Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/K547B8-4a62MljtuaxtpH9w-Z70.roa
File: K547B8-4a62MljtuaxtpH9w-Z70.roa (raw, json)
Hash identifier: RStL/QX9i/4FBAMLzBWZPaoQX8spPGrQl/0AyCArtKM=
Subject key identifier: 2B:9E:3B:07:CF:B8:6B:AD:8C:96:3B:6E:6B:1B:69:1F:DC:3E:67:BD
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 018AF05EC7DC12212E0E8120FBA098EBBFA3
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/K547B8-4a62MljtuaxtpH9w-Z70.roa
Signing time: Mon 02 Oct 2023 12:30:57 +0000
ROA not before: Mon 02 Oct 2023 12:30:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 84.239.42.0/24 maxlen: 24
84.239.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:5e:c7:dc:12:21:2e:0e:81:20:fb:a0:98:eb:bf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Oct 2 12:30:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b9e3b07cfb86bad8c963b6e6b1b691fdc3e67bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:f9:15:06:b5:15:de:a0:be:e8:12:0e:51:
dd:9c:c0:83:e3:d1:3a:35:9b:fa:b5:0c:63:12:63:
d9:d1:40:8e:1b:ea:fc:97:d3:ea:ce:f8:64:82:55:
35:04:74:6a:32:d6:df:e4:3a:7e:25:7c:4c:5c:f1:
67:15:b7:16:02:6c:95:3b:cf:ca:8d:00:55:61:f2:
24:88:0a:64:6e:3e:6a:86:c5:00:dd:fe:c2:ea:d3:
24:ed:ce:82:41:a2:dd:7a:00:81:29:97:ca:72:ec:
fd:a5:57:86:20:d0:2a:c3:6f:27:58:7e:4d:8d:ee:
2c:d7:16:86:bf:7b:64:5a:12:a2:55:18:ce:d2:7d:
3e:22:d1:c1:4c:b4:4e:91:27:52:98:de:47:4a:d3:
5b:91:d9:5c:60:96:e7:c4:70:dc:d0:61:0a:b9:e4:
2e:55:06:28:43:aa:26:b2:4b:87:a5:41:a6:10:cd:
b3:29:12:4b:4e:4c:12:63:44:4b:50:69:45:78:da:
cb:9b:bd:f5:ea:a8:71:1c:a1:e1:1b:cf:5c:8a:cf:
40:42:f3:19:d9:a3:76:e6:dc:5b:65:2b:18:70:ba:
fd:fa:87:9c:ea:ac:a2:f9:88:bf:e9:f9:87:3a:50:
2e:63:5c:d5:01:98:53:15:9b:0b:05:45:6b:14:1c:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9E:3B:07:CF:B8:6B:AD:8C:96:3B:6E:6B:1B:69:1F:DC:3E:67:BD
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/K547B8-4a62MljtuaxtpH9w-Z70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.42.0/24
84.239.54.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f2:2c:f7:44:a1:ea:e4:3f:13:a6:83:ac:79:27:c4:64:33:
9a:e4:3d:07:c3:30:71:5b:9f:cf:b9:1a:f7:b0:0f:12:75:29:
a3:2f:72:45:dc:03:cb:7f:47:3c:a7:6f:f1:98:27:cc:a5:55:
cd:56:98:72:d1:f3:bf:83:74:74:db:6c:a8:28:79:d1:e7:1b:
d6:d7:70:4b:78:a7:29:67:51:4a:1e:48:9e:c2:c7:35:b5:ef:
d0:0c:ca:74:b2:58:7e:44:a0:ea:3e:a1:8b:1d:47:78:cf:fa:
da:7b:f2:81:75:6a:d1:62:73:5f:cb:c8:41:d2:ee:51:d6:f0:
28:f8:79:0e:63:9d:cd:69:20:91:c1:1e:13:e0:11:f1:41:94:
a8:bf:81:12:4f:b7:47:9d:e7:8e:02:3c:9e:5e:5c:99:c5:1c:
67:9a:02:29:5d:2d:43:b3:0d:34:4f:64:f8:c2:fd:12:68:71:
a1:bd:46:b5:32:cb:32:53:5a:d7:ce:9f:b5:65:7a:bb:c0:54:
47:f5:c1:ac:7b:ec:f6:e3:fb:90:51:bb:2b:31:a4:e3:2c:ab:
b1:f8:65:42:50:51:7b:9d:c2:a6:26:76:60:4c:ae:41:2d:ce:
85:36:56:3d:fc:03:ac:ce:a7:eb:34:3b:fb:6c:e0:8d:56:a7:
c0:17:e0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:07 2024 by rpki-client on console-fra.rpki-client.org