Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/D3fxksCw1VEl6ejlh0s0XIkxfOY.roa
File: D3fxksCw1VEl6ejlh0s0XIkxfOY.roa (raw, json)
Hash identifier: fTBja1YajKj2PW4oZn7F/Gir7OPwOAGj+rwLl26UczU=
Subject key identifier: 0F:77:F1:92:C0:B0:D5:51:25:E9:E8:E5:87:4B:34:5C:89:31:7C:E6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188E3F926FCE6C24F18EA28643452DA109E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/D3fxksCw1VEl6ejlh0s0XIkxfOY.roa
Signing time: Thu 22 Jun 2023 16:38:56 +0000
ROA not before: Thu 22 Jun 2023 16:38:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 84.32.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:f9:26:fc:e6:c2:4f:18:ea:28:64:34:52:da:10:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 22 16:38:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f77f192c0b0d55125e9e8e5874b345c89317ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:e2:2c:30:c1:ad:56:ed:52:dd:6e:19:95:
26:39:54:4f:cf:ba:6b:31:7a:b4:6f:27:8c:bb:c3:
39:fe:43:c5:ef:3b:8c:c0:6a:ad:02:92:6a:90:74:
de:b8:7a:5d:a3:bb:04:31:a1:50:08:52:2f:0f:6e:
a5:5f:2b:b6:5c:fa:44:94:da:2a:0c:1b:38:a0:46:
86:a8:0c:00:a9:96:12:61:36:8c:9e:6f:0d:d6:8c:
15:5d:80:dc:b3:ec:a1:2b:44:5b:c4:10:28:4c:3f:
66:aa:8c:05:b4:7c:f6:f7:f4:df:93:84:69:d3:f1:
07:7a:b8:2a:05:bf:5a:88:1b:b7:6b:bd:ee:79:40:
43:e8:f9:52:f6:8c:b2:a1:a9:5f:11:d5:a1:08:b1:
85:5a:08:e7:2c:9f:61:35:a5:1e:c2:79:89:21:bd:
bc:39:d9:58:26:71:2f:92:e3:71:93:7e:72:18:4d:
3f:c5:60:ea:59:7f:1c:98:b7:22:ba:0a:59:44:61:
26:e2:fd:67:c0:f7:f0:16:bd:ce:c1:b0:33:ec:16:
0b:5e:05:91:a9:86:23:86:b8:c3:cb:f6:dd:de:34:
b1:b9:46:c5:2b:1c:46:d6:b3:eb:e2:cb:16:97:e3:
f3:ff:5e:71:95:c3:8a:66:d0:19:5d:42:4d:76:e1:
d7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:77:F1:92:C0:B0:D5:51:25:E9:E8:E5:87:4B:34:5C:89:31:7C:E6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/D3fxksCw1VEl6ejlh0s0XIkxfOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:8d:f0:f2:b9:97:11:9b:40:69:09:ca:93:c7:d7:5f:5e:c6:
af:f1:08:9a:6f:23:70:4e:e1:df:80:ee:44:45:08:70:79:cd:
19:6f:0d:a7:e0:d9:b9:4b:37:12:d2:13:52:21:36:8d:cf:4f:
fa:8e:90:44:ac:c1:2a:60:3f:50:a7:9b:ed:d9:ce:04:0a:8d:
8f:3f:49:ad:df:96:e4:1c:74:46:c9:5f:1d:88:f0:af:61:bd:
1e:52:41:84:41:40:9d:64:ad:01:84:ad:22:1b:2f:1d:99:42:
94:84:0f:c9:47:27:6d:9d:67:9d:50:c0:82:54:c0:17:0f:84:
bf:57:7c:58:46:95:a8:a3:96:f6:97:27:ba:2d:b6:6e:00:c2:
0b:bb:e9:3c:9e:6f:0d:60:4a:84:30:61:fe:58:fc:25:3b:31:
ca:17:9d:85:10:2a:a2:99:c0:76:80:1d:14:c0:fb:23:4e:f7:
31:39:60:b0:36:fb:8e:e5:d4:e1:1f:fe:c5:13:10:ec:c7:50:
3e:bf:48:f9:c6:b4:ff:50:9a:89:fd:41:d3:04:fd:27:26:6a:
7c:da:81:7c:0f:ce:ff:3f:2f:0a:3a:a6:e8:6b:e6:1a:6c:bd:
9f:c4:61:d5:84:1d:e3:78:cb:50:de:fc:f8:2e:21:e8:f5:fa:
57:c8:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:28 2023 by rpki-client on console-ams.rpki-client.org