Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6dyXmNI9FEsJX7Cji_uKaH_6s90.roa
File: 6dyXmNI9FEsJX7Cji_uKaH_6s90.roa (raw, json)
Hash identifier: 8C62wmQmrVcl/XHNbNKWWNST7ZDucP1SLE+HmwOHAg8=
Subject key identifier: E9:DC:97:98:D2:3D:14:4B:09:5F:B0:A3:8B:FB:8A:68:7F:FA:B3:DD
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018F76923B8022737F85736025F435D9646D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6dyXmNI9FEsJX7Cji_uKaH_6s90.roa
Signing time: Tue 14 May 2024 10:07:25 +0000
ROA not before: Tue 14 May 2024 10:07:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 84.32.220.0/24 maxlen: 24
84.32.236.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 05:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:92:3b:80:22:73:7f:85:73:60:25:f4:35:d9:64:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 14 10:07:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9dc9798d23d144b095fb0a38bfb8a687ffab3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:f3:63:a6:1e:ea:1d:0c:07:e2:8b:a8:89:
f2:18:65:d1:a4:21:12:4f:ea:84:41:fb:cb:21:df:
42:cf:32:3b:b8:f9:e6:ab:5a:2a:7b:5f:a2:7f:3e:
cc:e4:09:7e:44:fb:6a:57:f8:2b:32:7c:72:eb:15:
87:a0:67:79:cc:a4:b9:ac:15:d3:35:67:7c:c8:85:
f7:3d:87:62:af:ed:cb:18:50:00:a8:61:68:52:d9:
ed:86:88:2a:a5:35:5c:48:de:d4:fb:33:6c:c4:b1:
8c:e3:3c:bc:54:5d:6b:ae:28:5e:77:0b:ba:be:d0:
97:56:ff:e3:3c:64:24:d5:17:ae:c7:64:2b:09:3e:
cf:38:e2:2e:10:2c:0b:88:a8:00:5d:1e:77:95:d9:
51:33:50:41:55:4e:af:b2:2a:8b:28:5a:f3:e4:c8:
d5:dc:9f:30:a5:6c:76:36:87:bc:b1:0d:4b:f3:13:
01:69:b8:55:64:4a:c6:af:4f:91:9b:d6:45:36:eb:
bb:e3:4d:5d:2e:4c:43:6d:12:24:7d:0c:ba:7a:77:
cd:6a:f0:cb:84:d7:f2:e4:82:0d:7b:7f:c3:51:1b:
a3:34:4e:2e:37:a2:91:40:44:fa:35:8d:b4:78:68:
51:e9:43:c6:30:9d:65:17:00:3b:a0:78:8c:db:36:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DC:97:98:D2:3D:14:4B:09:5F:B0:A3:8B:FB:8A:68:7F:FA:B3:DD
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6dyXmNI9FEsJX7Cji_uKaH_6s90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.220.0/24
84.32.236.0/24
88.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:88:57:fe:c1:7f:26:3f:67:c4:f9:42:28:c9:76:d4:09:94:
87:e5:55:e7:2c:68:24:7d:46:90:48:0d:10:27:b5:f1:ca:01:
3a:9a:7e:c5:87:f3:e4:05:d8:3e:f6:5a:36:06:c3:8e:c8:c8:
df:a5:a4:ae:6a:ea:3d:c1:a3:7d:7c:54:67:bf:0c:04:ea:57:
10:21:cb:c8:d6:71:29:0d:68:00:7d:e7:1f:42:3e:b0:ea:8c:
df:ce:ea:4a:53:18:51:b8:1b:d9:c4:09:59:87:7d:ad:74:45:
d9:7a:e3:79:8b:88:55:3d:08:cc:c9:86:c0:42:92:b5:60:e4:
8b:28:0c:06:be:4b:a3:54:34:a1:83:b5:03:05:eb:91:5f:1e:
e7:df:8d:bf:c7:89:c8:db:b3:45:00:5a:0f:c0:e2:e7:1b:d4:
c6:a0:cf:02:07:17:d0:c1:f7:5b:b6:8f:22:f7:1c:89:66:e0:
65:76:cb:db:6d:08:44:22:8e:b6:c8:47:a2:23:be:8c:b4:6f:
c8:5b:65:11:d4:0f:3d:bb:6e:85:0e:e1:60:66:2a:8c:a2:2b:
98:ff:0e:eb:52:9c:33:e6:0c:4b:97:ea:e0:88:3d:56:3c:31:
70:1e:96:6a:8e:5c:0f:a2:7b:19:82:16:4d:22:f6:92:18:a4:
1c:14:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org