Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BjDXQOZZv1z1PnMU6nCDdGDDAZc.roa
File: BjDXQOZZv1z1PnMU6nCDdGDDAZc.roa (raw, json)
Hash identifier: vpC7OHtkQQbA1I5+Jddt9qLbVeYtZibf428uk0bYHjM=
Subject key identifier: 06:30:D7:40:E6:59:BF:5C:F5:3E:73:14:EA:70:83:74:60:C3:01:97
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A2CF0497C6CE305199185A2EA5B6F921F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BjDXQOZZv1z1PnMU6nCDdGDDAZc.roa
Signing time: Fri 25 Aug 2023 13:44:19 +0000
ROA not before: Fri 25 Aug 2023 13:44:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142036
IP address blocks: 84.32.44.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:f0:49:7c:6c:e3:05:19:91:85:a2:ea:5b:6f:92:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 25 13:44:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0630d740e659bf5cf53e7314ea70837460c30197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:03:07:86:09:25:4b:1e:33:1a:96:b2:43:
24:af:91:71:46:37:e3:a5:3e:96:25:1f:e3:2d:52:
8f:49:49:c1:93:33:63:e4:ca:ba:8d:0e:2a:98:aa:
ab:d5:90:4d:68:22:39:a1:14:88:47:3a:8e:b9:b6:
ec:3e:f1:26:56:e2:99:40:da:6b:36:35:7b:2c:41:
bd:d6:69:c4:48:df:c2:b8:fd:48:05:89:da:a3:ca:
bf:18:6e:1d:02:29:57:20:eb:55:c6:ab:9c:9b:42:
34:e0:b6:3d:ee:b4:7c:89:e8:8c:7e:6a:ca:3f:fd:
39:39:0e:ab:ef:e6:f7:c7:81:e9:15:7d:76:6a:24:
80:50:9a:65:8c:36:9d:d1:59:aa:b8:20:62:25:03:
5b:59:82:2f:0c:de:0a:1b:c8:19:4d:5e:c5:d9:86:
90:90:8b:01:55:f6:34:c0:2c:8c:fb:3f:6c:b7:af:
30:79:fd:d1:8b:93:d7:0b:4a:9c:dc:ee:75:c1:6d:
eb:fb:d1:22:cd:2d:7d:ba:5d:99:c4:a5:cb:b2:00:
58:24:ea:c1:e6:b9:86:b9:ca:5f:ec:55:f0:38:6c:
34:13:07:e5:b3:ff:3d:0c:a0:4d:32:fa:00:c8:66:
aa:f4:18:31:95:83:51:4c:00:9e:20:2b:f8:57:01:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:30:D7:40:E6:59:BF:5C:F5:3E:73:14:EA:70:83:74:60:C3:01:97
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BjDXQOZZv1z1PnMU6nCDdGDDAZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.44.0/23
Signature Algorithm: sha256WithRSAEncryption
23:24:d3:06:d6:ce:b5:4f:4c:17:69:5c:5e:b2:79:5b:a5:93:
75:f7:aa:f0:d3:37:03:e3:41:fd:75:5f:30:34:6f:e4:bd:f8:
51:76:07:48:9b:87:1a:2c:73:78:d8:8e:f8:fe:7f:5f:dd:ec:
f1:b3:aa:bd:e8:4e:92:78:e6:a1:48:3b:30:6d:82:53:5f:39:
9c:14:59:f5:8c:ab:d6:78:80:bb:8f:94:f2:95:84:ee:cd:b5:
e8:57:12:62:4b:01:16:f1:6c:e1:51:ff:d7:48:89:8f:95:f3:
51:f4:28:1a:fe:ee:32:6f:86:45:00:72:97:f9:7a:09:4d:dc:
8a:03:04:8e:52:c4:73:d8:38:50:9a:8c:b4:3c:20:78:2d:84:
37:2f:9e:a6:42:29:f0:70:40:d3:bf:e3:4c:55:be:fd:00:4b:
5f:2b:92:07:be:1c:4c:1a:20:9a:08:6f:65:1f:a2:db:b6:09:
f2:d9:6c:b3:29:6d:ae:30:5a:32:f3:3d:7b:5a:5b:e6:7e:2f:
d9:aa:d3:c1:79:04:a5:b0:e4:ae:de:ae:38:a6:a1:72:7c:0a:
e9:cd:cb:0e:05:84:4d:38:f5:28:bc:f0:e7:c0:d8:79:60:62:
92:55:67:26:09:3d:4f:75:09:b3:89:09:88:28:27:04:63:00:
9b:dd:da:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:25 2024 by rpki-client on console-ams.rpki-client.org