Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/40Rb17xWMlmkSBKJ9NYfgZkOGFU.roa
File: 40Rb17xWMlmkSBKJ9NYfgZkOGFU.roa (raw, json)
Hash identifier: URJB2PdRdLasSMHSr6zCUppcw8b146Q0yFgEE9F+qcM=
Subject key identifier: E3:44:5B:D7:BC:56:32:59:A4:48:12:89:F4:D6:1F:81:99:0E:18:55
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188B14B52D2C5759FFB35C7B06B6DEB7BCA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/40Rb17xWMlmkSBKJ9NYfgZkOGFU.roa
Signing time: Mon 12 Jun 2023 20:28:03 +0000
ROA not before: Mon 12 Jun 2023 20:28:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 84.32.56.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b1:4b:52:d2:c5:75:9f:fb:35:c7:b0:6b:6d:eb:7b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 12 20:28:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3445bd7bc563259a4481289f4d61f81990e1855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:44:55:27:ae:c2:37:24:04:8d:b3:ca:bf:84:
f1:03:0e:f4:8e:dc:ea:4e:f1:78:c4:6f:76:be:fb:
ea:ff:9a:d8:e1:3d:4a:94:91:91:77:dd:a0:be:8c:
a3:21:9e:6f:14:91:c4:a6:59:d0:99:ac:86:86:dd:
2a:c6:4b:1d:35:4e:32:9a:5a:a2:27:45:9b:70:b5:
9d:32:65:7f:01:a4:2b:cf:a2:25:7f:8e:e9:84:82:
e2:b0:3a:1a:d3:ce:5a:ec:9d:59:12:86:a2:71:cd:
29:c6:1f:af:6f:24:f7:8f:78:20:b0:ce:c9:b5:5e:
8a:4d:8c:1f:08:63:16:8f:e6:f6:d6:e2:85:16:d1:
6b:59:ee:11:24:b5:09:2d:fc:e0:66:31:d1:29:fa:
28:34:bf:0f:b9:7c:89:21:2a:a0:35:42:a0:ea:e8:
37:e5:cc:ef:37:e0:9f:f6:8e:21:8c:61:f2:b7:f3:
78:2c:41:1a:b4:51:a6:32:c1:65:0b:f7:2b:a2:ad:
66:35:e9:50:b6:00:20:e2:b2:38:78:94:52:f3:7f:
3c:d1:ba:2e:1c:e7:9b:22:cd:e9:d0:8c:48:81:63:
38:73:1d:6e:c1:21:cb:69:ea:c9:02:cd:6a:d9:fa:
2f:84:30:0a:14:14:f3:5d:45:ee:61:c9:a6:bb:42:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:44:5B:D7:BC:56:32:59:A4:48:12:89:F4:D6:1F:81:99:0E:18:55
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/40Rb17xWMlmkSBKJ9NYfgZkOGFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.42.0/24
84.32.56.0/24
84.32.65.0/24
88.216.214.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ce:8e:c3:ac:cc:13:56:ea:5d:cd:a9:8b:66:ed:b4:3f:29:
4e:f2:a6:78:8b:fa:6f:21:c8:8b:1b:69:48:5f:90:9c:1d:8b:
34:d1:1b:d9:d2:6a:e1:c6:4e:aa:a5:2a:bf:1a:47:ea:43:71:
0f:5b:93:2e:7d:f4:87:fe:bc:a0:09:6a:fe:23:dc:a1:62:34:
80:b1:d8:22:53:60:5a:6b:19:72:27:fb:de:c9:46:55:07:7b:
ad:cc:09:ef:38:f2:fe:4a:0f:b8:cb:cb:6e:24:17:a9:b0:33:
b0:75:8c:eb:f7:c3:29:ee:89:e4:c3:77:f3:dc:aa:76:8a:39:
48:3b:46:e9:e8:fc:bb:e4:a8:e2:76:9a:a7:a2:da:c9:23:8f:
f8:85:e9:84:78:8d:82:a9:63:21:47:3c:84:38:5a:86:00:5d:
ee:ea:50:4b:4b:eb:b4:38:89:66:79:2e:ea:2a:3c:d1:80:44:
bb:58:7b:ba:37:2e:2f:7e:18:56:f6:4f:b2:58:6a:e8:53:48:
44:e3:7b:9c:3b:4d:15:03:a6:c6:21:9a:c5:4c:65:80:2a:94:
53:0c:c8:79:f6:c4:8d:51:35:2b:ad:3b:b2:62:e8:e4:d0:52:
2a:33:67:e8:43:34:6f:f1:c1:8a:fa:67:36:24:b4:1a:ea:dc:
36:9d:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:27 2023 by rpki-client on console-ams.rpki-client.org