Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/MR4WFaZTRgLGqCRylX6m6FyJjdA.roa
File: MR4WFaZTRgLGqCRylX6m6FyJjdA.roa (raw, json)
Hash identifier: TGHQVTQCIGJSAaPP8GHweLm1htAg3kRvyWTc2lNSM24=
Subject key identifier: 31:1E:16:15:A6:53:46:02:C6:A8:24:72:95:7E:A6:E8:5C:89:8D:D0
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01856F022BD74B488EE40E9D1B99EB6778FA
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/MR4WFaZTRgLGqCRylX6m6FyJjdA.roa
Signing time: Sun 01 Jan 2023 20:24:51 +0000
ROA not before: Sun 01 Jan 2023 20:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 84.247.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:2b:d7:4b:48:8e:e4:0e:9d:1b:99:eb:67:78:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 20:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=311e1615a6534602c6a82472957ea6e85c898dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:57:78:b7:ca:b6:25:cb:9c:cc:51:b5:d4:
a9:c7:bb:c5:11:a8:b9:d1:bd:12:27:8f:08:3f:4f:
2f:d2:cf:cb:9c:0f:18:af:94:46:54:d8:d4:91:67:
df:ed:e6:39:2e:25:61:de:33:dc:90:ec:a2:7a:e5:
f2:76:de:07:16:08:3c:fe:19:f2:c3:20:12:7d:bd:
b5:f0:20:a3:ff:d4:59:f3:10:61:88:c9:75:61:25:
90:cd:33:30:09:0c:f0:54:db:8f:24:4a:06:49:1b:
54:61:b8:e2:d9:fc:b0:7a:35:30:e8:3a:82:bb:33:
75:e1:c7:0e:a9:bf:84:05:87:08:9e:6b:57:2e:d1:
1b:02:c0:96:18:e0:2e:cc:e1:89:0e:a4:5b:df:4f:
fd:83:28:8e:4a:d6:d6:4b:7f:ff:02:70:4e:2c:2d:
16:dc:b2:c7:d9:8d:5c:a1:ba:de:db:32:bf:68:ce:
d7:41:81:2a:c5:40:4e:a4:24:7c:26:6b:8f:ee:d2:
5c:78:ee:d0:f5:56:56:cf:29:ef:2a:78:35:65:c2:
d8:04:d3:ff:68:8b:18:fa:9f:aa:88:8b:39:6c:2e:
22:84:88:69:3c:4a:d8:6e:d5:38:41:ca:da:2b:8f:
bc:2f:62:42:3c:35:a8:0e:ac:a7:94:b1:41:65:e2:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1E:16:15:A6:53:46:02:C6:A8:24:72:95:7E:A6:E8:5C:89:8D:D0
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/MR4WFaZTRgLGqCRylX6m6FyJjdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:46:f2:12:44:68:dd:24:78:b0:81:a7:22:ec:ea:00:a2:90:
1c:38:5d:9f:a5:7f:6b:bf:34:97:b8:86:89:47:2f:5e:ff:29:
54:bf:c1:cf:f4:98:c5:6a:3c:3e:bd:f3:66:6d:6d:6e:62:79:
6e:ee:f7:87:31:98:be:d6:23:45:e6:36:2d:2c:b5:69:d5:e7:
1a:90:da:15:98:10:6c:32:a0:73:73:ec:d0:55:d1:7d:2f:d4:
07:f0:5b:54:15:1f:78:85:55:dd:cd:87:56:ad:31:a8:05:c4:
f9:92:4c:be:9f:b0:b5:e6:ec:1c:41:9f:8c:1b:0e:c8:a3:95:
6c:08:8e:0f:3e:fb:e7:a6:a8:ef:45:ad:c9:40:8b:cf:ee:fd:
c9:7d:50:c2:05:25:99:49:c4:f0:82:01:89:56:d3:11:f1:a9:
f2:8b:1c:79:fb:04:6f:1b:d7:62:2f:93:7e:58:5d:f6:90:c5:
05:16:da:84:a8:8f:a4:c7:43:9d:2e:5d:79:db:8b:13:36:49:
3a:81:cd:ea:1d:d3:4b:4d:58:d2:47:48:e0:e5:82:58:07:cb:
51:60:38:a4:81:ee:98:e3:50:b4:7c:6b:7f:30:d9:fb:91:0d:
8b:d2:4e:20:09:f6:38:15:d7:90:3a:ea:72:54:22:49:10:59:
b8:c0:56:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:45 2024 by rpki-client on console-fra.rpki-client.org