Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IELJxoSxbGWD_KQnkeqpKfRxaks.roa
File: IELJxoSxbGWD_KQnkeqpKfRxaks.roa (raw, json)
Hash identifier: q0Nq2Qf1f0flbWMUkyBmnXNRDBaER5VlmHqFsoDGiZY=
Subject key identifier: 20:42:C9:C6:84:B1:6C:65:83:FC:A4:27:91:EA:A9:29:F4:71:6A:4B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185F3EC9BBE419F311518BD2F4190A68F00
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IELJxoSxbGWD_KQnkeqpKfRxaks.roa
Signing time: Fri 27 Jan 2023 15:50:47 +0000
ROA not before: Fri 27 Jan 2023 15:50:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57152
IP address blocks: 84.32.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:ec:9b:be:41:9f:31:15:18:bd:2f:41:90:a6:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 27 15:50:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2042c9c684b16c6583fca42791eaa929f4716a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:08:bd:bb:97:68:35:b1:02:d3:f8:a6:2a:b8:
74:9f:c7:8f:9e:bd:73:2d:92:4f:8c:df:25:78:0e:
cd:70:20:be:50:e3:a5:fc:0f:4a:61:f7:a9:e7:3b:
74:ee:7b:7e:bc:bd:10:c7:df:73:78:d5:50:f4:85:
70:73:7a:bb:8b:83:58:d5:7b:c0:b4:d6:6a:4b:c5:
4b:b4:a4:6c:93:3c:11:17:7e:aa:0b:e9:d8:f4:9b:
f3:22:5a:36:ef:7a:5e:95:9c:78:65:ae:a7:e1:36:
12:ac:87:9b:ed:d7:dc:2f:56:cd:3b:7f:b1:ec:c1:
86:b6:d5:cd:57:f1:84:20:35:78:10:e8:72:6f:38:
65:2c:21:c8:a6:d3:85:9d:48:5c:b6:24:10:d8:14:
85:dd:eb:74:fd:7a:4f:75:88:ae:13:a3:17:d5:97:
4a:8e:6e:65:6c:fa:5c:4a:30:24:9c:95:1d:82:38:
67:fb:f4:ff:80:53:80:85:8f:bc:33:af:01:f4:25:
bc:3a:23:02:d9:ff:88:68:f3:9a:e4:85:81:b9:8a:
be:5a:4d:27:b8:c5:75:50:67:f1:38:29:88:0e:59:
b7:30:b1:f1:15:47:a6:4d:f8:ac:00:df:22:52:4b:
f3:07:55:64:5d:25:63:41:f6:c9:c8:a4:f2:8d:c3:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:42:C9:C6:84:B1:6C:65:83:FC:A4:27:91:EA:A9:29:F4:71:6A:4B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IELJxoSxbGWD_KQnkeqpKfRxaks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.230.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c4:e7:cd:9b:05:b9:51:f3:2e:cb:6a:1a:c9:9e:b8:63:75:
e1:11:c5:57:8c:ba:48:28:b1:62:8a:37:e0:98:5a:07:d6:5d:
a6:58:4f:01:37:1f:e6:77:d4:d8:d7:3f:55:9d:5b:78:50:94:
8f:06:7b:92:c7:b4:df:92:19:dc:60:50:45:e4:70:c9:ac:cb:
1d:bd:bb:1b:de:ab:6a:4a:91:de:5d:8e:16:8f:cb:3a:4b:10:
74:a6:24:4d:1e:41:0c:54:0d:c7:8d:f7:9e:37:13:a2:5d:85:
e7:c6:6a:38:74:3a:b7:f1:48:d2:dc:f8:c3:14:e6:2b:79:bb:
3a:33:34:3a:c3:17:19:f5:4a:d0:14:86:80:2e:9b:76:a5:9a:
2f:50:f1:3d:c2:51:74:1d:50:ae:40:c8:f6:59:e7:b8:04:32:
11:d9:f2:1c:61:31:18:1e:97:58:c0:69:4c:09:1e:9a:07:83:
21:69:a2:96:a8:4a:ec:40:3a:0c:fd:1f:83:ba:4b:bf:9f:6c:
1b:a4:dd:ba:39:43:51:f8:4d:20:07:4f:64:17:0c:65:3f:44:
96:69:f7:bb:2d:df:2d:1a:9c:f2:7d:96:df:23:d3:a7:89:48:
5a:23:55:17:66:6b:e0:67:35:85:b6:fe:a9:55:77:56:14:27:
37:28:d4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 20:19:15 2023 by rpki-client on console-fra.rpki-client.org