Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6_Hzzp8nomSeq8dFV6whsW8f8sw.roa
File: 6_Hzzp8nomSeq8dFV6whsW8f8sw.roa (raw, json)
Hash identifier: JEELZ2dxcx8kv1vPIO+xACin4S2g2D8vAFy2VoHrDL8=
Subject key identifier: EB:F1:F3:CE:9F:27:A2:64:9E:AB:C7:45:57:AC:21:B1:6F:1F:F2:CC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185CB38035902249A89A94E48D9762025F5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6_Hzzp8nomSeq8dFV6whsW8f8sw.roa
Signing time: Thu 19 Jan 2023 18:08:43 +0000
ROA not before: Thu 19 Jan 2023 18:08:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 84.32.224.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Mar 2023 07:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cb:38:03:59:02:24:9a:89:a9:4e:48:d9:76:20:25:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 19 18:08:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebf1f3ce9f27a2649eabc74557ac21b16f1ff2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:9f:ee:92:61:5f:7b:20:8d:fc:b2:53:21:
04:a9:88:3c:2a:8a:1d:32:43:b2:e1:89:a9:28:9c:
3e:ad:35:30:3c:92:4f:ed:62:4c:fa:f9:a0:f4:1d:
c5:88:6d:a9:ce:fb:28:ce:d5:ca:7c:3a:76:79:a7:
01:24:62:9d:55:9b:65:47:03:5b:17:9e:4a:9b:8c:
c5:84:ad:97:92:e2:17:c5:ce:f6:25:57:09:a8:d0:
5a:fd:ad:d4:1d:bc:17:f9:a0:1a:4a:d8:75:b6:26:
74:f4:66:19:70:14:61:de:27:d1:f6:b2:eb:c8:7d:
8d:6b:da:42:49:8c:27:cf:56:2f:d8:eb:c8:d7:6d:
12:c9:98:4b:8a:56:54:56:37:ec:ca:43:c7:59:20:
65:1e:94:c4:4d:e6:07:4f:8f:62:9f:af:d2:ba:14:
9f:48:f5:13:17:a8:80:ee:68:13:1c:db:d7:bd:2f:
bf:64:23:17:21:5e:cb:37:e6:5a:f5:af:13:a4:db:
b1:a9:49:27:bc:e9:e9:83:48:31:9a:40:50:1d:8d:
9c:12:bc:03:38:46:d7:65:3b:d2:50:cc:bb:84:80:
83:91:5a:ee:f8:bc:ad:f4:81:08:43:46:f7:86:ef:
12:1f:9d:03:1e:17:f5:dc:1c:08:3d:e2:d9:5d:e7:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F1:F3:CE:9F:27:A2:64:9E:AB:C7:45:57:AC:21:B1:6F:1F:F2:CC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6_Hzzp8nomSeq8dFV6whsW8f8sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.222.0/24
84.32.224.0/24
Signature Algorithm: sha256WithRSAEncryption
46:58:68:85:2e:40:ca:c3:c2:b6:28:dc:4a:bd:7d:f4:6d:63:
9c:b6:9f:d4:27:90:3b:35:61:9e:3a:b8:19:b2:cb:7c:97:b0:
94:fc:52:86:a3:1b:8b:17:81:a6:9a:06:0c:ea:2a:d1:20:4c:
7a:7f:ff:88:d5:b8:58:23:0f:f6:bc:03:21:1c:c8:1a:f0:c6:
62:69:50:22:ed:90:22:44:e6:75:a2:11:7a:7f:71:e2:3f:42:
6a:8e:94:2d:24:3b:ee:9b:d5:98:20:77:f9:30:54:1b:95:74:
5e:27:0b:58:4d:96:23:97:01:bd:cc:4e:02:04:50:32:fc:47:
21:43:63:17:61:65:15:fb:dc:5e:0c:f8:d4:91:6d:b6:aa:92:
c1:71:44:c9:e4:e9:ed:fb:8c:d1:0b:47:7d:c7:7d:dc:05:b2:
a0:90:af:fa:a4:1e:43:b8:08:9e:26:4e:8b:52:fe:ce:00:8d:
69:08:f4:74:76:fa:fa:1f:d9:c5:bd:4a:36:d8:dd:12:d6:59:
28:99:7f:27:e2:91:57:db:6b:1f:ba:cc:d7:96:31:42:6f:4b:
b1:a4:ab:07:7b:7e:9c:98:1d:0d:28:5f:4f:3e:8a:2c:73:c3:
0c:79:f2:2e:1a:9f:a6:46:22:42:71:f5:81:c5:57:e1:1e:80:
7d:2d:22:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org