Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/XDvcFPdSNZfs8gJ9OJ7XXhMpKOA.roa
File: XDvcFPdSNZfs8gJ9OJ7XXhMpKOA.roa (raw, json)
Hash identifier: hdro5M8FF9pEfQab6snUN2jBK4Da1+4tTKGqQDJ4ZrA=
Subject key identifier: 5C:3B:DC:14:F7:52:35:97:EC:F2:02:7D:38:9E:D7:5E:13:29:28:E0
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 0189699A4BBE7BBB0D6E984F1E067290D263
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/XDvcFPdSNZfs8gJ9OJ7XXhMpKOA.roa
Signing time: Tue 18 Jul 2023 15:24:26 +0000
ROA not before: Tue 18 Jul 2023 15:24:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51905
IP address blocks: 84.19.112.0/24 maxlen: 24
84.19.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 09 Aug 2023 09:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:69:9a:4b:be:7b:bb:0d:6e:98:4f:1e:06:72:90:d2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Jul 18 15:24:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c3bdc14f7523597ecf2027d389ed75e132928e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:4f:e0:92:dd:ad:6e:93:1f:69:6d:d0:b3:
2b:14:f5:b6:d7:a0:e6:5a:98:88:5c:c0:89:c2:ef:
01:88:d2:c8:5f:88:a2:80:d5:14:9a:dd:ec:ec:e6:
4e:fa:fc:6f:fe:b6:0f:fc:5c:ee:2e:08:db:59:a9:
89:fc:a5:ce:37:29:0c:02:9b:ff:f6:78:c4:c5:70:
7e:4f:a3:79:08:b6:13:16:05:13:69:8e:94:19:82:
32:de:7f:cd:cd:46:68:2c:ac:00:e7:8b:24:04:76:
1f:a7:59:7a:46:f6:62:22:0f:67:dc:24:01:b0:5e:
92:16:a2:2a:10:a8:26:72:b0:06:86:da:c8:72:28:
08:aa:7f:ed:9a:8e:63:05:34:98:a1:c8:92:bc:18:
48:03:be:84:42:49:6a:d4:1b:3c:d2:d8:85:31:13:
0f:89:8b:ee:5e:5f:5c:39:af:fd:64:81:86:7a:ef:
29:84:5e:6e:d3:75:cc:e4:51:a9:74:92:a9:f7:3c:
4b:78:d6:6b:39:a7:22:95:a4:c5:5b:f1:05:a9:73:
1f:e5:d5:d1:ad:9c:cd:21:59:73:fe:63:51:84:4c:
12:2b:43:48:58:5a:14:22:ff:a3:8d:f1:b9:87:d1:
d3:87:f3:99:d4:c3:af:ee:66:ae:f9:d6:0b:cc:12:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3B:DC:14:F7:52:35:97:EC:F2:02:7D:38:9E:D7:5E:13:29:28:E0
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/XDvcFPdSNZfs8gJ9OJ7XXhMpKOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:b2:a8:ed:a3:81:a8:9f:73:56:8b:07:9f:ca:c3:51:94:8f:
0b:c3:12:c7:7b:a4:84:43:1b:61:5d:61:ad:10:d2:d5:dc:ad:
4f:a0:46:3a:30:2a:94:73:79:c1:b9:df:48:7b:32:ef:ca:22:
39:53:27:2e:10:2e:9f:43:00:eb:b7:07:0a:04:8a:75:16:5c:
bf:e4:81:3b:8b:8c:b8:c2:b2:f7:37:58:a8:a0:2e:ef:da:c8:
33:66:40:dd:ad:d7:73:d5:32:c9:7f:cf:7a:c8:a6:88:82:45:
13:94:ae:3c:93:18:51:28:98:57:a1:4a:ce:4a:36:d2:dc:c7:
e0:8b:0a:33:ab:74:e4:17:ff:df:03:3c:89:18:b2:06:aa:a6:
44:12:55:44:fb:4c:42:a3:0f:df:d0:d7:e2:69:c4:81:34:67:
1b:85:62:ec:45:5c:fd:ab:0e:89:0f:22:c0:b9:14:3c:40:c4:
74:7a:66:2b:92:14:e8:f3:c9:34:a8:18:ad:51:81:bf:d8:83:
f3:2b:85:ce:14:3c:e9:1d:b3:9b:f7:0a:37:bc:b5:d9:40:47:
98:2a:dc:2f:17:2a:5c:0c:60:d1:ab:87:68:91:2a:30:23:c9:
7d:c8:06:1a:ab:cc:e4:aa:49:77:50:e5:14:e7:07:89:0e:e7:
e1:16:e6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:32 2024 by rpki-client on console-ams.rpki-client.org