Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ANS2i_u3XWq-eBSy7uj8azbrl_Y.roa
File: ANS2i_u3XWq-eBSy7uj8azbrl_Y.roa (raw, json)
Hash identifier: 5tX3bEpV15YTiLcxYfzsnTflg5mR+DxL7Rlt4+xaI5o=
Subject key identifier: 00:D4:B6:8B:FB:B7:5D:6A:BE:78:14:B2:EE:E8:FC:6B:36:EB:97:F6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFBC31ACD13EC1BD708E02BD6953FA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ANS2i_u3XWq-eBSy7uj8azbrl_Y.roa
Signing time: Sun 01 Jan 2023 18:54:48 +0000
ROA not before: Sun 01 Jan 2023 18:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 84.32.224.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:bc:31:ac:d1:3e:c1:bd:70:8e:02:bd:69:53:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00d4b68bfbb75d6abe7814b2eee8fc6b36eb97f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:e7:e1:2c:77:ac:96:fe:01:e9:ef:96:d4:
fc:9b:8a:ff:21:5f:0c:c0:69:14:e9:18:5c:fe:22:
f4:cd:8b:99:6f:e2:55:8b:f6:13:6a:65:92:18:bf:
a3:b7:c3:33:fd:ca:51:bd:f5:20:45:46:2a:82:b6:
c9:f1:e5:4a:26:0c:5a:55:52:c6:82:ff:f8:24:1d:
bc:3c:13:03:4d:8e:80:ea:4e:ee:bc:33:7f:97:56:
e2:c8:15:2e:88:c0:12:42:4a:cf:c8:50:30:21:3d:
a4:3c:3b:e2:eb:d3:eb:e7:04:ff:33:c4:29:c8:00:
7f:89:16:f5:23:ef:ee:4a:19:92:a9:40:8d:21:42:
a5:f2:3f:0a:34:0c:34:56:c8:a9:45:d1:8e:56:f2:
e8:57:db:87:07:d4:73:42:fe:6f:fb:4d:98:80:75:
5f:ba:e2:91:95:f6:67:98:d8:d8:77:07:76:23:ed:
28:d6:93:c6:8c:57:db:07:65:68:ef:f1:85:2b:f4:
69:4f:64:b7:ec:c8:e5:db:07:91:18:c6:21:b4:a4:
46:26:79:dc:ae:d9:1f:9c:23:39:34:ee:f3:39:3a:
2e:d2:1e:1e:8c:48:a3:4d:a0:5a:0f:8f:c9:3a:5b:
35:2f:33:2b:9f:e4:71:fc:56:2a:1e:95:46:34:f2:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:B6:8B:FB:B7:5D:6A:BE:78:14:B2:EE:E8:FC:6B:36:EB:97:F6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ANS2i_u3XWq-eBSy7uj8azbrl_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:6c:c9:e4:18:05:68:36:2f:f9:92:c7:00:fe:d7:46:f5:f2:
0e:c3:33:cd:fb:72:c2:67:c3:c7:2a:7b:f0:a1:6d:1b:27:1e:
f4:fc:d3:35:30:da:4d:78:d6:f6:04:79:a5:a1:47:26:cd:36:
75:65:9f:43:7e:e3:9f:5c:90:d8:88:d3:c6:60:19:36:54:31:
a0:51:3b:3f:37:6b:2a:f7:07:94:8e:95:ec:ce:89:99:dd:e8:
1f:be:cb:f7:fb:17:a4:1c:47:57:47:07:14:3d:88:a9:30:65:
9a:90:a2:f4:fa:e1:dd:81:cd:26:8b:24:50:60:24:47:12:aa:
8d:eb:21:8b:63:e8:d6:5f:a9:5b:d4:8d:30:9a:d2:b1:da:fb:
b1:4c:a4:b3:1f:bb:1b:9a:a0:6b:c9:c6:40:1c:af:ed:6a:5e:
71:92:69:d4:8a:1e:c2:67:74:a7:ed:01:47:c2:da:49:3f:82:
01:f7:2b:a3:b1:77:ce:88:f8:79:98:b2:48:94:4a:a2:39:78:
d5:d2:f6:26:93:94:62:f8:ff:cb:12:ef:1e:da:86:27:36:b9:
59:06:09:18:c0:43:d0:49:f4:bc:ab:c7:69:1c:b4:76:35:43:
99:95:2b:c9:04:11:f2:9c:d9:78:6b:08:d2:bf:67:05:16:02:
b9:83:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org