Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JIVd8lE02_uajKT1JI-mGSRGpHo.roa
File: JIVd8lE02_uajKT1JI-mGSRGpHo.roa (raw, json)
Hash identifier: kkNAIkDN7XwPr5XF4La4gNgjInfDrgPvMRRUZRLWtrY=
Subject key identifier: 24:85:5D:F2:51:34:DB:FB:9A:8C:A4:F5:24:8F:A6:19:24:46:A4:7A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01896E5CDF13CF5E0554D6C2730C668D2AA9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JIVd8lE02_uajKT1JI-mGSRGpHo.roa
Signing time: Wed 19 Jul 2023 13:35:27 +0000
ROA not before: Wed 19 Jul 2023 13:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62425
IP address blocks: 84.32.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:5c:df:13:cf:5e:05:54:d6:c2:73:0c:66:8d:2a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 19 13:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24855df25134dbfb9a8ca4f5248fa6192446a47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:a2:03:f7:94:62:ec:09:94:1b:50:f3:25:
35:23:56:de:f4:f6:bb:46:4e:a0:98:41:27:ea:a9:
3d:27:1f:b2:92:42:7f:aa:55:f0:4d:e6:a7:10:8c:
e0:40:3f:af:40:6b:5e:36:b7:ed:4b:cd:a6:a8:3a:
bc:1c:2d:28:b2:92:d8:a0:da:ec:83:08:ed:e7:55:
06:30:49:5f:6d:0b:f5:40:a8:df:98:a4:ea:16:78:
82:b2:d8:c6:66:5d:00:b4:2d:71:4a:90:11:42:ca:
ef:30:89:3e:c1:83:ad:71:0c:fe:85:50:ad:00:e4:
ca:05:e7:ca:ab:fb:8d:f5:70:54:e2:19:30:c0:2b:
12:f5:63:a8:07:6e:21:ad:d2:cb:83:e6:a7:9b:16:
39:f2:11:c5:9b:61:12:d3:32:32:e5:86:2c:7f:eb:
94:af:59:c6:fa:6e:ac:92:66:f9:a8:d2:ae:f4:0a:
87:c9:2e:d1:2e:05:a6:49:17:e0:63:86:dc:da:b3:
90:46:24:c0:88:6b:9a:a5:a0:ef:75:25:8f:1d:ab:
2c:94:43:0a:96:6b:a3:ee:37:f3:46:90:32:41:29:
c8:2d:6d:35:cc:35:71:9c:48:06:f6:c6:e9:6a:45:
97:ff:81:67:78:fb:7e:f2:1b:4c:95:73:36:d8:ee:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:85:5D:F2:51:34:DB:FB:9A:8C:A4:F5:24:8F:A6:19:24:46:A4:7A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JIVd8lE02_uajKT1JI-mGSRGpHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:bf:02:17:42:84:25:82:02:16:9c:5a:ea:57:2f:2e:0f:8e:
5b:57:3f:13:c9:32:82:1b:6f:44:d1:48:e6:67:f9:a2:93:7e:
73:59:65:d5:ab:22:65:2e:61:c2:a7:bf:be:c7:9a:df:98:57:
4c:83:c8:0b:19:e8:94:bc:aa:37:d5:e0:bc:bb:7f:73:b6:6b:
b1:2f:59:f9:44:60:50:5a:ef:ca:31:6e:ca:a0:30:d1:56:f1:
6e:db:cd:42:fb:78:b8:37:5e:e9:05:19:70:80:0d:23:ed:49:
89:63:c9:0b:5a:25:d8:c4:f1:21:8d:34:fe:8d:9b:1c:28:c3:
af:47:b3:91:28:55:1e:64:ae:23:04:46:16:aa:2b:1e:7b:1e:
69:72:35:f3:ff:10:f4:09:19:30:5b:b5:c1:fc:09:b7:dd:9c:
16:41:fa:ea:b3:7d:7a:d1:63:20:ac:14:aa:b9:7d:67:26:b8:
3d:fe:d4:55:c2:33:31:12:48:c5:28:bc:ce:72:f1:f3:be:46:
b3:bc:ae:cb:7b:ad:a3:f1:35:09:72:6f:52:64:a8:9f:6b:49:
84:7d:a8:dd:cf:29:99:fb:89:54:b4:0f:18:31:46:cc:12:13:
df:32:1c:8d:ba:90:2b:5b:0a:0b:e3:57:d6:e8:a8:2b:54:08:
96:ff:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org