Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/F5Apvc-thLzzR8xOkyZsP6HlDpU.roa
File: F5Apvc-thLzzR8xOkyZsP6HlDpU.roa (raw, json)
Hash identifier: lCbSZLnzj6NyygIenmz+3lOIId1/CpysOERV9PXq7EE=
Subject key identifier: 17:90:29:BD:CF:AD:84:BC:F3:47:CC:4E:93:26:6C:3F:A1:E5:0E:95
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01868EDD5A985CD7C61BBFE31CF7BA67E804
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/F5Apvc-thLzzR8xOkyZsP6HlDpU.roa
Signing time: Sun 26 Feb 2023 17:55:16 +0000
ROA not before: Sun 26 Feb 2023 17:55:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 84.32.217.0/24 maxlen: 24
84.32.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8e:dd:5a:98:5c:d7:c6:1b:bf:e3:1c:f7:ba:67:e8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 26 17:55:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=179029bdcfad84bcf347cc4e93266c3fa1e50e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:6b:00:fb:b0:4b:2d:19:d9:54:a4:1d:67:
9a:de:4d:9b:ea:49:55:ce:3d:2e:10:c3:2f:ea:79:
d6:50:21:be:ee:f8:2f:72:e6:a5:84:c4:36:fb:19:
0f:3d:ab:5b:f7:ad:30:ba:79:d0:a9:6c:ca:37:51:
db:a5:5e:23:a4:3a:ff:98:c6:f6:fb:68:d9:36:23:
9d:d7:ab:53:8b:c8:23:9f:90:7a:63:9f:a4:1b:0f:
73:48:ff:dc:38:93:dc:f6:4f:e7:fd:42:d0:cf:b7:
dd:3c:c7:9b:f8:67:93:35:80:a3:31:94:6d:39:5e:
c1:4a:de:36:f5:56:e9:4f:76:75:af:4e:04:ba:73:
10:54:67:05:9a:1d:70:0e:29:e7:0c:76:f8:7e:3c:
a7:88:78:94:34:a5:ef:02:cf:68:4a:83:4c:a6:f9:
90:59:c5:ad:79:6b:50:26:40:dc:f6:55:28:fb:ea:
06:53:5b:e4:9f:a0:a7:9f:d0:37:d8:5d:87:d9:1d:
3d:3f:07:83:b5:33:8a:80:fb:bd:b9:31:3d:e2:2a:
b0:15:22:98:57:1d:33:5a:34:08:dc:c1:a7:d1:8d:
b3:ae:38:77:73:18:0c:71:9d:b2:92:68:c1:48:8c:
fb:7a:26:2f:03:a3:db:ee:23:65:f8:9e:2c:a0:c5:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:90:29:BD:CF:AD:84:BC:F3:47:CC:4E:93:26:6C:3F:A1:E5:0E:95
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/F5Apvc-thLzzR8xOkyZsP6HlDpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.106.0/24
84.32.217.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e3:b0:0d:63:95:5c:3d:c9:4c:ba:1a:72:84:d1:5e:50:5a:
0f:96:a4:3a:24:f5:61:06:cf:09:c1:4a:2d:ad:23:57:a1:7f:
73:5c:d4:73:02:de:03:3a:7f:02:9e:c6:4e:86:98:e0:11:ea:
e9:62:4c:37:aa:52:1c:b7:3f:64:49:77:ab:da:39:db:07:19:
f1:a7:15:0e:ab:f9:45:af:75:37:ba:8d:b5:ed:50:80:39:69:
96:9d:8d:e7:d1:b7:32:f1:64:96:db:51:41:8b:7d:dc:22:be:
30:00:2c:65:8a:45:ee:3a:fe:58:52:d9:12:8d:5f:eb:52:d0:
58:60:3e:60:60:8c:17:5e:8d:d1:28:fa:55:37:f3:be:1d:a2:
ed:0d:6d:e4:58:1c:7d:94:8b:59:5a:4d:4a:d6:2c:df:d0:16:
c7:17:85:97:74:b8:94:70:a7:5e:e6:d6:fd:25:1b:8e:c3:de:
35:b5:33:8b:2a:64:a4:e1:fd:45:68:c2:c7:74:64:7c:05:47:
29:0f:a7:d3:e1:9e:08:47:1e:cd:3e:4e:eb:44:0a:e3:87:29:
e6:80:8f:6a:24:1c:ac:29:ba:3d:8c:97:92:57:91:65:8a:8b:
32:7c:a7:71:45:8b:38:f5:8a:2b:67:bd:13:f7:5e:ac:63:0e:
24:cc:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:28 2023 by rpki-client on console-ams.rpki-client.org