Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/CfQl2eG8yHt6-TaeMaJvE6Urqdc.roa
File: CfQl2eG8yHt6-TaeMaJvE6Urqdc.roa (raw, json)
Hash identifier: FxRtw2f+AecjjJGfSHGl7H+mtwXrGCPTU9T2N3unw1o=
Subject key identifier: 09:F4:25:D9:E1:BC:C8:7B:7A:F9:36:9E:31:A2:6F:13:A5:2B:A9:D7
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 0189D98F5DCA0CF8D7BB75782BE569130B72
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/CfQl2eG8yHt6-TaeMaJvE6Urqdc.roa
Signing time: Wed 09 Aug 2023 09:09:58 +0000
ROA not before: Wed 09 Aug 2023 09:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51905
IP address blocks: 84.19.112.0/24 maxlen: 24
84.19.112.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:8f:5d:ca:0c:f8:d7:bb:75:78:2b:e5:69:13:0b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Aug 9 09:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09f425d9e1bcc87b7af9369e31a26f13a52ba9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:d8:51:72:79:be:1a:af:c2:96:42:41:32:
b1:b5:a5:3e:8d:1d:df:56:d6:de:08:4b:2d:7a:2b:
aa:f4:02:c7:b9:2f:a8:05:70:95:26:b8:45:71:e4:
78:46:0f:76:7d:46:32:53:e5:d8:c0:1a:43:75:b7:
37:6b:41:b5:91:9e:0d:4d:53:f0:02:33:45:50:e5:
3a:80:e8:20:bb:4d:2f:64:ec:b5:ff:e7:f6:b6:c3:
a1:ff:89:16:4e:d6:63:2a:3c:81:87:f6:12:ab:43:
b3:e1:76:15:7b:c8:a8:8e:04:ec:e1:c8:ad:55:0f:
97:ce:52:53:b6:c7:36:35:eb:bd:df:06:1f:5b:2c:
13:16:46:82:88:20:fa:15:6a:30:8e:53:58:1c:0c:
48:4d:b7:54:44:9b:c0:ea:58:a2:ab:a3:09:b8:2e:
76:13:4e:92:67:84:1d:16:df:49:a4:d9:92:65:fc:
a6:e0:08:17:72:28:75:e8:4a:4c:8f:84:56:07:c3:
dd:53:12:08:9b:c3:cb:4b:14:88:05:5b:9a:24:d9:
30:74:7a:24:c0:a1:d2:bd:f9:e7:06:80:6a:28:f7:
c6:37:e0:e5:66:b5:e2:b0:2a:21:62:cd:e4:f2:09:
3e:81:59:e2:ba:1b:da:4a:2d:bd:ce:b2:fb:9a:84:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F4:25:D9:E1:BC:C8:7B:7A:F9:36:9E:31:A2:6F:13:A5:2B:A9:D7
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/CfQl2eG8yHt6-TaeMaJvE6Urqdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.112.0/21
Signature Algorithm: sha256WithRSAEncryption
db:e5:50:4c:9e:c4:ec:45:fd:f6:46:be:dd:2e:29:31:dd:25:
16:ea:5c:b4:56:0a:31:d8:73:bb:db:6f:d1:89:62:3c:df:56:
55:80:1a:a0:fe:c1:ac:19:e6:2a:83:ce:3b:74:81:a6:fc:b7:
0e:94:17:7a:c9:b5:24:cc:67:bc:7d:5e:8b:29:61:0f:3d:42:
33:ee:06:2d:b1:2b:9b:5e:28:5a:dd:45:7d:19:09:fb:b5:f6:
66:f9:04:7e:09:c8:95:e1:f4:5c:ee:8d:64:fd:31:48:bf:4b:
d3:29:ff:44:b3:d1:35:70:8d:27:e4:be:05:2b:93:7b:27:45:
f2:23:58:fc:2b:a4:e6:a7:32:29:93:8e:78:0c:ab:d6:08:03:
16:dd:da:51:58:9a:16:7f:b8:bb:db:d0:33:4b:1c:0f:56:d2:
0c:7f:de:78:a1:c5:5f:70:98:28:8b:85:a0:46:f6:79:09:43:
76:c1:4b:d3:b7:68:9e:65:83:0f:b1:ca:21:b1:d6:74:60:54:
8b:84:57:47:dc:3b:d7:ac:0f:26:89:f6:fb:74:6d:21:57:74:
0b:ef:e7:f1:0d:41:aa:93:17:5c:c5:e2:9f:ad:d5:c6:7a:91:
f5:61:5e:a0:68:80:58:f4:ec:84:4c:84:3d:f0:85:60:f2:6f:
24:7f:42:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:33 2024 by rpki-client on console-fra.rpki-client.org