Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EtMFcX1pgmHmb8U7TMDUIE2y6bI.roa
File: EtMFcX1pgmHmb8U7TMDUIE2y6bI.roa (raw, json)
Hash identifier: baoU6lhQpbtiRPiczHgHCz/y8PKT8nD9A2hFTAauUUQ=
Subject key identifier: 12:D3:05:71:7D:69:82:61:E6:6F:C5:3B:4C:C0:D4:20:4D:B2:E9:B2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFBB02E0C3BE39472F639BD182AD0C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EtMFcX1pgmHmb8U7TMDUIE2y6bI.roa
Signing time: Sun 01 Jan 2023 18:54:48 +0000
ROA not before: Sun 01 Jan 2023 18:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47583
IP address blocks: 84.32.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:bb:02:e0:c3:be:39:47:2f:63:9b:d1:82:ad:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12d305717d698261e66fc53b4cc0d4204db2e9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:85:cf:66:25:c2:7e:f4:e5:d8:a5:f8:42:
21:ef:0a:7d:c4:7a:17:c6:ea:9e:9b:f1:f9:e4:c5:
c7:8d:53:95:1a:05:2e:50:7d:b9:19:81:19:59:01:
aa:e3:04:bb:bc:92:df:44:37:e9:dd:57:b6:fb:fc:
38:e0:a2:8e:8d:17:53:54:7f:a7:7f:42:1b:c3:c5:
52:18:13:68:0d:46:fd:54:62:b1:a9:0d:d5:76:2b:
a2:1b:b2:b4:27:9a:a5:54:c0:93:40:84:4c:6f:6f:
24:e7:6c:9e:53:ca:6d:e7:95:fd:17:fa:4d:d7:18:
7f:55:36:70:4c:f8:7f:c8:86:ff:01:10:b3:04:27:
bf:54:c1:41:d3:fd:9e:a9:b0:40:75:c9:c1:5d:fb:
ed:19:cf:5a:4f:42:c8:67:79:7d:92:47:0d:e6:d0:
37:4c:64:ac:0c:e7:a9:a7:f6:73:27:29:d6:4d:61:
6c:e9:6c:fb:34:e2:2e:e0:38:ce:9a:f1:81:f3:e1:
79:59:d1:35:e3:26:c5:d4:ff:e1:ae:8b:9c:74:91:
a5:bc:92:26:1a:b4:3e:f7:95:48:52:8e:71:e9:b7:
b4:d9:1d:21:72:c6:86:c5:54:95:2e:ae:db:eb:e7:
89:e7:b6:90:55:3c:e7:27:da:a1:12:08:2f:9f:17:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D3:05:71:7D:69:82:61:E6:6F:C5:3B:4C:C0:D4:20:4D:B2:E9:B2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EtMFcX1pgmHmb8U7TMDUIE2y6bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.84.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:99:3c:82:b3:fe:f5:8d:81:6e:78:7e:4a:6a:1f:3a:f8:0f:
b8:b3:bc:f6:93:97:67:93:15:84:77:7c:ac:62:c7:a8:36:e7:
70:47:63:3d:1e:06:30:c5:43:68:95:8f:37:1e:1d:13:86:a7:
d9:cf:cd:37:ed:dc:64:49:a3:e9:af:8a:2c:6a:e4:62:a7:c3:
9f:59:41:29:83:2c:fe:52:ce:2d:24:4f:02:39:50:1c:7f:17:
05:f4:27:06:94:15:15:9e:d0:bf:27:7c:e2:31:32:e6:f6:44:
f7:80:27:a9:9c:b2:50:98:3e:34:40:8d:73:ad:80:e3:40:58:
33:c6:65:f7:ba:ac:a8:59:d1:0e:2d:88:72:7a:80:ea:40:af:
b9:40:5d:d0:82:6a:63:f9:26:4a:da:9f:b8:1b:fa:70:39:6f:
65:c3:50:da:62:8b:f7:1c:a8:cf:a8:9e:b4:ab:4b:a2:a8:80:
e5:52:b6:42:51:a4:b8:3d:7a:14:d2:66:93:53:d8:02:5f:95:
44:a0:d4:81:aa:07:47:ec:dd:59:1d:13:a8:ea:48:56:80:26:
d2:62:9d:d5:24:9e:f1:4b:35:59:e9:a0:50:ac:c8:f4:3e:b6:
ad:65:8d:77:54:da:53:f3:f6:4c:55:77:bd:e4:c9:72:e8:f2:
20:10:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:25 2024 by rpki-client on console-ams.rpki-client.org