Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/RIQJdsAFhtBNV95CEbLOhCySxDg.roa
File: RIQJdsAFhtBNV95CEbLOhCySxDg.roa (raw, json)
Hash identifier: /h32ktyZXFekbuTDJ+f+8/5v0yZtW1GJn8cdh1bOegw=
Subject key identifier: 44:84:09:76:C0:05:86:D0:4D:57:DE:42:11:B2:CE:84:2C:92:C4:38
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01869A7EC9E8969F13F6CD5D276433465197
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/RIQJdsAFhtBNV95CEbLOhCySxDg.roa
Signing time: Wed 01 Mar 2023 00:07:25 +0000
ROA not before: Wed 01 Mar 2023 00:07:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 84.239.43.0/24 maxlen: 24
84.239.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 09:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9a:7e:c9:e8:96:9f:13:f6:cd:5d:27:64:33:46:51:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Mar 1 00:07:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44840976c00586d04d57de4211b2ce842c92c438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:a2:71:96:a9:91:b6:05:db:34:80:3e:b5:
93:f3:1f:11:cb:e3:ff:d5:12:20:f3:5c:d1:f5:ee:
3d:9f:f3:8e:b5:0d:a3:ae:02:0c:f6:fe:d9:fd:5a:
00:40:96:83:cb:ac:c5:38:9e:20:63:fa:33:a2:9d:
66:4d:3b:0a:e1:06:76:bf:91:3a:f8:f1:b3:5b:9c:
db:a1:99:d9:39:1d:b3:4c:ea:33:8e:f1:49:db:dc:
d2:c4:dc:88:aa:31:9b:ed:0a:c2:9e:b0:f5:41:3d:
04:80:c9:3c:4e:72:ba:a8:28:ad:fd:6d:ec:b3:14:
cc:b3:60:4d:ed:88:07:31:e4:7e:a5:f5:f2:3e:0b:
55:26:48:b0:96:c2:36:5e:e9:0a:d2:3c:df:81:9c:
da:72:8e:9a:8b:35:80:8f:fe:30:26:1c:55:c6:e9:
b9:60:51:bd:ab:95:09:eb:20:a5:bd:56:bc:69:a8:
02:91:6e:0f:52:24:d3:ba:fa:4e:a0:43:05:aa:f0:
81:84:98:c8:e5:e7:b6:91:73:80:1c:f3:86:72:34:
ed:44:f8:e2:87:a6:a2:b7:2b:3b:43:20:2a:05:2f:
3c:a4:b0:7b:ad:62:43:8f:16:07:23:ad:56:2f:87:
88:50:f4:81:70:92:8b:c5:5b:0b:47:79:dd:3e:fe:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:84:09:76:C0:05:86:D0:4D:57:DE:42:11:B2:CE:84:2C:92:C4:38
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/RIQJdsAFhtBNV95CEbLOhCySxDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.42.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:fc:3d:bd:72:b8:0d:5f:db:1c:09:0f:d7:9b:99:36:60:63:
02:8a:bc:2d:4e:42:28:61:92:ea:9b:b7:5c:40:e1:c2:3a:19:
39:11:46:79:19:f7:d4:dd:8c:57:74:59:da:5f:15:2d:35:80:
6a:b0:72:5f:90:82:f8:c7:27:95:fb:b7:6c:99:8d:e7:8d:7e:
0c:0f:bb:0f:42:b1:90:3f:5a:5c:77:c5:1b:6e:d6:05:18:df:
d5:f3:81:ac:40:03:d5:0c:c0:9c:83:95:b4:b0:2c:bc:09:1d:
60:2f:d6:26:93:0b:b7:da:d2:01:61:d0:41:9f:dd:fb:c5:8d:
06:03:7e:2a:48:e8:93:76:43:da:97:b3:d4:33:37:29:20:86:
60:7c:98:0f:4f:05:aa:66:2f:64:c4:f5:b1:60:c8:fc:97:4f:
60:f6:14:a7:32:5e:ae:f9:8a:c7:dd:91:d0:8c:e4:f0:37:26:
22:81:9c:5c:1a:d1:98:44:6c:37:ed:1c:70:ef:15:0e:a5:4a:
cf:0d:7f:99:91:ae:c5:bb:6a:f5:e2:8a:9d:81:d1:62:73:a6:
c9:a9:42:f5:45:3b:85:12:ae:82:c0:17:e2:33:c9:e2:02:ab:
84:00:aa:36:58:a2:ae:0e:a8:7b:46:8e:2d:e3:cf:bc:11:02:
d6:aa:b6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:54 2024 by rpki-client on console-ams.rpki-client.org