Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8OkPLbbv8cvqpHZ-ornNviA3wt0.roa
File: 8OkPLbbv8cvqpHZ-ornNviA3wt0.roa (raw, json)
Hash identifier: TLUSgLTcNbOx8KW/JK6yhQ29kAe32U2LFo+8Fa0ngIk=
Subject key identifier: F0:E9:0F:2D:B6:EF:F1:CB:EA:A4:76:7E:A2:B9:CD:BE:20:37:C2:DD
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187B1CBE49B94A80B7A0114AE04EAC17CBF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8OkPLbbv8cvqpHZ-ornNviA3wt0.roa
Signing time: Mon 24 Apr 2023 05:45:42 +0000
ROA not before: Mon 24 Apr 2023 05:45:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 84.32.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 05:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:cb:e4:9b:94:a8:0b:7a:01:14:ae:04:ea:c1:7c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 24 05:45:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0e90f2db6eff1cbeaa4767ea2b9cdbe2037c2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:fa:9a:fc:c3:53:1b:19:b0:bf:30:1e:da:
c1:2a:78:bb:38:55:34:04:fe:a0:fd:fd:df:15:21:
83:5b:87:23:1f:62:45:44:87:19:96:cf:aa:5f:fe:
e7:16:f4:20:a8:df:29:43:83:47:98:7f:6a:1a:31:
23:8f:7d:2f:dc:fd:62:6b:bd:2f:60:15:36:15:de:
8e:6b:7d:63:33:99:a9:80:b3:eb:27:de:48:09:b3:
81:ff:a8:3e:d1:98:90:ff:05:7e:95:1a:93:12:aa:
5d:62:58:53:0e:1b:b4:36:7d:48:b1:61:96:8f:38:
2d:42:51:be:84:e0:02:cb:64:39:43:a4:62:ff:35:
13:b6:a2:80:e8:52:ea:d5:a4:42:14:9e:ca:30:f0:
fd:24:08:1a:97:c1:01:5b:e7:16:39:a8:3d:2d:4b:
ae:23:3b:10:71:b0:f5:33:d4:d3:1a:cd:47:2d:76:
61:3e:f5:48:41:ef:f5:e3:7a:9d:37:89:24:37:65:
a6:54:a0:84:74:91:f6:26:01:43:c9:c1:2c:25:d7:
67:c2:85:14:5d:4b:bd:d5:43:b3:af:25:4a:00:ce:
31:e4:ea:0d:4d:4a:b7:bb:62:bb:84:c5:04:ea:c3:
99:b7:f2:f2:9c:51:1d:02:c1:2a:c7:54:ee:0e:d5:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E9:0F:2D:B6:EF:F1:CB:EA:A4:76:7E:A2:B9:CD:BE:20:37:C2:DD
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8OkPLbbv8cvqpHZ-ornNviA3wt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.27.0/24
Signature Algorithm: sha256WithRSAEncryption
04:2a:c1:40:79:ed:b7:a0:f5:ec:d4:8e:60:54:c2:b1:71:6f:
22:9b:fd:e4:c2:6f:fe:7e:66:17:2f:1f:10:c9:42:75:6f:40:
21:e8:3a:db:ca:37:ca:d2:0f:fb:69:50:af:e7:3d:d3:46:1c:
be:19:6b:5d:33:5b:88:49:0f:cf:42:cb:e3:37:68:e6:6d:3b:
b8:98:dd:7d:cc:33:c3:fa:46:13:56:31:03:d0:20:c1:fc:6d:
67:1a:48:75:ca:f4:45:28:05:c1:f4:5a:38:0f:2f:29:60:8d:
99:97:36:fb:00:35:46:49:c7:e7:17:55:f9:76:6d:92:9f:12:
84:0c:51:b5:e8:97:34:a0:f3:5d:e2:06:68:52:b3:ee:c3:17:
23:08:f1:fa:1c:1d:e5:be:f5:1e:15:70:bd:00:ae:a3:b8:ac:
16:5a:16:df:2f:df:1b:d5:d5:14:ac:f2:01:6e:68:62:9d:04:
96:cf:41:85:2c:9c:bd:02:8e:84:df:3c:8c:1b:ff:d9:63:1c:
6b:32:59:a8:f2:77:d5:cb:10:17:c4:f4:ad:ea:d4:48:2f:69:
f5:d5:f6:9c:6d:a6:80:5a:70:ef:29:40:2c:69:ac:da:a5:38:
a2:3e:6e:80:d0:7d:61:df:db:ca:ee:87:7d:d5:4f:ed:fe:83:
1a:9d:1d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org