Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5GFOVeeV--QQL6zYuzqT8fAoSB8.roa
File: 5GFOVeeV--QQL6zYuzqT8fAoSB8.roa (raw, json)
Hash identifier: Sjxy+WP0o8OZprb8dmt9Bn3BTriXwLihUCVR2riquSY=
Subject key identifier: E4:61:4E:55:E7:95:FB:E4:10:2F:AC:D8:BB:3A:93:F1:F0:28:48:1F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0191130FC0A4AC3ACA140E6C6C493C2A5C0C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5GFOVeeV--QQL6zYuzqT8fAoSB8.roa
Signing time: Fri 02 Aug 2024 12:28:05 +0000
ROA not before: Fri 02 Aug 2024 12:28:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 84.32.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 08:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:0f:c0:a4:ac:3a:ca:14:0e:6c:6c:49:3c:2a:5c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 2 12:28:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4614e55e795fbe4102facd8bb3a93f1f028481f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:08:cf:b3:2f:53:e2:cc:aa:d7:6e:c8:3e:
34:20:8d:c5:09:d5:8c:90:a1:41:9e:9e:06:a2:d8:
72:c1:71:ca:f6:ec:25:e3:56:a6:26:ce:93:41:fb:
b4:e3:e2:a1:ca:68:90:da:77:36:77:6c:73:36:eb:
75:21:71:67:dc:c0:de:10:9d:56:3f:a8:26:77:57:
df:8d:69:dc:8f:28:e9:b1:22:d3:41:c9:7d:22:b7:
e0:3f:31:90:6b:a8:ad:ae:60:10:e7:5b:c1:ad:fd:
85:15:13:59:67:1c:c2:85:c2:85:0c:a6:b9:7a:07:
4d:cc:e8:da:3a:0e:96:e2:54:6d:37:b3:2a:7c:45:
0d:6a:89:11:93:11:1f:e7:5f:f0:14:51:9a:d3:92:
36:4f:4c:29:f8:6b:61:49:2e:95:06:07:8b:1b:0c:
a8:43:c6:fd:11:17:05:95:35:53:00:fe:8d:06:c6:
61:ae:5a:26:00:ca:f7:64:2d:0d:34:8e:60:5c:9f:
43:54:5e:22:dc:3a:68:93:f7:76:ca:f0:b4:e3:bf:
bd:f4:8a:3d:bb:83:ea:5b:9a:f3:22:6c:81:aa:67:
ad:ee:3a:b8:4f:e7:5a:6b:06:78:7f:2f:b7:97:9f:
6e:30:d9:1f:43:d4:8c:65:0c:79:ff:d8:c5:42:7a:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:61:4E:55:E7:95:FB:E4:10:2F:AC:D8:BB:3A:93:F1:F0:28:48:1F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5GFOVeeV--QQL6zYuzqT8fAoSB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.39.0/24
Signature Algorithm: sha256WithRSAEncryption
83:79:28:58:62:6c:43:f4:16:5f:ae:37:bd:7c:38:b2:b9:c5:
3c:6e:76:8b:1d:4a:ba:f8:0b:6f:5d:66:cb:87:b5:d4:14:0a:
10:46:23:1e:db:7e:49:2a:d3:a0:61:6a:a2:65:ce:77:90:85:
85:89:98:53:52:12:95:0f:d5:d6:13:38:72:0c:64:fd:71:b3:
c4:79:04:89:79:57:2d:a0:72:e1:f1:df:7e:da:78:52:db:a1:
25:7b:f7:b5:4f:dd:23:6e:a5:43:80:b6:93:cb:36:df:8b:cb:
a1:ed:76:fd:d7:df:ad:42:ff:42:07:f8:fb:cf:f5:ff:e9:df:
04:c2:b4:84:17:af:93:e9:c3:ca:07:ee:de:60:35:4a:b6:52:
d3:a4:4c:7a:75:1d:ef:94:fe:9f:1e:53:af:27:9b:21:f0:df:
57:ef:2d:6f:bf:4d:fa:31:ce:b2:ff:5f:58:11:a1:46:66:d9:
41:ea:d7:ca:10:df:55:42:3c:30:90:e6:a6:d3:03:17:e9:d0:
8c:a0:1a:fd:cd:cc:ca:c7:a9:78:40:83:78:6e:4c:dd:e4:5f:
c5:66:b7:6a:2e:99:c8:e7:7c:92:47:7d:12:25:5e:f3:78:71:
53:d4:f4:f7:88:c1:d6:c0:8d:b8:6b:d1:86:fa:22:bb:76:24:
cd:b1:82:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org