Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/dby883p8voc24BEq9QGoQA1Wzfc.roa
File: dby883p8voc24BEq9QGoQA1Wzfc.roa (raw, json)
Hash identifier: Wgr5Xg8EGDNiWZ9BKRKqdtSDQAa3t1BE+0cyb7ndsDA=
Subject key identifier: 75:BC:BC:F3:7A:7C:BE:87:36:E0:11:2A:F5:01:A8:40:0D:56:CD:F7
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01869A33B6F67B1E9A8BB133A89E450706E5
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/dby883p8voc24BEq9QGoQA1Wzfc.roa
Signing time: Tue 28 Feb 2023 22:45:25 +0000
ROA not before: Tue 28 Feb 2023 22:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 84.239.18.0/24 maxlen: 24
84.239.30.0/24 maxlen: 24
84.239.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 09:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9a:33:b6:f6:7b:1e:9a:8b:b1:33:a8:9e:45:07:06:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Feb 28 22:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75bcbcf37a7cbe8736e0112af501a8400d56cdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bc:8f:87:6c:ce:84:39:fe:07:59:95:e6:9b:
de:a4:45:50:d6:27:3e:a5:06:ce:8c:a2:56:96:33:
5e:d6:3f:75:5e:a5:20:f1:4e:30:9f:06:da:84:a9:
93:2f:a9:6a:65:ee:f7:ba:4d:ae:a9:35:9b:c8:6d:
cd:a5:a4:e9:80:b7:30:28:14:eb:f7:d0:69:61:52:
99:b6:2f:13:03:43:73:1a:cd:6c:9e:0e:49:93:da:
a6:6e:a4:49:26:bc:bd:26:53:9e:d4:41:4c:0b:38:
6e:aa:da:98:a7:e7:fc:06:a5:00:e2:30:51:a3:19:
62:b3:f3:4a:1d:a2:d3:8f:05:8f:a1:0f:31:e8:03:
2e:2a:30:a2:7d:39:e7:6a:88:30:c5:c8:45:ae:aa:
a8:8b:0b:b8:95:54:8b:d7:8c:12:1f:9a:2d:69:ac:
43:16:1a:88:da:d5:b1:2d:64:70:fc:94:b6:63:85:
58:1f:5f:ca:f3:ef:f8:75:53:05:ce:2f:8a:26:13:
ea:e5:95:8d:eb:75:d3:e3:48:47:ad:72:2f:36:ac:
e7:54:1b:1e:6b:b2:d3:88:af:44:71:c9:dc:05:db:
d3:41:38:d4:60:ab:1d:8e:ba:c3:bc:a7:f1:32:5e:
0c:db:43:16:84:0b:a0:24:a5:cf:69:1c:55:75:9b:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BC:BC:F3:7A:7C:BE:87:36:E0:11:2A:F5:01:A8:40:0D:56:CD:F7
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/dby883p8voc24BEq9QGoQA1Wzfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.18.0/24
84.239.29.0-84.239.30.255
Signature Algorithm: sha256WithRSAEncryption
30:bd:06:03:f3:98:b5:ac:38:5d:ba:dc:b0:c1:20:b0:07:ed:
9f:e6:af:ef:49:bf:02:62:b8:6e:40:8b:7a:7a:64:d6:56:fe:
6d:0f:0e:c0:82:e7:bb:cc:71:65:fe:4f:51:4e:33:b5:e2:32:
bd:17:0f:ca:64:45:ef:55:43:1a:f0:31:47:65:7a:4c:61:27:
6f:b1:be:39:40:ed:61:1a:a5:93:a2:f0:4f:f8:e6:7f:92:cc:
db:dc:eb:f1:df:a7:bb:0a:2e:f8:fa:41:29:ae:96:a2:5e:c8:
f3:21:23:2b:12:28:76:cc:71:b1:37:b5:52:84:e4:e7:5a:e5:
9a:09:a2:64:7b:2c:2d:30:5b:e7:6f:57:81:94:23:10:1d:75:
9f:0e:9a:d1:0e:e5:32:83:24:17:02:b5:00:7d:e3:85:84:da:
35:98:e1:40:5f:74:26:ee:a8:39:9f:45:a1:e0:45:99:a7:25:
be:8a:17:5c:88:67:29:fd:f5:d4:fd:16:0a:6a:64:e6:e7:1f:
73:b4:ee:bb:43:66:ea:e8:d3:e1:43:43:85:6f:8f:21:14:b4:
a4:c3:56:ed:69:04:a2:85:aa:be:55:35:4a:79:79:f6:d5:38:
6c:2f:f1:fe:39:84:e7:96:5c:d1:ed:07:a8:26:9d:4a:89:8d:
89:bb:f0:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:54 2024 by rpki-client on console-ams.rpki-client.org