Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0Qvow8QKdusmS1IO86Q1RZVKUtg.roa
File: 0Qvow8QKdusmS1IO86Q1RZVKUtg.roa (raw, json)
Hash identifier: cNpOxMBItMP+SX7sg4xub2n+23CL/cY9UjtTrAZY/kY=
Subject key identifier: D1:0B:E8:C3:C4:0A:76:EB:26:4B:52:0E:F3:A4:35:45:95:4A:52:D8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AFAD947A97CF71FF3C2AABC34ED770E69
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0Qvow8QKdusmS1IO86Q1RZVKUtg.roa
Signing time: Wed 04 Oct 2023 13:20:58 +0000
ROA not before: Wed 04 Oct 2023 13:20:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 84.32.220.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:d9:47:a9:7c:f7:1f:f3:c2:aa:bc:34:ed:77:0e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 4 13:20:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d10be8c3c40a76eb264b520ef3a43545954a52d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:f3:09:88:09:b4:d1:19:38:0f:14:a0:e8:
ac:b8:80:69:33:30:0c:27:07:fe:3f:50:07:95:d5:
c4:ae:30:34:2a:be:18:51:53:5f:a3:d6:53:26:63:
72:0f:9b:13:dc:a7:a1:f5:7f:02:78:2f:25:0a:dd:
01:9d:c6:c8:01:29:7f:f1:9e:d7:ae:bc:dd:ce:1e:
c3:a4:00:38:50:ca:34:a4:43:f0:58:65:f9:c4:45:
99:ac:b5:c0:ca:31:cc:2a:a6:51:63:bf:ec:1a:a1:
6e:b9:4b:aa:65:5b:83:2a:f6:0b:ce:54:04:f5:9e:
f5:fe:62:1a:fa:4e:2b:6f:ce:27:ca:6e:6d:2d:5f:
bd:31:20:f1:23:87:aa:6a:90:f9:14:d1:bc:c0:b4:
e8:6d:ad:54:0a:2e:bc:cc:a6:92:15:cd:b2:ac:05:
4c:f0:ff:91:a4:50:f4:73:ec:cc:8a:47:7f:7f:43:
7a:ba:df:1a:d2:dc:84:8c:5f:21:68:5a:3c:89:5e:
15:5f:db:05:b8:af:64:4c:e8:72:47:7d:2b:84:bf:
5b:b2:cd:aa:f0:cc:6c:6d:9c:a0:0a:bb:b9:b5:2d:
60:ad:a3:5b:d2:48:aa:12:37:0d:3a:6d:7b:89:1f:
16:3f:ec:2c:da:fc:d6:74:44:a1:0f:dc:86:c4:28:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0B:E8:C3:C4:0A:76:EB:26:4B:52:0E:F3:A4:35:45:95:4A:52:D8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0Qvow8QKdusmS1IO86Q1RZVKUtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.220.0/24
84.32.231.0/24
Signature Algorithm: sha256WithRSAEncryption
23:54:71:c0:6f:b9:6b:35:21:a8:e6:e7:3b:a0:59:c7:c1:70:
27:99:eb:0e:73:9d:82:28:23:78:69:ec:78:24:75:00:ab:a6:
f5:47:fc:c7:ad:6e:85:fd:2d:bd:0b:20:9a:c8:73:f8:4d:f9:
13:e4:61:58:f1:d7:c9:2e:be:f2:f5:c2:dc:f0:c4:72:15:f3:
d5:c2:74:53:9f:c1:53:cc:d5:37:45:f0:e9:6a:4a:67:6e:38:
f8:0d:3e:77:1f:96:c8:01:ae:fd:6e:b5:5d:bc:80:6e:84:f2:
a2:bd:9c:5b:1e:ba:e9:70:ff:08:e9:0e:00:72:0c:90:d6:4f:
2b:39:81:56:51:17:8d:c1:ed:e7:b3:61:2b:bb:a6:87:c2:c8:
ec:8e:32:fb:78:18:20:f4:85:9a:31:e8:ba:39:3d:29:30:22:
e4:60:30:e7:46:5d:e1:1c:84:b9:e3:c0:06:15:57:12:08:ec:
6f:bf:d0:53:41:a0:83:ca:54:99:67:f6:56:2b:d7:a5:6f:86:
1c:e7:7e:76:dd:62:83:5c:bd:31:98:b6:d9:64:52:a6:f2:e8:
c6:c0:7e:f9:ad:d3:fa:c3:5b:2c:d8:00:2f:60:07:63:5b:e6:
84:6e:3b:af:f1:27:53:c5:60:84:81:13:ac:0a:a2:99:a6:fd:
b6:4e:b5:a8
-----BEGIN CERTIFICATE-----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Generated at Sat Oct 7 09:19:07 2023 by rpki-client on console-fra.rpki-client.org