Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I8TB_7BH9h9fwTrnnCcVDRhtPw0.roa
File: I8TB_7BH9h9fwTrnnCcVDRhtPw0.roa (raw, json)
Hash identifier: Zw65KrURfS9l17AIbe51nlAilgk0bxANb7fic96kP7E=
Subject key identifier: 23:C4:C1:FF:B0:47:F6:1F:5F:C1:3A:E7:9C:27:15:0D:18:6D:3F:0D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01887573048A51FAF3179820969AA86ECC33
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I8TB_7BH9h9fwTrnnCcVDRhtPw0.roa
Signing time: Thu 01 Jun 2023 05:34:12 +0000
ROA not before: Thu 01 Jun 2023 05:34:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198510
IP address blocks: 84.32.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 04:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:73:04:8a:51:fa:f3:17:98:20:96:9a:a8:6e:cc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 1 05:34:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23c4c1ffb047f61f5fc13ae79c27150d186d3f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:05:8a:4f:42:f4:59:c6:af:ac:f7:14:8f:
20:10:4e:be:82:10:ed:5e:51:92:4c:9c:eb:cc:5c:
dc:35:17:df:39:de:33:b0:f8:8c:30:49:98:5b:a4:
6f:3a:4b:74:e8:fd:7f:7c:f5:98:2e:e6:06:4c:a9:
59:65:44:48:28:b9:a7:f7:67:d8:90:f3:9b:c2:b5:
5a:3b:6b:93:56:76:8d:c1:44:bd:1d:2c:57:a3:71:
db:6a:e4:1e:a3:ec:c5:ec:46:a9:ca:f3:eb:fe:b1:
d6:dd:f2:f0:f7:b0:da:de:50:ff:ee:23:98:60:de:
d4:d5:32:31:48:09:a3:fd:4b:58:5e:01:9f:a1:77:
78:a1:0e:5d:07:ea:37:62:82:0c:35:b5:90:1d:60:
e4:c4:44:43:6f:b5:4c:52:e2:56:43:14:a4:69:70:
8f:e4:0b:23:5a:d9:19:c9:86:43:aa:80:f8:6e:31:
1a:2f:41:e8:db:55:6a:95:02:df:9e:03:40:ec:df:
9a:97:28:96:6d:4f:a1:6b:1b:10:3d:87:27:d0:ec:
06:99:27:b0:bb:d9:3d:2b:b1:30:cf:53:28:8f:24:
58:80:77:d2:bf:d0:24:7a:fe:6f:a7:b9:b1:d5:f5:
6b:a7:7f:bd:6d:13:f7:28:3c:74:41:f4:21:0d:91:
c7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:C1:FF:B0:47:F6:1F:5F:C1:3A:E7:9C:27:15:0D:18:6D:3F:0D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I8TB_7BH9h9fwTrnnCcVDRhtPw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:35:9d:40:37:da:ef:e0:df:fc:92:e3:cb:3a:ca:b9:75:67:
ec:77:b6:d9:ab:b4:9a:ed:d5:ec:da:db:2b:9f:13:2d:16:38:
6f:54:47:ed:10:73:e5:37:04:d9:98:94:ce:d7:27:58:fc:dd:
f9:f0:b2:86:6e:75:61:ab:b5:e8:64:7c:33:18:c8:b7:45:38:
49:cd:6a:60:8e:b4:d7:22:15:c0:3f:b7:44:66:0d:7b:1a:2b:
91:d8:71:06:af:6b:f0:ad:c1:0f:9e:6a:4a:86:19:ff:9a:80:
db:19:87:90:a7:4a:39:50:69:b2:21:c3:17:c6:c5:ef:b4:fc:
9e:59:4d:8f:09:de:14:57:70:59:c0:45:b3:3f:09:ae:76:85:
b2:c2:dc:2b:75:d2:29:69:9f:8d:8c:b8:29:e9:68:97:f6:e8:
60:f3:89:16:7a:e2:76:10:91:07:ab:54:c3:95:19:6b:6f:4a:
51:c0:0c:bb:82:a3:a8:18:65:d4:79:21:e4:1d:27:37:e6:39:
cd:9e:f2:1f:5f:a9:2a:64:38:b7:18:67:f3:18:6c:6f:05:7d:
52:ce:64:5b:d5:9d:73:da:bb:88:ae:79:79:c6:a5:84:eb:48:
b7:89:1a:d6:d2:52:f8:af:91:5f:eb:67:c5:9a:cb:e8:ee:c7:
37:24:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org