Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ECd5LDAbdKUAZkaczy_fRy7WezA.roa
File: ECd5LDAbdKUAZkaczy_fRy7WezA.roa (raw, json)
Hash identifier: uZ97F0bHedmgqtshn/CmhaIx7yULAwsDLQSJE73uhrU=
Subject key identifier: 10:27:79:2C:30:1B:74:A5:00:66:46:9C:CF:2F:DF:47:2E:D6:7B:30
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01886E5550D1D3CD5F9B4FA0FA3E06316923
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ECd5LDAbdKUAZkaczy_fRy7WezA.roa
Signing time: Tue 30 May 2023 20:24:24 +0000
ROA not before: Tue 30 May 2023 20:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 84.32.70.0/24 maxlen: 24
84.32.216.0/24 maxlen: 24
88.216.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6e:55:50:d1:d3:cd:5f:9b:4f:a0:fa:3e:06:31:69:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 30 20:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1027792c301b74a50066469ccf2fdf472ed67b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:ec:9c:a7:05:4f:14:b2:4e:7b:85:4a:a2:
f1:f9:0a:29:be:98:e3:0a:09:92:e5:9b:96:27:8a:
4d:50:3d:dc:d7:a9:e5:88:4e:38:e2:b5:9b:e9:2e:
53:93:dd:e3:9f:7d:1e:e8:e4:01:c2:8e:da:3c:ef:
81:92:0a:5c:de:67:00:88:ad:c2:7f:11:36:f4:4a:
ee:97:94:39:65:1d:e4:fc:27:fb:d5:8d:a9:c5:c8:
2a:0b:09:c3:14:81:c8:9c:e0:f9:ba:e7:8b:f3:a4:
5b:d0:b5:51:7b:22:ec:9b:0e:b7:f0:79:d2:04:3c:
f9:82:39:3d:8d:c5:38:f0:75:62:e6:96:3e:2b:95:
28:72:08:a4:1f:e8:ed:c1:16:21:8f:ab:48:38:e2:
35:54:a9:46:1a:ba:a1:38:41:55:a2:d0:ae:68:6e:
92:ef:f4:a0:e2:c3:72:e4:9b:d8:c2:22:c0:5b:a0:
fc:32:16:af:04:73:48:77:44:96:cf:c5:a2:b6:0a:
bb:2c:a8:a1:de:2d:c0:97:bc:b9:3e:ae:a9:a1:d2:
81:07:6f:68:8c:54:eb:1d:a3:2e:d5:7b:b8:75:3d:
bd:de:14:dd:8c:90:c8:71:5b:53:67:d4:49:a6:c5:
9b:7e:f0:86:63:b3:a5:85:57:fa:dd:35:12:35:6f:
1e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:27:79:2C:30:1B:74:A5:00:66:46:9C:CF:2F:DF:47:2E:D6:7B:30
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ECd5LDAbdKUAZkaczy_fRy7WezA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.70.0/24
84.32.216.0/24
88.216.221.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e5:db:1b:ad:ab:10:49:1c:12:71:b1:22:5d:7b:ee:13:1a:
79:a7:ed:03:c0:65:89:32:2b:72:0f:7d:c8:97:8b:a4:6f:3d:
ed:bc:22:86:5c:2f:49:5a:34:e6:af:65:84:67:21:cb:a1:ab:
bd:84:aa:6e:6e:56:dc:96:d2:5e:3a:04:48:c1:c3:b6:c5:90:
f6:73:2a:d4:f4:69:76:d8:2b:e6:10:dc:e9:e8:ab:6b:74:4e:
0f:0b:ca:75:30:f5:5e:da:20:ed:0a:51:85:5a:f0:37:89:88:
2a:37:fb:28:5a:00:9f:81:78:db:88:60:4b:93:6a:06:4e:f1:
d7:d8:7c:dc:46:20:9b:c8:c2:e3:f4:88:bb:4d:05:ab:6c:96:
cd:d4:c6:3a:9c:88:c5:d7:c2:e3:06:7e:fe:06:fc:7b:1b:16:
da:b9:d7:b1:4f:43:a9:36:00:93:bc:75:d2:9f:2e:cb:65:f8:
03:07:08:65:7a:f5:7c:be:1e:3e:3d:60:62:6e:d2:68:c4:9c:
18:37:d0:d6:7a:df:ea:91:f5:d8:c7:c9:46:10:64:cf:4f:e2:
d7:fa:57:44:83:dd:27:ea:eb:f6:57:de:3d:e6:06:3e:36:6f:
e7:d3:c0:80:00:8c:ee:ea:85:d1:ab:7a:fe:17:d4:be:0b:6f:
26:2d:32:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:41 2024 by rpki-client on console-ams.rpki-client.org