Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2G_jgZZEBDo_-Yno7lj19h_q0VY.roa
File: 2G_jgZZEBDo_-Yno7lj19h_q0VY.roa (raw, json)
Hash identifier: ip/oYqc115jiIpnk5WNvTNcFT3ZTNQgK3BQ0d3OeVhc=
Subject key identifier: D8:6F:E3:81:96:44:04:3A:3F:F9:89:E8:EE:58:F5:F6:1F:EA:D1:56
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185E7BC4404F005D3D8D5AA8A34299DF6B8
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2G_jgZZEBDo_-Yno7lj19h_q0VY.roa
Signing time: Wed 25 Jan 2023 07:02:33 +0000
ROA not before: Wed 25 Jan 2023 07:02:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 84.32.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Mar 2023 18:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:bc:44:04:f0:05:d3:d8:d5:aa:8a:34:29:9d:f6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 25 07:02:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d86fe3819644043a3ff989e8ee58f5f61fead156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:c8:1b:ba:2d:1b:e6:1d:66:3c:26:b2:ff:
c1:42:36:23:29:a2:30:bf:b6:0a:2c:b3:2d:3a:3c:
0d:15:56:fb:26:12:0b:22:a0:41:c9:54:c3:14:af:
a5:57:19:bb:4c:6a:57:7e:f6:ae:bd:e6:df:bb:3d:
7b:e3:ea:dc:c0:05:cf:08:fe:ca:68:42:cb:10:22:
c9:4e:fe:7c:5c:36:ea:0d:1e:cf:f9:eb:96:0f:54:
bf:4e:40:f7:a6:31:9e:24:32:72:c0:70:3e:87:63:
14:d5:51:d3:68:c2:df:a6:12:86:8d:a5:a1:d4:22:
23:9d:a0:7d:35:3e:48:79:be:e6:53:01:e0:d3:79:
3e:41:93:bd:b4:92:d9:92:af:19:c3:c9:7a:6c:31:
58:a0:aa:e5:c9:73:cc:80:2f:73:aa:8f:2b:07:9f:
a2:6e:3b:f0:68:00:f1:d8:a2:34:00:ab:1d:76:79:
4e:f3:09:01:1e:97:ee:5f:7a:c2:12:00:b8:87:d8:
ca:e9:ae:cf:e4:1a:29:60:2b:ef:4c:93:e2:18:57:
75:31:e9:bf:36:49:b3:9b:c7:fc:10:1d:d7:cd:6a:
d3:47:74:88:1f:f4:78:1d:d0:69:ae:b9:32:8a:aa:
85:af:c4:2c:33:e7:c1:3d:d8:26:ec:ae:a7:e4:11:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6F:E3:81:96:44:04:3A:3F:F9:89:E8:EE:58:F5:F6:1F:EA:D1:56
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2G_jgZZEBDo_-Yno7lj19h_q0VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.69.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c2:63:5d:c8:a8:10:06:e3:c4:41:d8:fb:d2:90:e5:cc:9f:
eb:a5:ed:98:fa:32:ab:21:ec:c7:5a:43:ad:c0:94:bf:9d:88:
87:85:34:6c:97:62:bf:41:b1:fb:d5:44:dd:9d:70:99:4f:4d:
a9:a5:f0:2d:f7:6b:00:fb:24:cb:63:db:4c:b4:b5:c8:5d:0f:
4d:ea:6c:26:3b:cd:ba:02:1e:3b:31:c9:47:77:f2:59:8e:b3:
9e:8c:7e:d2:6c:30:b8:4f:d3:77:34:8e:51:07:c3:e3:63:c3:
78:9b:71:52:43:01:67:8e:ff:2d:43:a2:cb:b0:51:f0:ee:1d:
a8:c9:c0:70:20:b7:b1:3a:5a:5f:14:25:25:79:25:ea:3e:f2:
63:a4:cc:b9:c9:38:97:4b:ce:30:15:11:c0:df:0f:fb:34:c5:
8b:a6:a3:f1:f0:85:e3:ba:7f:f4:d1:e4:e9:52:e3:38:eb:30:
72:0e:7b:88:cd:05:ab:08:7c:39:ee:91:ba:e0:0d:90:15:7c:
5d:59:ca:16:8f:9d:a8:53:ec:f3:79:52:b0:a9:62:68:51:46:
45:87:4f:7d:64:76:75:22:eb:fc:ba:94:37:8c:24:31:2f:bf:
8c:15:e7:fb:58:a8:5b:00:a6:59:34:4d:61:fa:0c:73:a4:45:
26:44:7e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org