Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EUwv7Hqon5nZ5k_a42JqJ1N9YqA.roa
File: EUwv7Hqon5nZ5k_a42JqJ1N9YqA.roa (raw, json)
Hash identifier: ynoxKLuIRWGRNfWro6UY+Yl9cipolIlkQ8EQVe3TN50=
Subject key identifier: 11:4C:2F:EC:7A:A8:9F:99:D9:E6:4F:DA:E3:62:6A:27:53:7D:62:A0
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A4AC90DDB06242B45C273B0D4D9A14491
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EUwv7Hqon5nZ5k_a42JqJ1N9YqA.roa
Signing time: Thu 31 Aug 2023 08:50:04 +0000
ROA not before: Thu 31 Aug 2023 08:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48215
IP address blocks: 84.32.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:c9:0d:db:06:24:2b:45:c2:73:b0:d4:d9:a1:44:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 31 08:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=114c2fec7aa89f99d9e64fdae3626a27537d62a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:e0:e5:66:e2:77:bc:3f:f5:bd:24:3a:b2:
af:45:76:af:85:24:04:26:7e:91:86:dd:9b:d7:11:
43:53:6a:5f:a1:38:bc:9c:96:a8:13:cb:7c:46:0a:
6c:ee:91:8b:16:84:38:bd:ba:4d:75:c6:fd:3c:24:
66:43:48:64:8a:55:2c:6f:ea:01:10:60:cc:d0:09:
a9:a3:9f:43:39:a1:1d:44:38:84:a5:4e:c9:a6:51:
a4:5e:01:42:95:6a:7f:d4:99:b0:63:16:91:08:30:
06:24:cd:93:17:a4:51:f0:15:90:24:81:48:e6:d6:
0c:90:f1:f2:da:08:6b:17:ce:4c:66:59:d3:ec:ac:
70:08:0b:69:48:62:c0:87:be:0d:01:24:c1:70:7b:
2b:3e:14:c1:15:50:53:2c:29:46:93:c9:75:53:ef:
5d:58:9c:0c:8f:cb:54:3f:4e:d6:a5:de:5f:03:78:
46:fa:ce:a4:5a:8c:ee:e3:2b:98:a9:84:0d:a7:64:
26:1c:f2:e5:d9:46:37:ca:3c:1a:6e:a0:67:3d:b3:
c9:5a:fb:00:18:e5:b5:25:36:3e:1a:02:83:d2:fa:
9e:6d:57:e5:de:18:32:ca:bc:da:b2:74:ff:55:0a:
e5:6a:44:80:5b:ea:ab:cc:71:b6:2a:6a:59:a9:3c:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4C:2F:EC:7A:A8:9F:99:D9:E6:4F:DA:E3:62:6A:27:53:7D:62:A0
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EUwv7Hqon5nZ5k_a42JqJ1N9YqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.230.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a8:e9:9f:b6:16:07:17:a6:80:2f:52:d5:8e:9e:28:d2:87:
b6:c4:61:30:51:2d:84:34:5a:b5:6d:d7:0f:99:59:5a:e2:a9:
70:7e:ef:13:53:51:63:8e:2d:db:c7:c9:ca:9d:64:b6:d2:29:
18:59:9e:ea:69:00:eb:69:11:fe:0d:b9:87:65:6f:dd:84:3f:
af:6b:17:c0:45:e9:8b:7c:26:a0:18:22:be:f9:78:aa:eb:47:
2d:74:7d:29:75:68:44:6f:6d:85:68:67:9c:d3:6a:11:8e:cc:
48:9e:40:45:f3:4c:c2:ba:c7:a9:b0:cf:a6:d6:39:69:57:cf:
27:2d:5f:82:e1:97:7f:19:9b:13:a6:9e:04:cf:e1:9d:da:c3:
ff:cf:37:77:31:ad:f1:9e:11:c0:64:2e:ca:21:cd:aa:6a:39:
b4:0c:18:35:00:7b:5a:71:13:02:c6:e2:0d:e2:c5:b1:f6:29:
08:90:d7:38:ba:db:4a:96:1d:aa:16:58:ed:2c:a6:ba:b3:8b:
f4:c3:2d:5f:0b:b3:52:03:6c:84:58:a4:3d:86:73:aa:73:5d:
40:2c:b4:a1:4d:44:75:39:db:07:9e:20:ff:78:ee:19:27:29:
26:21:74:ec:4a:84:b5:16:37:d7:ed:df:e4:3c:25:61:f6:f1:
7e:47:de:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org