Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/Y9XwaPTwDMa7ykLhlrEVmpdXuoY.roa
File: Y9XwaPTwDMa7ykLhlrEVmpdXuoY.roa (raw, json)
Hash identifier: B/eC6vXK8vKFKJkY9ZHw2CaHhuG8xZ/mg1jiLeJz7dc=
Subject key identifier: 63:D5:F0:68:F4:F0:0C:C6:BB:CA:42:E1:96:B1:15:9A:97:57:BA:86
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 0185720C8BE0B0FD85E06629732D715BBFDE
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/Y9XwaPTwDMa7ykLhlrEVmpdXuoY.roa
Signing time: Mon 02 Jan 2023 10:35:02 +0000
ROA not before: Mon 02 Jan 2023 10:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51970
IP address blocks: 84.247.22.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:8b:e0:b0:fd:85:e0:66:29:73:2d:71:5b:bf:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Jan 2 10:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63d5f068f4f00cc6bbca42e196b1159a9757ba86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:97:eb:82:86:0d:f4:08:50:64:af:9b:b9:
57:16:2a:f8:47:7b:24:f0:c8:ef:9d:d4:fe:c9:fa:
31:75:c6:b2:ca:d7:1a:d7:1c:49:f8:b0:1d:ff:7c:
3e:2b:6b:1b:b2:c2:2f:64:3b:c7:32:d7:2e:be:e4:
c5:4d:b3:7f:ea:db:59:d2:7f:73:96:e5:43:5c:09:
66:db:e6:37:84:73:ae:f8:3a:79:a2:c3:5b:bf:60:
e1:8f:4e:53:45:12:3d:d3:d7:ad:de:76:bc:94:c8:
ed:b8:a2:f0:9b:b9:3a:94:08:62:d9:f6:7b:b9:02:
19:bd:73:3e:b4:4d:76:0a:dd:44:58:82:92:2e:3c:
d7:cb:d1:4d:4e:a3:ef:15:e5:96:e3:36:9a:62:b3:
0c:d2:84:2b:da:f7:72:e2:39:e7:6e:99:05:f4:ad:
4d:0c:10:78:1f:82:4c:63:55:a5:c5:24:7c:3f:e7:
16:04:fb:1f:73:29:81:61:01:d0:17:3b:ec:b8:ef:
43:fa:ca:12:14:10:68:1b:fe:7e:61:db:cd:86:3b:
d3:7f:bb:87:75:79:56:10:d3:0e:7f:b3:94:df:77:
d9:8d:c7:41:30:78:d8:7d:9b:e0:48:9d:7f:17:b4:
cd:04:b0:5d:c9:14:c3:63:b3:e0:0f:92:48:28:04:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D5:F0:68:F4:F0:0C:C6:BB:CA:42:E1:96:B1:15:9A:97:57:BA:86
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/Y9XwaPTwDMa7ykLhlrEVmpdXuoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.22.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d8:8f:45:50:9a:a4:ae:16:c1:e9:8a:b4:c5:0e:b8:1d:fb:
69:b9:d6:c9:75:cb:34:13:b8:57:aa:5d:43:c3:fb:6d:95:4b:
1f:c6:8d:2a:6e:e4:e2:5d:f9:b3:ed:c2:37:e6:3c:30:86:12:
35:09:b3:1a:61:45:5b:45:6e:7e:fa:0f:cc:87:3c:0c:f9:23:
23:de:4d:94:11:e2:90:91:39:c8:2e:26:62:e6:b0:30:4f:f7:
f3:66:37:97:4d:63:15:5f:f4:82:f6:a0:f7:95:71:5e:b5:9f:
d2:1a:bf:ef:46:8d:60:8d:6a:ad:c5:44:b1:06:d0:d3:99:a7:
2c:72:1e:21:ff:6c:6f:77:52:ed:62:6c:14:e5:d3:ce:7b:29:
a3:7d:35:e0:e2:69:9a:2c:b8:21:ff:dc:dd:fd:d9:e3:2b:86:
1e:ba:86:08:b8:02:c7:a0:45:76:44:0e:ff:a6:e9:08:e9:ce:
88:27:39:c1:38:f7:c9:90:98:16:45:81:0f:f7:e4:1c:97:ad:
43:50:09:09:43:89:f5:f4:84:6e:8a:ce:5b:c4:03:b2:0a:f5:
c3:e3:20:55:94:be:89:52:03:42:d7:85:3d:9e:13:10:56:f0:
5c:9b:f2:20:6e:44:5a:dd:8a:78:80:f7:24:86:60:34:a8:1f:
3e:45:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:10 2024 by rpki-client on console-ams.rpki-client.org