Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8wg87Jy4xbRMT3NYut0GdTs1Jwk.roa
File: 8wg87Jy4xbRMT3NYut0GdTs1Jwk.roa (raw, json)
Hash identifier: vASuCdz/ziuz7uCu5eXUj+HqPb3qQhcDDYjR9OFacOA=
Subject key identifier: F3:08:3C:EC:9C:B8:C5:B4:4C:4F:73:58:BA:DD:06:75:3B:35:27:09
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AA6AD4F50DA6C20FDC6CC9FE819ED7AB9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8wg87Jy4xbRMT3NYut0GdTs1Jwk.roa
Signing time: Mon 18 Sep 2023 05:04:50 +0000
ROA not before: Mon 18 Sep 2023 05:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 84.32.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a6:ad:4f:50:da:6c:20:fd:c6:cc:9f:e8:19:ed:7a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 18 05:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3083cec9cb8c5b44c4f7358badd06753b352709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:4e:87:98:a2:81:aa:3b:d6:a3:52:4e:bc:
dc:b4:a7:e2:a4:23:00:38:ef:2d:fc:8e:b2:a8:aa:
76:32:b5:bb:b4:a4:ec:94:16:63:39:69:ae:36:11:
8e:b8:3f:43:30:42:e2:a7:bf:50:4f:14:22:46:6c:
e6:56:92:c2:fa:1a:d9:5b:5f:1a:01:de:7a:16:62:
72:31:4e:ef:2f:22:7a:a9:49:97:78:26:58:48:32:
25:d4:fb:55:46:a4:e5:d3:e6:6a:db:ec:61:20:af:
dd:c5:e3:4a:f8:7a:4f:d8:62:92:e9:f5:32:79:fc:
31:70:14:fa:f9:a9:bc:51:0c:c6:f9:37:3d:e4:f4:
8f:a6:c7:c0:5b:e0:67:db:46:1f:31:af:a6:c9:3b:
2a:d2:1c:85:96:67:2b:e3:97:3f:42:bf:ef:d4:d6:
ae:d0:6b:18:d9:66:f5:7c:d5:57:be:51:e1:f6:32:
6a:58:7c:fa:a9:ee:f3:3a:37:42:1a:10:34:6a:8c:
c6:58:7a:48:eb:f5:b4:ab:d8:5b:22:1e:28:2d:40:
5a:6f:4f:90:65:83:3f:a0:32:f9:1d:16:49:9d:50:
c4:03:74:52:82:85:7d:a1:5e:0f:76:6c:ee:63:f8:
9c:60:cc:12:b2:3c:9b:bf:ba:56:f6:96:c5:05:60:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:08:3C:EC:9C:B8:C5:B4:4C:4F:73:58:BA:DD:06:75:3B:35:27:09
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8wg87Jy4xbRMT3NYut0GdTs1Jwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:96:98:e6:92:64:ea:0d:04:c3:c2:bc:f7:4f:b1:20:17:97:
46:fb:c0:36:2f:e6:5a:07:a8:00:2c:d2:9d:6a:29:25:35:e1:
df:48:a8:bd:30:c1:f7:aa:09:04:e3:6f:16:bc:1c:46:33:e8:
bd:ab:f7:3d:f7:96:ef:a1:a6:52:84:fe:16:4e:a4:7f:59:46:
0f:a0:9f:12:71:8b:98:23:a4:e0:ea:15:54:8a:76:0a:9f:89:
32:63:04:73:25:b2:22:0a:de:a7:5c:6e:67:91:c3:93:34:3b:
be:16:a6:7c:85:10:f5:c1:33:14:61:6d:57:21:e2:01:44:89:
a4:19:64:44:af:e8:8d:ad:29:61:fd:3e:7e:fe:6b:e2:3b:b9:
b0:93:f4:ec:72:c1:e6:55:d2:9e:e9:1f:c0:0c:8b:74:0b:e9:
ea:70:76:cd:4e:e9:4e:a2:3d:55:82:5a:19:b2:07:3c:8c:8a:
69:5c:d0:a2:f5:3f:9d:9c:17:0f:64:b8:66:f9:68:c3:8c:46:
db:07:bb:a3:47:6b:13:57:76:9e:57:c3:e5:53:b0:fd:95:4f:
99:90:53:95:4b:a5:18:7c:58:35:7e:35:94:69:bf:a6:e0:59:
85:c7:bd:05:78:03:2c:65:9b:bf:13:ad:bc:8c:b4:c6:de:05:
e7:97:dd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 11:34:50 2023 by rpki-client on console-ams.rpki-client.org