Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9tvzbkNXkpKXSGf-BbH3HpK2SjU.roa
File: 9tvzbkNXkpKXSGf-BbH3HpK2SjU.roa (raw, json)
Hash identifier: /oxx0e1QB30WUgz+J6EclZOdRszm9uHO10gI18gdeVU=
Subject key identifier: F6:DB:F3:6E:43:57:92:92:97:48:67:FE:05:B1:F7:1E:92:B6:4A:35
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0191D7F5FDE03FE38E665094B4BA7EE99422
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9tvzbkNXkpKXSGf-BbH3HpK2SjU.roa
Signing time: Mon 09 Sep 2024 18:05:08 +0000
ROA not before: Mon 09 Sep 2024 18:05:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142561
IP address blocks: 84.32.104.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 14:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:f5:fd:e0:3f:e3:8e:66:50:94:b4:ba:7e:e9:94:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 9 18:05:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6dbf36e43579292974867fe05b1f71e92b64a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:e5:66:41:90:19:5d:65:85:93:96:7a:f2:
75:d7:a0:07:2f:2b:32:4a:8b:1f:8d:a0:fe:5f:39:
fc:cc:fa:ea:d3:80:34:5d:30:1c:d5:2f:0f:83:62:
0a:5d:b9:4a:54:3f:86:22:7d:30:55:da:b8:44:70:
fa:92:ae:75:d2:98:1b:56:79:1d:28:29:4f:ad:13:
70:b2:9c:9e:ab:d7:3b:d2:bc:e9:43:2b:65:6b:58:
3e:c0:b7:22:0d:f2:a5:3d:35:8c:be:07:a1:99:39:
47:93:da:1c:1c:23:dd:8a:04:44:96:a3:e3:8d:e7:
f0:db:a1:b4:ac:b5:94:ad:a8:32:28:ef:0c:f8:02:
0e:60:b8:ae:27:7b:56:75:4f:3e:35:84:db:c7:2e:
1b:ca:fa:e0:53:37:62:d4:7e:8c:11:3f:87:1f:16:
02:5f:50:c1:25:3c:8e:93:67:1a:c2:5e:01:6b:2f:
f5:1b:24:73:f1:61:5b:00:25:c5:3e:a5:5a:5d:67:
78:d2:3e:72:a7:a7:fd:f5:71:a2:0b:e0:4a:3d:ad:
fc:f0:98:5a:c6:97:7a:a5:81:6b:2f:7d:3a:4d:61:
e8:7d:76:98:30:da:8a:07:75:64:86:c1:2e:0e:19:
f1:17:0c:65:cd:ac:af:df:f1:89:5a:a4:71:21:db:
fb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DB:F3:6E:43:57:92:92:97:48:67:FE:05:B1:F7:1E:92:B6:4A:35
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9tvzbkNXkpKXSGf-BbH3HpK2SjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.104.0/24
84.32.223.0/24
Signature Algorithm: sha256WithRSAEncryption
40:28:da:20:1e:e7:e3:f6:d5:b2:d3:e1:8f:4a:2f:39:0f:e6:
b3:f7:a0:0d:e5:f5:6e:fe:63:90:b1:a9:b4:a7:c7:7b:76:3e:
d4:49:a8:fc:ee:12:f5:84:c0:74:ad:b7:7f:e7:2d:ff:94:5d:
a3:d7:5e:7c:95:50:82:35:1a:9d:31:4f:6d:04:91:4c:c9:53:
7c:66:9d:fb:00:22:95:10:f2:e0:61:fa:79:35:c1:4f:f4:86:
8a:b0:85:d9:0b:f8:0c:01:e1:8a:14:53:8e:ff:87:4e:fc:42:
87:6f:77:e5:d4:d6:64:62:ac:99:d5:0c:b8:9c:3a:e9:9c:45:
aa:ee:16:30:bf:ff:f8:82:c8:69:75:5c:2f:fe:50:47:7c:34:
b6:65:a2:48:90:10:23:f6:c2:ab:e5:c7:d1:50:ed:55:00:88:
30:e4:3b:46:76:eb:a8:43:2b:70:42:56:8b:58:61:cf:22:b7:
61:f3:e3:dc:50:9c:5a:c4:0a:9d:29:44:d8:50:cb:ac:d7:c8:
21:24:53:ac:e7:bc:37:64:a4:90:fb:09:38:03:b3:88:d6:db:
71:66:3d:93:f2:54:20:45:3f:10:09:6d:21:2a:df:18:22:8f:
1c:83:4e:49:53:ac:60:8d:e6:3c:9c:b4:0a:3f:34:b4:24:d2:
85:3e:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:04:59 2024 by rpki-client on console-ams.rpki-client.org