:98:a1:94:fd:3b:09:91:
84:ea:3e:3c:72:d8:86:ef:56:9c:54:c9:11:8b:db:
e6:f2:05:57:21:26:05:59:15:aa:24:56:97:2c:26:
8d:af:40:88:23:1b:6b:57:ae:95:90:a3:0b:04:ed:
6a:15:6b:11:27:c3:bb:a2:f6:32:e8:01:ae:0c:c5:
62:da:5a:0f:97:58:3f:2d:c2:43:41:ee:30:e2:12:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:69:2B:7F:0C:2F:26:AA:7F:F9:BE:62:27:53:8C:45:5A:D9:DB:58
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/2mkrfwwvJqp_-b5iJ1OMRVrZ21g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.74.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7c:43:fc:a0:5f:f0:c6:47:dd:54:b0:d2:85:bc:ef:53:3a:
c8:66:cb:60:43:8e:f9:d1:41:7e:a3:12:e4:b5:37:0a:a3:2f:
cc:90:47:1a:00:b2:b6:fc:ab:df:f3:6c:dd:a9:18:a2:a3:a8:
27:00:a8:e6:1b:30:8d:36:f3:12:03:12:69:64:c2:4a:70:e2:
c4:62:1a:2a:64:e6:98:20:ea:01:4a:73:5e:ab:e4:6c:96:97:
3f:2c:28:b5:eb:33:35:1e:cb:f5:17:a2:90:65:2c:3c:7a:22:
90:15:33:a4:ed:3c:d3:11:47:fb:bc:6b:e9:8b:51:f8:70:df:
6e:2c:5f:d6:b3:76:76:a9:b4:cc:f3:24:1f:21:70:f2:a4:f5:
d5:f5:0c:7f:d0:b2:30:6d:a6:55:71:58:27:25:3c:4d:93:4f:
18:7e:34:75:0a:f5:6a:85:d8:8b:3e:ec:42:df:24:f1:6c:6c:
45:2d:31:8a:8f:73:a7:81:9a:9d:d9:e6:7f:62:e0:5b:8f:48:
31:33:0b:1e:50:9b:f0:4c:a0:ba:15:eb:bc:ee:a2:9e:92:53:
e3:6a:88:19:60:ee:e6:22:47:78:0a:c7:38:df:ac:6e:29:3c:
89:14:fd:37:3d:47:2d:b7:ce:1e:41:97:4f:35:83:2e:2d:ee:
7e:53:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:57:03 2024 by rpki-client on console-fra.rpki-client.org