Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/K-T3s_s8oAZl0qwjqtJPWExHF5I.roa
File: K-T3s_s8oAZl0qwjqtJPWExHF5I.roa (raw, json)
Hash identifier: 51KDfuxvTLt4HapdZHRelOls2Qas/Kxy5ttUJSzceTM=
Subject key identifier: 2B:E4:F7:B3:FB:3C:A0:06:65:D2:AC:23:AA:D2:4F:58:4C:47:17:92
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01860C646AA5F0FFA8153FF2F4B6C3169F6F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/K-T3s_s8oAZl0qwjqtJPWExHF5I.roa
Signing time: Wed 01 Feb 2023 09:52:32 +0000
ROA not before: Wed 01 Feb 2023 09:52:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 84.32.14.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 15:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:64:6a:a5:f0:ff:a8:15:3f:f2:f4:b6:c3:16:9f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 1 09:52:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2be4f7b3fb3ca00665d2ac23aad24f584c471792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:b6:7c:c2:ef:2b:51:3f:1c:58:45:97:17:
a0:ab:e6:c6:e6:03:3c:af:64:2e:ab:8e:3c:4b:c3:
76:bc:5e:11:0b:b2:c5:83:77:db:39:29:cb:e3:f9:
9b:3b:d7:6d:af:32:25:95:01:ba:de:6e:ab:b6:44:
03:54:cb:c6:43:ee:ba:35:8b:a5:08:f4:a4:1f:a4:
df:bf:ed:0e:12:9d:92:cd:2f:76:09:63:53:3b:13:
ae:02:6a:94:90:5e:39:7a:df:ea:28:0c:cd:88:e3:
25:c3:51:b5:94:de:b2:07:d1:dd:bc:18:0f:e6:c0:
10:2c:4d:4a:49:3d:e7:57:61:71:00:12:8c:ce:f6:
8f:c3:97:0c:d8:2d:0c:53:cb:1c:48:ce:a2:7a:02:
a6:3b:26:13:ba:8a:79:56:41:16:5c:9a:59:31:53:
af:ee:36:48:cf:0f:b2:b7:c2:26:17:b0:88:80:58:
9a:e2:c5:26:3c:b3:64:94:f6:5c:e2:10:d3:78:a3:
66:86:6b:cb:22:d3:2e:ff:69:02:b1:1f:49:bd:35:
0f:58:e6:16:fa:45:55:d5:ae:2a:3b:03:b9:cb:59:
44:e5:97:cd:20:50:ec:eb:44:5b:f4:ae:bc:07:0c:
c0:f6:b2:e1:74:48:d5:d3:5c:1e:3b:23:e3:8e:a7:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E4:F7:B3:FB:3C:A0:06:65:D2:AC:23:AA:D2:4F:58:4C:47:17:92
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/K-T3s_s8oAZl0qwjqtJPWExHF5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
84.32.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:46:3d:d2:5b:95:f7:a0:9f:52:b3:3e:e1:30:2c:1b:01:54:
f1:a6:5b:63:ea:f7:88:1d:74:ee:c3:68:3f:d0:cd:e6:46:05:
f3:84:01:43:3b:ad:83:d9:bb:f5:6c:9b:a7:fd:1c:b4:4a:c1:
1b:c9:8f:43:4c:83:7f:9e:67:b5:85:cf:c5:ad:46:be:1c:e7:
bb:ad:23:80:84:10:dc:fd:c3:35:fa:1a:22:66:79:20:ed:ca:
04:fd:98:a8:98:e7:5f:2f:7c:f7:76:d0:93:d7:66:5f:cd:9a:
69:d3:a8:38:58:04:bb:e2:67:6c:1f:a9:19:6c:ea:90:44:32:
de:c0:b4:9d:ab:d8:d2:d3:be:2f:f7:5a:f2:48:e9:c4:0e:0e:
d2:5e:1c:35:4c:f7:88:c9:28:dc:a3:b5:1b:d4:8b:b6:1f:28:
4d:59:81:d2:31:d6:54:2d:ae:61:1a:38:b4:72:64:93:9a:07:
4b:eb:f7:dc:4a:af:62:aa:6e:76:51:ce:85:f1:4c:96:a1:ea:
aa:3b:75:74:c7:e5:a5:09:91:ef:69:d2:da:f1:77:f1:39:75:
ff:65:05:f2:82:03:f8:b2:8b:fc:97:2d:a7:0f:86:e2:b3:c5:
0c:83:29:d7:78:57:f4:06:e5:80:f7:0f:3d:01:a7:b2:5c:fc:
76:5c:2f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org