Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/6ToqfUzgVWMNJV81eT_n-cxMHMI.roa
File: 6ToqfUzgVWMNJV81eT_n-cxMHMI.roa (raw, json)
Hash identifier: CdKA/37gIWGFoiSrKDGBQGYoFs1f/YiBsx0jlzKebvU=
Subject key identifier: E9:3A:2A:7D:4C:E0:55:63:0D:25:5F:35:79:3F:E7:F9:CC:4C:1C:C2
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01932053E8713018C70F1B936D35C8F16385
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/6ToqfUzgVWMNJV81eT_n-cxMHMI.roa
Signing time: Tue 12 Nov 2024 12:23:09 +0000
ROA not before: Tue 12 Nov 2024 12:23:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 84.239.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:53:e8:71:30:18:c7:0f:1b:93:6d:35:c8:f1:63:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Nov 12 12:23:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e93a2a7d4ce055630d255f35793fe7f9cc4c1cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:6a:a0:bd:89:62:10:d8:f8:69:90:33:6f:
d0:92:af:62:8c:be:e0:8b:88:e5:8f:35:af:27:a6:
07:d2:d8:96:29:7e:3f:88:e9:98:80:c2:1e:fd:1b:
60:eb:30:c7:ab:f6:36:cc:73:c7:3a:10:ec:9b:37:
49:a3:58:a0:5a:59:34:38:f7:1b:0e:b5:b9:0c:ff:
b0:e5:a9:1d:4d:b1:9c:e6:aa:37:e8:36:85:c0:cd:
0a:4f:61:5c:e7:18:9a:1f:60:79:f4:b6:d4:8d:33:
bf:8c:27:28:63:21:77:bf:e9:85:be:d5:ee:de:1e:
bf:7e:d8:d4:cb:d5:87:eb:85:56:f3:b6:8f:2a:1b:
cc:c9:4b:4e:4c:56:1e:7c:f9:7b:25:5e:9a:80:aa:
bf:13:31:da:92:c0:ad:c2:5e:1d:0d:6f:b6:5f:5a:
47:40:1b:71:69:cc:53:5e:99:ed:8a:91:e3:1a:e1:
d5:d4:74:cd:69:cc:40:10:53:92:8c:f4:84:70:75:
68:c2:60:fb:9c:e9:fe:46:32:29:f3:7e:0a:77:c8:
77:53:03:b0:b8:3f:f5:82:13:6d:4a:b6:88:9e:16:
10:46:ad:80:2b:43:14:d8:5c:36:cc:fa:51:72:19:
ca:52:54:73:f3:08:87:95:b9:6e:25:49:58:9b:af:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3A:2A:7D:4C:E0:55:63:0D:25:5F:35:79:3F:E7:F9:CC:4C:1C:C2
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/6ToqfUzgVWMNJV81eT_n-cxMHMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f3:70:8e:bf:0f:ad:ca:59:16:c7:90:db:69:cc:13:8a:bd:
21:aa:96:ea:c0:2d:b9:25:18:7e:09:eb:33:56:f8:b5:73:5f:
f5:bf:0f:73:2a:ff:97:ac:1f:3a:17:a9:c6:dc:48:c0:f2:e5:
d4:b6:ea:39:5b:ab:49:fb:94:d0:db:07:d1:7e:0c:aa:01:04:
81:a7:9e:5e:c1:bc:6c:b4:47:b4:82:25:f2:bc:33:e0:1e:ec:
99:81:44:60:a5:2c:33:6a:50:28:4b:65:33:c5:34:16:04:ea:
47:64:83:a6:04:a4:f4:48:bd:6f:26:e0:19:cf:8e:a4:1d:68:
a9:26:07:36:c7:56:25:cf:42:42:56:e7:e7:21:6c:22:84:29:
4b:98:bd:f7:57:e0:e4:df:71:28:56:8f:57:46:81:b8:37:d5:
59:8b:e9:18:6e:e7:cf:ae:c0:a9:a9:6a:7c:44:af:a5:3c:97:
74:4e:79:47:85:02:f8:42:0a:b3:4f:f4:57:82:ae:98:60:2e:
ff:e2:4d:bb:a3:61:b5:02:f6:f8:a0:c0:99:15:7e:7d:bc:01:
a6:fd:64:5b:f3:fa:9a:9f:12:89:48:62:9f:ae:43:1d:7f:96:
cc:4b:e5:e6:e7:04:21:16:9c:b0:9c:4c:3a:19:51:74:4b:67:
cf:64:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:56 2025 by rpki-client