Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/5FhrPjVTdWXcfHwDCST_t281jf8.roa
File: 5FhrPjVTdWXcfHwDCST_t281jf8.roa (raw, json)
Hash identifier: XI5bBYgJxTgGMDc9JNl8+JPMS0dPVC82b6MHm+q5CWY=
Subject key identifier: E4:58:6B:3E:35:53:75:65:DC:7C:7C:03:09:24:FF:B7:6F:35:8D:FF
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01931AB876F624402158D04A605828A27340
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/5FhrPjVTdWXcfHwDCST_t281jf8.roa
Signing time: Mon 11 Nov 2024 10:15:16 +0000
ROA not before: Mon 11 Nov 2024 10:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 84.239.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:b8:76:f6:24:40:21:58:d0:4a:60:58:28:a2:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Nov 11 10:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4586b3e35537565dc7c7c030924ffb76f358dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:31:2f:19:1a:bd:d9:f4:d7:2e:a2:27:2d:e0:
9e:04:22:30:ee:90:aa:e6:a7:93:a3:46:93:2c:5e:
b1:45:3f:5d:50:c2:0f:2b:9d:2e:6c:52:df:42:2c:
9a:36:ca:70:79:5f:d0:9f:4f:5a:55:9b:b1:98:3a:
5c:a3:db:81:bb:71:6d:77:f3:4e:3e:31:51:48:4b:
f1:13:82:19:33:53:ce:79:40:85:84:14:85:9d:ad:
7d:ef:c7:53:11:78:b3:ac:6b:9f:3d:0f:81:6e:d5:
46:af:59:55:10:43:86:e9:e0:b1:19:c6:6c:ed:07:
3a:16:be:db:55:4b:c2:51:ba:fa:53:29:51:87:6d:
82:20:64:65:d8:fd:41:60:5a:49:65:df:8d:bd:cd:
3c:47:d5:5a:c5:d9:3a:f4:70:30:c0:78:4c:11:d5:
6c:3d:a0:16:53:44:07:5a:76:b3:62:4d:c5:1b:41:
83:55:c4:85:bf:3a:41:a9:ec:e7:d3:36:55:3c:16:
dc:b9:2f:4d:df:25:99:06:0f:dd:fd:bc:4e:2a:1e:
42:55:17:d7:d8:d5:65:e9:f7:e0:4a:6c:00:5b:7d:
fd:6c:45:96:24:2b:1e:56:2f:b0:71:b1:e0:24:a2:
af:7b:8f:4e:a5:0b:04:33:42:5e:8f:d9:15:15:fa:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:6B:3E:35:53:75:65:DC:7C:7C:03:09:24:FF:B7:6F:35:8D:FF
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/5FhrPjVTdWXcfHwDCST_t281jf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.61.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b4:45:2d:ce:e9:58:17:11:00:41:af:77:95:32:ad:24:5c:
34:65:d8:1d:73:39:1e:81:8d:28:2a:8c:3c:73:a6:f1:df:24:
d2:07:5d:53:17:e4:ae:31:21:4c:55:d2:2a:b7:d1:47:c3:79:
c0:04:f0:58:a2:ce:06:29:82:ee:fe:60:fa:00:66:f4:6b:ee:
d1:de:91:71:32:36:75:b6:93:57:fb:df:ab:dd:6e:4a:e8:9b:
96:51:d9:54:2d:94:64:2c:21:47:1f:93:ef:14:aa:0f:98:fb:
0d:ef:cf:b7:9c:c5:2a:a9:bc:dd:cb:47:66:67:5b:2d:4e:8c:
1c:63:4b:f5:02:3b:df:ea:cb:33:0d:11:02:e7:3a:20:cc:c7:
3d:f2:c0:86:da:83:b9:25:97:2f:5b:f3:65:b5:f6:c8:52:0d:
7d:23:58:bf:b4:97:b5:20:c6:9a:d4:6d:84:e0:79:01:2e:5c:
e0:56:1d:86:89:90:05:56:04:f9:9a:b3:77:fc:d8:0e:8c:76:
e4:c1:b2:24:20:bb:0d:f4:1d:31:93:cb:cc:d3:e3:02:37:bc:
27:f0:e5:6d:16:85:f4:98:5c:61:d4:6f:c0:1d:d7:0d:78:da:
82:6f:32:55:22:0e:34:ad:15:8a:a9:34:c8:a6:01:0e:6f:3a:
04:64:cc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:03 2025 by rpki-client