Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/K7V60a0y0T-E9msAqqXh_5Hn-Hc.roa
File: K7V60a0y0T-E9msAqqXh_5Hn-Hc.roa (raw, json)
Hash identifier: XhZ26AMKTxGO1QiyRe6dffB9NPEwhXIQ71F4rY1xiwQ=
Subject key identifier: 2B:B5:7A:D1:AD:32:D1:3F:84:F6:6B:00:AA:A5:E1:FF:91:E7:F8:77
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01869867364A7394851042B15241C94DACC0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/K7V60a0y0T-E9msAqqXh_5Hn-Hc.roa
Signing time: Tue 28 Feb 2023 14:22:26 +0000
ROA not before: Tue 28 Feb 2023 14:22:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.184.0/22 maxlen: 24
88.216.189.0/24 maxlen: 24
84.32.188.0/22 maxlen: 22
88.216.93.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.150.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:67:36:4a:73:94:85:10:42:b1:52:41:c9:4d:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 28 14:22:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bb57ad1ad32d13f84f66b00aaa5e1ff91e7f877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:a5:48:4a:64:a7:e6:2e:10:03:c3:f1:b9:
13:5e:61:35:68:39:3f:3d:2e:8e:4a:4a:6e:02:d7:
13:4c:f3:2c:28:36:db:26:45:e9:21:fc:a7:75:67:
b9:f2:3e:93:b4:88:6f:aa:27:0d:70:2f:4f:0e:b4:
01:a3:70:1c:8f:78:54:6b:b4:7b:9a:b9:97:b5:52:
49:c3:ba:70:d0:70:5a:47:c3:5f:63:2b:64:d2:1e:
47:6a:9d:db:99:9b:da:f9:d9:cb:7c:e1:69:2b:d0:
ef:9a:23:10:fd:46:48:ff:4b:91:e0:08:af:7d:75:
7a:cc:9b:2c:0f:ce:c6:6a:55:52:41:39:a0:f2:0e:
b5:e7:ad:3f:3f:c2:69:82:08:f3:ef:c3:52:f4:cb:
68:a4:5e:bd:b3:bb:d7:c3:c0:68:e1:67:1f:ba:af:
21:4e:25:51:28:72:b7:91:1b:22:e8:fd:f6:17:6f:
04:30:80:e2:f0:64:7a:7d:88:a8:f8:c5:81:1c:86:
14:2a:3a:2f:5d:f3:fb:bb:69:7f:5e:f7:54:f0:e1:
69:42:8c:a4:a0:3a:bf:e0:6a:07:b2:6a:f9:c1:b2:
48:94:88:9c:50:21:43:70:51:e2:89:8c:a8:71:b5:
e1:51:10:b4:93:fe:7d:33:c2:55:9e:e6:f9:69:da:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B5:7A:D1:AD:32:D1:3F:84:F6:6B:00:AA:A5:E1:FF:91:E7:F8:77
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/K7V60a0y0T-E9msAqqXh_5Hn-Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.108.0/23
84.32.150.0/23
84.32.184.0/21
84.32.250.0/24
88.216.93.0/24
88.216.189.0/24
Signature Algorithm: sha256WithRSAEncryption
56:4b:db:ff:b6:1a:19:5b:e4:10:bc:a2:21:28:d9:83:3b:b8:
67:ea:8a:f0:b3:34:58:9e:45:48:82:d3:e2:10:4b:07:e3:8f:
71:ee:cc:3e:be:57:fc:52:76:7c:15:36:ad:12:cf:be:2d:77:
86:d7:cb:87:12:4a:64:f5:71:66:a8:b5:fd:ca:c9:7c:75:05:
fd:a5:b1:12:c7:97:f1:a4:6b:6b:c4:99:cb:f0:69:3f:f9:7d:
05:0e:83:e2:4c:94:14:cc:ae:b7:83:25:0b:72:95:54:6c:f1:
08:15:c7:32:fc:30:ed:00:af:9a:ff:b1:7a:50:98:32:7b:ee:
a3:22:3d:5f:ab:ac:5d:87:5f:46:20:3c:dc:d4:1f:a4:30:75:
fc:85:3e:ea:1a:94:4c:e5:0e:e8:bb:4d:cd:7d:5b:5d:f7:81:
b9:dc:35:a5:d7:3e:70:26:fd:4f:a3:3e:8c:b5:48:08:a0:25:
37:f0:83:f9:21:81:43:dc:ba:26:26:20:92:5c:f3:8e:cd:3c:
fc:52:dc:de:dd:4e:6a:8e:d5:03:ad:59:9f:a8:64:14:94:b6:
85:23:dc:cb:ce:4a:fa:68:70:6f:b9:79:ee:da:47:e6:0a:e4:
b2:7b:0c:d4:56:12:d6:3a:13:25:41:7c:e7:ea:28:68:cb:8a:
25:06:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org