Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AlI7D8AunO7hN6ByMppciuAePiI.roa
File: AlI7D8AunO7hN6ByMppciuAePiI.roa (raw, json)
Hash identifier: t6F+vo45uXg+QdYNSNB/7AMIZGsb6IHEz6RDSDi8ZvI=
Subject key identifier: 02:52:3B:0F:C0:2E:9C:EE:E1:37:A0:72:32:9A:5C:8A:E0:1E:3E:22
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AFEA591E833486A3FEF57E516C360F5DA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AlI7D8AunO7hN6ByMppciuAePiI.roa
Signing time: Thu 05 Oct 2023 07:02:58 +0000
ROA not before: Thu 05 Oct 2023 07:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 84.32.179.0/24 maxlen: 24
84.32.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:a5:91:e8:33:48:6a:3f:ef:57:e5:16:c3:60:f5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 5 07:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02523b0fc02e9ceee137a072329a5c8ae01e3e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:24:0e:27:94:96:0a:9a:0b:c7:10:9e:29:ba:
2d:91:fd:b0:93:b8:a1:9b:ea:f0:2e:86:b2:37:d0:
5d:92:7a:1a:e0:94:0a:26:b0:7b:2e:ef:00:e2:a4:
9c:e8:e0:1c:27:8c:98:8f:33:38:38:c8:c9:68:8a:
7f:68:f7:88:67:0b:65:c4:39:8a:d2:1e:59:2f:99:
dc:a3:7c:79:3d:ca:d1:c5:9b:b6:88:4d:ad:b6:ed:
e2:d3:7b:e7:7c:98:9a:d0:4b:5a:fb:b9:d2:25:bd:
68:a1:f3:ee:d3:3a:cf:19:96:53:b5:32:f7:9d:20:
f1:4a:17:61:52:e5:eb:43:7e:98:ca:df:fd:59:44:
6f:ed:7f:48:f0:b1:37:e8:b7:07:2d:e0:f1:43:b5:
21:25:75:e9:38:b1:f7:19:f6:2a:e7:b6:98:4b:5d:
9b:f5:be:c5:88:c5:d5:4e:0c:56:dd:2e:61:61:8f:
56:21:4f:67:ba:59:11:de:14:18:d1:d6:83:ba:47:
2f:14:c2:84:52:e3:9e:80:d3:7d:48:d6:c2:89:31:
80:8c:20:26:a3:12:8a:02:c9:c1:9c:c8:4c:a8:eb:
0e:02:73:dd:de:70:78:ab:32:26:81:43:c8:b9:8f:
ed:5e:b4:8b:f1:59:22:0e:56:9d:51:ac:d0:4e:6d:
f1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:52:3B:0F:C0:2E:9C:EE:E1:37:A0:72:32:9A:5C:8A:E0:1E:3E:22
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AlI7D8AunO7hN6ByMppciuAePiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.178.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:f2:b0:21:75:1b:6a:a4:5b:c1:d0:8b:db:95:ff:15:ca:9e:
80:28:66:3a:b9:c2:92:19:16:6b:fb:2c:40:e5:20:32:2c:2b:
b9:4c:9d:e6:2e:8e:07:60:d4:ee:31:75:10:f6:82:db:9d:e8:
78:ab:36:00:58:80:e0:3e:90:71:dc:12:1b:72:79:a0:6f:46:
86:25:41:88:5c:91:de:87:e7:06:d5:a3:21:32:c0:0e:76:28:
84:ef:6e:a0:df:a9:5e:5b:4a:17:aa:5c:2d:63:36:a6:a8:8c:
57:29:fc:b6:a9:ed:13:6b:69:fa:16:22:ac:a9:7d:39:cd:82:
b0:fe:39:51:6a:15:25:81:14:92:0f:e0:ee:12:03:20:cb:b5:
81:4a:30:a0:9f:62:4c:0a:58:5f:30:c0:57:e0:26:19:de:0e:
90:31:41:20:82:c4:bd:6a:08:02:f3:e1:a2:ed:5a:45:3e:32:
ee:98:b8:77:0d:c8:ea:aa:0d:9d:45:6a:ed:5d:fe:4c:82:1b:
4c:1a:65:91:6f:82:b3:0c:d1:1f:14:58:46:20:34:85:56:66:
c3:e0:d8:87:81:f0:d3:15:ce:0d:f3:8c:4b:5a:45:b6:40:08:
5f:f0:ac:ce:80:69:77:e3:9b:79:8c:fa:4c:a0:05:42:7a:62:
68:5f:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:25 2024 by rpki-client on console-ams.rpki-client.org