Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DzT57RUpt4UMksdR3py1aQ_M3oo.roa
File: DzT57RUpt4UMksdR3py1aQ_M3oo.roa (raw, json)
Hash identifier: 57GiHVLDSubFEXtMKrhRwCJruxRg+tyDKkQrs9e7mMk=
Subject key identifier: 0F:34:F9:ED:15:29:B7:85:0C:92:C7:51:DE:9C:B5:69:0F:CC:DE:8A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018C8C36003358DB233D51ADEE36E93EFE0C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DzT57RUpt4UMksdR3py1aQ_M3oo.roa
Signing time: Thu 21 Dec 2023 11:49:58 +0000
ROA not before: Thu 21 Dec 2023 11:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 84.32.236.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:36:00:33:58:db:23:3d:51:ad:ee:36:e9:3e:fe:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 21 11:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f34f9ed1529b7850c92c751de9cb5690fccde8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:ed:e3:19:d1:81:bf:e2:1e:85:e6:5b:ea:
f6:66:f5:3e:c8:aa:00:09:c9:dd:c6:6d:6e:41:fe:
b6:57:da:0c:56:d9:5f:55:06:99:a4:e3:c2:5f:d9:
ce:dd:e2:db:dd:16:7d:49:9e:54:27:0f:4f:88:5a:
c1:41:84:51:03:66:5f:a4:ec:16:2f:c0:98:72:cc:
09:fd:1e:e7:f5:46:9f:02:03:17:fc:34:00:48:b0:
84:e0:a0:ba:1d:4e:b6:38:27:70:79:54:3c:1c:f3:
52:56:99:44:2d:b7:84:fd:ed:2b:f3:2c:4c:99:4e:
25:97:49:3c:90:6d:7c:05:18:57:33:2b:0f:ae:81:
37:bf:14:7b:14:95:49:97:fa:af:63:8a:31:d3:99:
00:b9:bc:cf:cc:51:0c:06:2d:04:05:69:8e:19:c7:
d3:75:5b:ed:3d:ad:f3:68:21:66:9b:b7:7d:01:b2:
6d:21:2f:13:c5:ae:4e:35:b3:bd:22:20:2a:89:e1:
13:f6:1b:f9:4d:c7:19:81:e5:5d:82:e6:20:2a:e1:
31:29:4e:77:18:d0:1e:dd:81:bd:3e:65:86:b0:cb:
d4:9d:15:2b:ea:16:08:80:32:17:84:c6:96:b6:d4:
4b:35:e3:33:b0:db:4f:05:fc:12:6c:4f:94:bc:83:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:34:F9:ED:15:29:B7:85:0C:92:C7:51:DE:9C:B5:69:0F:CC:DE:8A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DzT57RUpt4UMksdR3py1aQ_M3oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.236.0/24
88.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:42:f3:f3:c0:f8:ed:1b:4b:17:60:2a:0c:e2:ce:28:6a:5b:
4a:75:31:64:26:22:43:e9:e5:b9:46:02:a1:54:7e:f2:59:dd:
8f:0f:ef:df:38:c3:74:c6:a3:05:df:c7:10:23:5a:f5:f9:6d:
19:83:a3:17:4e:07:06:63:74:bd:c6:57:ce:0e:81:fc:d3:b3:
68:ff:3b:e0:2c:ee:46:44:16:b9:dd:e7:e2:da:0a:19:c3:8a:
80:d3:4a:f9:c9:50:8b:2c:bc:f7:68:13:86:c8:62:dd:12:a0:
40:49:8c:4c:43:9f:4d:aa:6c:f4:05:b0:7e:f4:bd:49:fb:c4:
63:73:ee:0e:60:05:ab:19:d4:38:b2:f4:45:30:ce:44:fe:66:
56:4e:41:39:83:d6:9e:1e:a0:6e:6f:f8:97:7e:cd:46:ca:11:
34:99:4a:dd:bf:6f:e1:50:cd:b7:5b:d1:c2:aa:63:8c:35:1d:
38:ac:65:9a:ed:b5:f2:e6:4c:f0:b1:ee:f4:12:b0:7c:94:0a:
de:f0:47:79:83:66:4b:9b:5d:65:fb:0e:99:7a:86:71:ac:ba:
b8:1f:25:56:bc:ec:e9:2f:81:d9:a8:84:a8:9e:d3:8a:35:7e:
89:0d:8f:81:b8:92:92:1e:f3:74:f6:cc:af:45:c2:bc:ac:73:
67:a3:b4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:25 2024 by rpki-client on console-ams.rpki-client.org