Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/603O_RZnQJTCM-UU47TmBmgDoiU.roa
File: 603O_RZnQJTCM-UU47TmBmgDoiU.roa (raw, json)
Hash identifier: rM3kwXVWjt8e0RGToguuSTibMhtF1LHVMfvmGrT96qw=
Subject key identifier: EB:4D:CE:FD:16:67:40:94:C2:33:E5:14:E3:B4:E6:06:68:03:A2:25
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186033767494ABB9ED16A03B87286E1D1D2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/603O_RZnQJTCM-UU47TmBmgDoiU.roa
Signing time: Mon 30 Jan 2023 15:06:47 +0000
ROA not before: Mon 30 Jan 2023 15:06:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 84.32.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:37:67:49:4a:bb:9e:d1:6a:03:b8:72:86:e1:d1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 30 15:06:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb4dcefd16674094c233e514e3b4e6066803a225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:62:e4:5f:e7:91:aa:8f:0c:68:72:d7:9b:
03:f4:ec:61:6d:53:1d:4b:07:ec:ba:2c:fd:42:9a:
ea:44:d5:2a:a0:3f:bd:1a:65:c2:18:ca:92:07:a6:
46:74:6e:45:40:9a:43:3e:e4:e8:d8:bd:4e:99:41:
b3:62:6c:03:12:4c:c6:f3:d2:80:39:0f:07:34:54:
8d:1e:d6:0d:40:b4:d3:18:37:d0:c0:c1:20:4f:db:
b2:f0:9c:27:de:95:ed:cb:be:7b:7a:a3:24:a5:ec:
da:82:cb:7a:67:76:59:06:66:7c:33:61:d8:21:27:
20:d9:fe:45:78:76:bb:09:65:e6:0e:a0:35:7f:02:
b0:ef:d5:be:c2:61:00:13:e0:1e:38:b4:25:3d:f2:
66:98:14:4c:4e:d0:71:94:0f:b0:5f:74:17:71:d4:
7c:ed:af:ea:c2:79:c9:a0:3c:93:99:ce:0e:d4:4b:
05:d4:e1:b9:c9:aa:4e:62:c5:00:5a:da:83:de:2f:
70:c4:a6:73:09:af:15:3f:e6:c8:29:f2:36:d7:84:
3e:11:6d:fe:c4:dd:90:d3:e4:7c:55:26:2f:e4:13:
42:91:12:7c:f8:22:34:61:61:25:dc:69:fa:21:76:
a0:10:f4:1b:e2:a9:43:51:97:a9:7e:21:ac:09:53:
92:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4D:CE:FD:16:67:40:94:C2:33:E5:14:E3:B4:E6:06:68:03:A2:25
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/603O_RZnQJTCM-UU47TmBmgDoiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0/24
Signature Algorithm: sha256WithRSAEncryption
33:cb:03:13:4c:37:2f:c0:ae:39:8f:2e:36:23:55:60:e1:81:
27:89:96:c4:5b:38:f1:91:db:27:be:e2:f0:a0:a8:e8:ec:f7:
63:47:7d:e2:9b:f3:89:10:c4:57:43:a6:f7:74:c7:2b:5b:ea:
6d:a2:d0:59:41:4f:54:a2:91:4c:b2:4c:ae:9b:6c:58:0c:fd:
76:0a:45:48:35:aa:e9:e1:62:45:de:17:d4:48:8c:a0:bf:3a:
b1:7a:80:b1:88:7e:89:97:49:4e:25:5e:e6:7a:86:dc:f6:31:
6c:02:d4:90:bb:88:1e:f4:f8:cf:e9:3b:43:d8:ae:9e:3e:c1:
db:d0:82:22:79:e8:41:19:68:2a:da:f7:94:32:cb:f3:33:19:
d8:0b:e0:cc:83:12:0e:b1:76:f4:69:9b:ce:88:84:ba:96:e1:
fa:19:d0:f9:99:5c:e9:c8:e8:45:5c:c1:d5:e2:f0:56:c0:55:
2a:23:ed:89:04:e3:42:bd:7f:a1:ad:0c:a9:be:db:8d:c3:45:
51:b6:92:cb:a6:e3:77:b1:08:2e:a9:55:51:5b:33:b5:3e:a2:
bc:17:92:88:7a:a1:27:84:4c:ef:0a:ec:f9:60:cf:df:8f:66:
20:fa:d0:b6:b4:c3:96:b6:19:4e:74:48:1d:c1:db:6c:94:7a:
7b:81:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:27 2023 by rpki-client on console-ams.rpki-client.org