Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KpXgC1jM9zkSO8O9S-BR_pU4Q7c.roa
File: KpXgC1jM9zkSO8O9S-BR_pU4Q7c.roa (raw, json)
Hash identifier: x3u8Ij6EphAckpE1rx3qR61qal7KSi7LRcZABRvULiM=
Subject key identifier: 2A:95:E0:0B:58:CC:F7:39:12:3B:C3:BD:4B:E0:51:FE:95:38:43:B7
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187B1CF8F09D9936D9F6D2810BF70B31044
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KpXgC1jM9zkSO8O9S-BR_pU4Q7c.roa
Signing time: Mon 24 Apr 2023 05:49:42 +0000
ROA not before: Mon 24 Apr 2023 05:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 84.32.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 05:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:cf:8f:09:d9:93:6d:9f:6d:28:10:bf:70:b3:10:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 24 05:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a95e00b58ccf739123bc3bd4be051fe953843b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:a1:ad:b1:5e:04:68:fe:a1:14:7e:b6:15:
3c:d5:58:94:58:9c:ed:38:14:3d:83:15:5d:26:b6:
62:47:d4:b9:c2:c1:9f:5c:bf:df:b7:24:3e:31:cb:
17:eb:ff:70:5b:6f:2b:7e:5f:b2:be:a4:ec:e0:ea:
95:fd:95:be:14:2b:c5:25:be:dc:b9:51:1c:70:10:
fd:e5:ed:27:9c:73:47:88:ca:1f:4b:9a:cd:95:fa:
75:21:54:e0:b7:2d:e5:be:4f:5c:f0:f4:45:69:8a:
0f:00:f1:35:47:29:4d:57:b0:b6:0e:5d:9d:17:b2:
88:ac:d1:6d:cd:e3:14:57:fe:3c:65:b9:3c:2e:0a:
5a:1e:61:00:77:ed:51:5b:76:fe:12:8d:d1:6d:ec:
d7:b7:94:d3:a6:86:d8:84:a8:77:ab:41:48:25:ef:
61:3c:56:39:88:fd:26:c9:1a:61:31:f7:0b:33:72:
a7:14:5d:8c:20:8d:c5:39:02:3b:21:1f:e2:42:93:
84:23:e5:9c:45:bd:12:4b:66:e7:b0:4c:67:03:38:
a5:50:9a:c2:9e:73:d2:57:28:94:43:af:3f:46:dc:
1e:0a:50:56:1b:24:49:ff:83:c1:0b:c4:44:03:5a:
70:ba:b7:aa:72:73:b6:f9:9c:a4:2c:f4:d2:60:af:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:95:E0:0B:58:CC:F7:39:12:3B:C3:BD:4B:E0:51:FE:95:38:43:B7
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KpXgC1jM9zkSO8O9S-BR_pU4Q7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:95:81:6f:9f:f1:3a:9e:b3:3b:b9:97:f6:c2:13:8c:3c:56:
75:61:c0:3e:de:f2:c4:60:00:db:60:37:35:9f:24:b6:c9:f9:
59:66:48:da:34:26:ba:b3:6f:f3:c2:7d:f3:40:7e:6e:4e:83:
5a:e6:8f:15:3b:8c:d0:f8:8b:fb:82:61:b0:cc:5b:c9:ce:e9:
95:7a:ea:83:ca:37:41:a0:46:9d:24:05:28:f0:0e:3c:7f:b2:
86:a5:6e:07:78:38:56:41:6a:2a:3f:96:bc:79:23:bf:19:49:
2f:ab:b6:c0:33:9c:76:92:1b:45:8a:41:81:65:f1:03:4a:35:
84:1e:f7:1e:3b:0a:c0:f1:89:6d:23:b4:8e:65:b1:f0:8f:26:
9c:fd:64:72:30:6a:5f:e2:41:fa:1c:39:8b:7b:28:f5:99:6d:
8a:6a:09:a1:94:93:05:8a:20:e3:fa:2c:d5:be:e8:0c:10:e2:
9f:6a:6c:03:7a:b6:45:16:0f:2a:1a:2a:ba:6a:dc:ce:bb:0e:
2d:33:0d:51:4e:49:40:8e:c4:42:5d:79:f6:35:a9:a9:94:d1:
43:81:84:bc:03:56:8d:fc:9b:d3:45:bd:0a:3f:9d:62:54:e1:
4e:c4:01:60:27:c7:74:02:a3:9a:e4:96:3d:76:f2:3f:6d:18:
e8:eb:ce:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org