Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/izLJMATySq4LQhi10o10zl91voQ.roa
File: izLJMATySq4LQhi10o10zl91voQ.roa (raw, json)
Hash identifier: J4C1AXV62h6SMUS+XQNwcFjsP11Akb3MM2H36bAoxlw=
Subject key identifier: 8B:32:C9:30:04:F2:4A:AE:0B:42:18:B5:D2:8D:74:CE:5F:75:BE:84
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0192C2D736B08CC89CCECAB07ADE5699F31E
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/izLJMATySq4LQhi10o10zl91voQ.roa
Signing time: Fri 25 Oct 2024 08:42:16 +0000
ROA not before: Fri 25 Oct 2024 08:42:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 84.239.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 10:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c2:d7:36:b0:8c:c8:9c:ce:ca:b0:7a:de:56:99:f3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Oct 25 08:42:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b32c93004f24aae0b4218b5d28d74ce5f75be84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:93:c3:cd:7b:ee:51:17:7b:fc:ef:b6:2d:
0f:54:ac:38:46:f5:1d:39:d3:0b:dd:3a:ac:79:4f:
a5:a8:f9:ab:3c:a5:df:96:d6:9a:8c:cd:ea:ee:93:
8c:03:7d:22:03:fc:8c:ca:ba:77:47:fe:6f:48:dd:
c9:85:b1:68:81:3d:d4:8e:5d:3c:25:1c:4b:2c:a4:
d8:21:09:0c:9f:c3:8d:52:66:cb:eb:c1:c0:7c:43:
7a:10:44:f5:b2:89:a0:0e:51:6d:2e:90:62:e9:2c:
f3:1c:f6:b4:c1:5f:25:1a:b5:f5:c3:69:77:5e:1d:
1f:ad:90:4f:4b:bc:f6:d3:13:77:f6:35:52:10:37:
e3:ff:ea:17:a7:d7:01:26:97:e4:52:2c:41:96:29:
2e:6b:34:fa:48:1e:cf:4e:b3:9c:83:d5:15:e0:57:
ca:a3:a8:1c:c6:54:b0:e4:95:e4:bb:3a:65:da:e4:
95:7f:9f:9f:83:46:b6:be:df:07:24:ee:9f:48:7b:
30:39:8f:43:1f:c9:cc:99:1a:4a:c3:84:23:dc:a7:
04:ce:b9:1b:13:88:03:f3:54:da:70:19:1a:c1:0c:
a2:48:1f:52:f8:e4:72:a6:c9:35:07:1e:8e:00:91:
4f:df:07:54:a0:28:4b:8c:00:f8:ee:51:05:4b:85:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:32:C9:30:04:F2:4A:AE:0B:42:18:B5:D2:8D:74:CE:5F:75:BE:84
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/izLJMATySq4LQhi10o10zl91voQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e9:51:53:7a:fa:27:ee:f9:38:36:c5:61:5b:8a:36:48:22:
5a:3f:81:11:c7:49:ac:b7:8a:df:59:07:9a:9c:35:9e:59:eb:
59:76:fb:2d:c4:1c:9f:bb:be:63:1d:9d:38:59:8f:e5:d1:f5:
f1:9c:7f:ca:b0:e5:ed:60:03:48:44:1c:66:75:eb:61:ae:a4:
b7:12:93:3c:64:ba:64:67:31:99:5c:ef:b2:1e:f4:47:30:b2:
30:9b:0b:90:c5:42:84:b8:67:39:9a:8d:6f:0b:e5:83:e3:aa:
49:e1:fa:15:87:35:49:9f:a7:9a:69:5a:f4:d9:2a:15:41:7d:
95:aa:bc:9e:bd:de:01:7a:d0:3b:9a:63:77:52:25:02:95:34:
25:5a:69:33:38:07:7c:a8:43:2f:de:d7:a2:2c:6f:8e:c9:0c:
55:9b:36:34:cd:d2:42:d5:7b:33:05:dd:d9:eb:1e:81:bd:ed:
a2:13:65:f6:53:8e:d3:fa:f2:c6:18:69:6b:a0:f6:78:e9:65:
cf:de:cf:a1:f8:99:07:8e:e1:11:72:4b:b2:2a:0c:a8:13:5d:
33:13:3c:0d:7d:85:2a:9c:7e:cb:ca:f5:b4:7b:09:6e:24:11:
57:a8:fc:62:28:c1:81:66:a1:68:0a:51:0c:cf:68:5c:95:94:
e3:74:ea:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:49 2025 by rpki-client