Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/xNrxuVb3R1kAjQV-yHaUT8C-4RQ.roa
File: xNrxuVb3R1kAjQV-yHaUT8C-4RQ.roa (raw, json)
Hash identifier: JlFWvsBs89HrOOEtPzOGzUFgF6e1IdpzWQrUWKTMNuE=
Subject key identifier: C4:DA:F1:B9:56:F7:47:59:00:8D:05:7E:C8:76:94:4F:C0:BE:E1:14
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018A3F0D6F14C14FC2AED320CD7F6C02CBB4
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/xNrxuVb3R1kAjQV-yHaUT8C-4RQ.roa
Signing time: Tue 29 Aug 2023 02:09:19 +0000
ROA not before: Tue 29 Aug 2023 02:09:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 93.115.155.0/24 maxlen: 24
86.104.209.0/24 maxlen: 24
217.19.1.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3f:0d:6f:14:c1:4f:c2:ae:d3:20:cd:7f:6c:02:cb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Aug 29 02:09:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4daf1b956f74759008d057ec876944fc0bee114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:30:52:a1:57:2b:45:5c:7b:4f:02:c6:51:
19:01:b3:06:f7:04:0a:3a:b6:4c:b4:14:b2:f1:8e:
55:eb:31:3f:b1:5a:87:50:ec:7d:92:79:03:e9:dc:
81:7b:4e:fe:7f:69:06:3b:f7:72:fb:7c:43:35:cd:
d3:c5:e1:ec:48:6e:81:ac:33:98:73:e4:6f:0b:bf:
86:90:af:e2:4c:17:c3:9d:c3:cc:4f:05:37:05:d4:
90:d4:2a:50:de:a8:43:89:67:ce:23:17:de:d0:35:
04:b2:35:4f:9a:59:69:16:4f:f0:bd:45:05:30:76:
6a:4c:9d:84:b0:7a:5d:4a:2e:22:c1:c2:a6:36:8a:
a8:62:25:93:80:a0:46:e2:c9:18:d2:4c:a9:f4:80:
09:33:f0:b6:b4:ca:c0:c5:a4:12:58:20:41:29:e4:
71:6a:38:30:46:d2:82:a3:f5:e2:9c:00:e8:98:9b:
80:d6:a7:02:e1:58:ab:77:b8:89:8e:e6:63:68:83:
ce:9a:52:c0:e2:59:a0:83:01:fe:f6:4b:85:a1:ed:
9e:30:aa:62:f8:6c:4e:1f:14:db:d9:5e:c3:ee:0f:
37:68:72:a2:d9:cf:83:d5:83:4b:71:26:3a:c6:c6:
c1:ea:19:1f:80:00:f1:ce:d9:70:62:3e:64:6e:59:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:F1:B9:56:F7:47:59:00:8D:05:7E:C8:76:94:4F:C0:BE:E1:14
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/xNrxuVb3R1kAjQV-yHaUT8C-4RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
86.104.209.0/24
93.115.155.0/24
185.77.249.0/24
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3d:d8:45:32:ea:d9:87:bc:b5:8d:9f:6c:62:2e:11:e6:6b:
35:2d:28:eb:c2:74:74:a2:ee:58:2b:0b:c4:1f:d5:ec:ef:29:
cc:c5:97:4a:38:49:f9:02:53:50:43:d5:d4:1c:4d:5f:a1:b6:
06:6a:92:b9:d3:11:05:12:2b:41:f6:29:dd:aa:84:d6:2f:ad:
54:96:73:57:13:5a:d9:e0:54:e6:ef:09:e3:4a:2f:e8:5e:08:
b0:c9:1d:77:2c:08:30:0c:02:b9:0a:8a:96:ee:fb:6b:f7:24:
45:1e:89:ba:9b:26:ab:07:c3:12:7d:2b:2b:b7:f2:fc:05:dd:
56:56:5b:ac:06:12:49:d2:c4:5d:0c:7c:48:fa:a7:d7:cc:26:
33:c1:54:3c:75:37:04:ae:2d:7f:cf:63:a6:17:c6:c9:e1:b4:
1f:96:00:f1:9b:34:1e:60:50:70:9c:fc:53:0d:ca:ac:df:8e:
3a:70:73:27:cc:ee:ac:31:6b:82:e0:3d:b2:ca:54:75:16:05:
80:be:ab:58:94:aa:b6:b3:66:47:f1:85:27:9d:28:4a:43:d4:
6d:ea:01:d8:10:77:0c:8c:0a:ee:40:98:27:90:82:09:f9:3c:
ba:39:fd:bb:cf:8c:9e:88:61:c1:be:52:60:aa:7f:76:71:c0:
4c:e7:c3:7a
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 25 19:42:43 2023 by rpki-client on console-ams.rpki-client.org