Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-z_tpoey6JZ958cV-pW05VpKZpQ.roa
File: 1-z_tpoey6JZ958cV-pW05VpKZpQ.roa (raw, json)
Hash identifier: NOa3neOTC3XcfRZx9FKENeuMjcoYTa+gX32bjyhrNnU=
Subject key identifier: FB:3F:ED:A6:87:B2:E8:96:7D:E7:C7:15:FA:95:B4:E5:5A:4A:66:94
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFC6BBA9D001690351929A5538C450
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-z_tpoey6JZ958cV-pW05VpKZpQ.roa
Signing time: Sun 01 Jan 2023 18:54:51 +0000
ROA not before: Sun 01 Jan 2023 18:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 84.32.62.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jan 2023 07:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:c6:bb:a9:d0:01:69:03:51:92:9a:55:38:c4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb3feda687b2e8967de7c715fa95b4e55a4a6694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:8d:d0:24:ec:02:ac:24:63:0f:fb:f1:90:
a3:36:ef:1a:e7:04:cd:6f:02:3d:28:a6:a6:f9:5b:
38:e7:ce:e1:33:04:04:3f:8e:50:6c:ca:e2:84:61:
d1:97:ce:f4:59:36:eb:b4:ec:a9:72:12:e3:fa:89:
28:de:f8:76:3f:68:53:53:ac:f3:fb:4f:69:85:24:
3c:1d:38:14:ed:3e:dc:cb:41:fc:8b:79:d5:11:6c:
6b:bc:c4:9d:e5:1a:9f:b6:4f:0b:b1:1f:65:dc:4d:
54:92:88:4c:a7:4b:aa:0f:0b:01:46:fd:a7:f3:3c:
22:49:bc:6d:26:08:aa:8f:7a:c1:e1:05:3a:a4:35:
c9:9e:fb:30:9a:4b:ef:52:59:7d:b1:d8:a9:df:fc:
1f:b2:cc:53:5b:ad:4f:5a:14:96:0a:b5:9e:40:03:
2c:bf:62:9c:07:6e:cd:2e:27:e1:0d:1f:26:ec:28:
48:ad:4a:89:ee:a4:43:88:c4:ba:03:5e:a2:93:6b:
d7:39:5d:ce:f8:a2:7a:f8:1c:4e:13:6e:82:7a:77:
69:e7:fa:83:e8:7d:b4:93:08:46:92:46:f6:4f:9f:
65:fd:55:d6:cc:5b:9d:ca:3e:67:8b:38:a9:61:2a:
d2:e2:93:08:a9:71:f9:bf:3c:7a:58:35:16:60:3c:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3F:ED:A6:87:B2:E8:96:7D:E7:C7:15:FA:95:B4:E5:5A:4A:66:94
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-z_tpoey6JZ958cV-pW05VpKZpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.62.0/24
84.32.83.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:72:f5:94:a5:0a:4d:31:4f:c9:82:2b:31:fa:0c:48:61:bd:
83:6c:5c:67:a3:4f:aa:3c:c0:52:3c:5f:3a:b3:2a:fb:3f:95:
53:5b:6d:2e:fc:52:f8:e9:6a:1f:7a:97:a6:a5:5e:96:a4:56:
7f:14:de:62:2d:a5:ff:5f:4b:28:f2:79:bc:62:5a:95:39:bb:
dd:8e:24:fe:ef:19:02:6f:f2:2c:e2:45:39:94:23:10:84:46:
7f:91:23:ab:65:b7:da:95:e8:6d:63:1c:c2:58:95:3b:9a:bf:
81:78:52:aa:c2:46:d5:49:8f:8e:d5:73:44:d6:2a:5a:b1:cc:
e0:5e:f6:8c:ba:f8:51:4c:c7:b2:62:46:7a:aa:f7:20:77:3e:
c8:7a:02:7d:ab:9a:2a:6b:ff:6c:d8:e7:89:87:65:68:c5:4d:
33:c5:6f:df:b4:6c:9b:17:c4:99:fc:0f:63:b9:cf:96:40:6b:
53:a8:6f:e7:cb:a5:21:dc:49:eb:3e:4e:a0:c1:5b:e3:d8:4f:
1f:37:fd:65:c6:8e:24:79:2b:6e:fe:31:5e:fb:72:d7:2f:4b:
b1:d2:0b:96:f6:42:39:30:fd:98:df:1c:64:98:e0:30:68:19:
87:ca:7c:60:33:d0:db:4b:a1:b2:ef:ac:ad:0e:34:ed:cd:68:
2a:f9:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org