Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7iP_6zxbUlAI8d4HJEVuLMqmo-0.roa
File: 7iP_6zxbUlAI8d4HJEVuLMqmo-0.roa (raw, json)
Hash identifier: ZNpPPcYWnibdFFfvMndOudRc2O6iHFYCg1pZHNtNs/A=
Subject key identifier: EE:23:FF:EB:3C:5B:52:50:08:F1:DE:07:24:45:6E:2C:CA:A6:A3:ED
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFC39562CDABFD828296092A3FAF1C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7iP_6zxbUlAI8d4HJEVuLMqmo-0.roa
Signing time: Sun 01 Jan 2023 18:54:50 +0000
ROA not before: Sun 01 Jan 2023 18:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62179
IP address blocks: 84.32.192.0/21 maxlen: 24
84.32.200.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:c3:95:62:cd:ab:fd:82:82:96:09:2a:3f:af:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee23ffeb3c5b525008f1de0724456e2ccaa6a3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:62:0f:61:a8:74:04:c6:e5:c3:74:54:26:68:
07:0f:e5:6c:6e:34:53:b6:33:db:2d:6e:db:88:d9:
82:49:24:69:99:66:2a:28:69:e7:f3:e1:28:fc:a1:
18:5a:88:fa:96:4a:e3:2d:75:7a:b9:07:5a:5e:1a:
4b:46:f5:98:51:3b:bb:06:df:e1:47:f1:a1:c5:c8:
76:04:b6:b4:83:71:a1:da:1c:98:e6:8d:63:85:f0:
eb:3a:7a:7c:98:33:7c:6e:69:c4:91:75:a8:c0:49:
74:14:28:5c:c5:65:d5:34:3e:89:ff:61:9c:64:95:
90:f8:41:55:9b:7a:34:fa:c4:3e:e4:5f:32:83:4b:
d5:21:b1:82:bd:26:02:ee:fb:da:04:92:2b:77:4d:
29:bc:e5:c0:db:b7:7b:b6:9c:ca:71:45:4f:50:f1:
92:ef:69:1c:8e:c5:5f:e1:0b:f4:0e:7f:e9:a2:a4:
cf:c7:ac:86:52:82:01:f5:1d:a7:bc:67:19:6a:a9:
ab:d4:dc:ea:90:78:c2:c2:b1:7e:c1:57:ea:c6:f4:
43:6e:3d:ac:bc:6d:b2:12:30:98:00:c9:3c:83:83:
0d:13:f5:a6:89:a9:a6:ec:78:23:40:6d:ed:05:65:
d4:15:1f:89:a8:40:65:b8:0a:f9:16:a6:2d:9d:04:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:FF:EB:3C:5B:52:50:08:F1:DE:07:24:45:6E:2C:CA:A6:A3:ED
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7iP_6zxbUlAI8d4HJEVuLMqmo-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.192.0/20
Signature Algorithm: sha256WithRSAEncryption
87:29:2d:f0:8d:30:ee:70:ab:79:e2:ca:df:85:f8:34:23:bb:
0a:0c:79:4b:67:12:bb:92:11:10:16:e2:04:a5:83:18:96:e1:
84:82:13:a4:1f:5a:57:1e:7a:ca:0b:cd:7e:21:36:02:0c:89:
88:74:41:5a:ae:4d:4e:70:d9:09:b2:5b:34:f7:46:f6:92:42:
93:73:2a:52:d9:a6:43:3c:a2:d3:8e:80:95:ee:01:0b:63:51:
4b:59:66:5b:9f:0c:df:1d:2b:4c:47:f9:11:ad:c8:10:82:85:
b5:76:66:66:1f:be:83:91:59:fe:4c:e5:0c:25:b5:9d:34:2e:
e1:b0:eb:81:98:7c:49:02:d4:dd:53:8a:28:5f:49:4e:c3:60:
e5:ee:64:68:11:f3:ce:b2:57:ad:de:27:f5:80:77:26:81:41:
2b:bc:52:db:8e:ee:36:8e:16:21:b0:31:23:c9:8a:17:cd:55:
bf:fe:5f:10:82:53:82:cc:80:29:26:9b:bb:f5:24:69:3f:25:
f6:7d:bb:6a:9c:04:89:e5:2d:df:42:12:87:58:af:3e:25:cc:
29:fd:db:47:bc:21:50:01:f5:7c:2f:3b:cd:8b:47:59:5d:f3:
0f:ab:34:32:d7:29:4d:e7:fe:d4:4b:2f:6c:43:8c:61:56:ec:
e7:48:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:49 2024 by rpki-client on console-fra.rpki-client.org