Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6bms5Vp9gGdtCgKCM2cGnxZAy3I.roa
File: 6bms5Vp9gGdtCgKCM2cGnxZAy3I.roa (raw, json)
Hash identifier: XzNcZDe0k1cZr0KugaXElvo9rL1tQvv+TJxhEjmfGI4=
Subject key identifier: E9:B9:AC:E5:5A:7D:80:67:6D:0A:02:82:33:67:06:9F:16:40:CB:72
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01889A3FCC7C09926DD6E95B45B11FAC0FC1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6bms5Vp9gGdtCgKCM2cGnxZAy3I.roa
Signing time: Thu 08 Jun 2023 09:04:12 +0000
ROA not before: Thu 08 Jun 2023 09:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43043
IP address blocks: 84.32.61.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.11.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jul 2023 12:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:3f:cc:7c:09:92:6d:d6:e9:5b:45:b1:1f:ac:0f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 8 09:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9b9ace55a7d80676d0a02823367069f1640cb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:61:fe:83:67:52:f1:21:39:27:c1:b4:92:
8a:4b:b8:e9:d3:53:de:22:d3:52:b1:de:3c:dd:cb:
83:96:21:d6:cf:f8:65:2d:3a:f8:ae:3c:9c:8e:e4:
46:9b:fc:2b:46:f3:59:3a:2b:d6:4c:35:f2:99:56:
32:8f:40:aa:6b:3c:e7:64:be:7f:de:75:5f:a1:0b:
6f:3f:37:1a:36:36:93:ff:04:b8:f2:a5:26:64:90:
56:42:fa:1b:c5:52:be:81:e6:85:13:9a:7b:05:8c:
43:14:29:6a:55:7b:65:26:48:07:bd:43:29:62:75:
85:7a:c9:0d:9f:d8:38:9c:d7:30:46:5e:4d:4b:71:
47:92:ad:48:be:a7:a6:cf:3e:a3:d3:91:f7:54:b6:
4d:11:77:e6:5f:45:f8:ae:01:6f:4d:0c:78:0b:5b:
b3:23:6c:db:4d:03:a5:60:4c:1b:88:1a:f1:66:34:
51:2b:d6:cd:38:c5:a7:9f:3d:4e:0e:dd:76:68:2a:
1c:2e:a2:08:39:69:86:75:37:54:67:3e:b9:30:28:
6e:cd:51:b2:5e:24:36:f1:fb:9b:27:74:d0:c6:37:
f9:da:0a:5b:57:b6:1f:95:81:fe:e1:d3:bf:fc:cf:
e3:ef:c1:79:67:3e:98:c0:d5:59:2d:e5:a7:6a:f8:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B9:AC:E5:5A:7D:80:67:6D:0A:02:82:33:67:06:9F:16:40:CB:72
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6bms5Vp9gGdtCgKCM2cGnxZAy3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.11.0/24
84.32.46.0/24
84.32.61.0/24
84.32.83.0/24
84.32.107.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3d:6d:7c:06:c4:2c:d6:aa:13:72:b9:43:2b:ad:2a:aa:f3:
93:83:01:64:73:7f:62:e2:8d:fa:98:56:fb:f0:96:ac:1a:5e:
92:c5:ab:71:37:d6:f8:4d:23:71:b9:10:f8:31:49:6d:f3:a5:
fa:7c:f6:2c:3d:ef:f0:0f:18:55:04:5a:a3:07:59:60:ee:97:
33:bb:ed:fc:2a:cb:47:9c:be:a6:fb:b6:d0:51:1b:21:25:ac:
35:01:b6:e5:d9:01:eb:ef:fc:66:b6:5e:4a:c9:c6:18:34:99:
96:fb:0e:48:97:c0:de:0f:b4:18:f1:48:76:dc:93:c1:a9:ea:
69:03:7f:34:60:8a:b1:3a:5a:2b:97:c5:84:b7:2b:42:1d:6e:
48:37:80:6c:3c:a6:e1:31:81:6c:6b:17:d5:e6:5e:d2:75:96:
ba:d3:1e:af:18:de:3a:b5:53:ed:98:75:fe:10:85:77:11:98:
b3:7e:68:bf:ec:d7:57:dd:4c:05:8e:d2:10:26:e1:e1:62:4d:
f9:20:54:ae:b7:ab:6c:db:ab:41:99:a3:0d:5d:2f:12:d8:77:
60:b7:20:67:69:80:a8:ca:be:4d:b1:d7:cc:70:95:08:18:9a:
98:42:7d:0e:f1:46:48:a8:b0:38:44:a8:71:6f:71:d1:5f:0f:
76:08:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org