Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/rKeO-z5OJukI0dKToWCUUVbv12A.roa
File: rKeO-z5OJukI0dKToWCUUVbv12A.roa (raw, json)
Hash identifier: vtuOIxRvSc5w632y+AuSTN3UyrsWSv7tFwnwyjdRR6Q=
Subject key identifier: AC:A7:8E:FB:3E:4E:26:E9:08:D1:D2:93:A1:60:94:51:56:EF:D7:60
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 018BF1A9D81E26DD1090A922B2E3B1319143
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/rKeO-z5OJukI0dKToWCUUVbv12A.roa
Signing time: Tue 21 Nov 2023 11:35:21 +0000
ROA not before: Tue 21 Nov 2023 11:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18345
IP address blocks: 84.239.60.0/24 maxlen: 24
84.239.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:a9:d8:1e:26:dd:10:90:a9:22:b2:e3:b1:31:91:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Nov 21 11:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aca78efb3e4e26e908d1d293a160945156efd760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:b6:d6:96:0c:d2:56:09:33:a8:32:a0:d0:
f4:d4:f3:ad:6c:5f:6f:c7:11:52:46:53:51:cb:14:
be:5f:d5:41:05:52:a0:c1:35:4d:88:a6:dd:73:32:
a6:47:19:e4:7e:83:fd:cf:b4:1c:5b:a9:cc:cf:76:
48:ff:17:fa:50:a6:8a:34:d4:be:1d:7e:f7:dd:eb:
31:34:92:b9:c1:bb:36:58:a1:78:08:6d:92:4f:be:
42:7a:8b:05:81:d7:fd:e8:14:79:3b:a3:d1:16:9a:
dd:94:c5:4f:aa:96:99:22:af:ba:7c:f9:b3:40:f0:
5c:4b:e1:40:14:df:73:dc:9d:84:b0:a4:74:43:bd:
f6:be:54:8c:e3:dd:6d:86:b9:31:42:42:45:9b:c3:
4f:b1:00:ed:af:84:93:d1:62:37:70:3c:36:b2:87:
73:36:73:f6:0b:1e:b1:36:e1:70:f8:76:bd:db:60:
ba:d6:cc:36:67:ce:12:55:d9:77:49:3d:9c:d6:68:
99:92:1d:24:9f:e4:57:f0:e2:fc:48:96:ef:1b:18:
79:59:88:83:9c:13:5b:ee:9d:d0:fc:96:11:8b:5e:
20:2e:ae:b3:62:a1:4e:02:6f:2f:b6:c1:40:b9:76:
57:7a:a1:d2:0d:9a:c5:1f:3a:41:bc:f2:5a:db:b9:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A7:8E:FB:3E:4E:26:E9:08:D1:D2:93:A1:60:94:51:56:EF:D7:60
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/rKeO-z5OJukI0dKToWCUUVbv12A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.60.0/23
Signature Algorithm: sha256WithRSAEncryption
13:9c:12:06:e2:03:e3:e7:cd:bd:78:61:5d:a1:9c:a9:9a:ad:
08:25:3d:9b:bd:8d:26:f3:a8:a0:9b:93:c0:d2:6e:ed:b8:dc:
a4:5d:97:22:bc:ae:67:d1:f6:32:5b:fd:98:ec:e4:f2:0e:f0:
10:41:eb:cb:e3:97:9c:91:7f:c0:11:37:a4:a4:3b:03:d3:59:
e5:04:d9:9f:90:a3:64:fc:99:79:fb:22:59:49:17:7a:c0:c6:
7d:2f:a7:9f:dc:15:3c:4c:7a:66:b0:c2:d7:00:06:de:70:14:
2e:70:9e:56:97:20:bc:2a:c6:3b:0e:9e:39:86:37:08:6b:c0:
cf:d2:d3:cb:22:cc:6a:5f:13:fc:1e:99:7e:8d:51:01:3b:19:
b3:a8:e6:9b:69:fa:c0:9e:4f:b7:c0:30:3f:15:5b:e8:6b:87:
8e:8e:41:7f:c9:45:7a:89:2b:20:a1:56:2f:64:a0:7f:89:06:
fe:ae:24:e5:14:25:b6:77:37:f3:9e:5e:42:43:be:7b:a1:52:
20:16:16:9b:a3:4f:d4:a6:28:ef:c8:56:72:f4:04:be:0a:c5:
40:37:27:c8:70:28:bb:05:39:89:8d:18:04:9b:9c:ea:0f:d4:
15:66:9c:f8:ab:ac:43:6a:49:26:09:58:c2:fa:12:7d:9e:a9:
76:45:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:07 2024 by rpki-client on console-fra.rpki-client.org