Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/L7pHlZ5xVeWuRV7fjrJkdgSm7-0.roa
File: L7pHlZ5xVeWuRV7fjrJkdgSm7-0.roa (raw, json)
Hash identifier: h3BwYooiT/zWtqsMDURgCHVviBhq57cDQpFHDL5sub0=
Subject key identifier: 2F:BA:47:95:9E:71:55:E5:AE:45:5E:DF:8E:B2:64:76:04:A6:EF:ED
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186A7F55E004E5C9F4494CDE5DD67233ABB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/L7pHlZ5xVeWuRV7fjrJkdgSm7-0.roa
Signing time: Fri 03 Mar 2023 14:52:00 +0000
ROA not before: Fri 03 Mar 2023 14:52:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 84.32.218.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Mar 2023 12:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:f5:5e:00:4e:5c:9f:44:94:cd:e5:dd:67:23:3a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 3 14:52:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fba47959e7155e5ae455edf8eb2647604a6efed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:6c:fa:78:86:0d:d6:7f:63:ed:a7:6c:4d:
e0:c8:35:01:7e:74:bc:88:3a:61:2f:aa:c9:34:0c:
22:19:56:b6:6e:83:e1:72:57:8b:28:a2:87:ff:0d:
53:d5:ea:7e:f7:d7:16:db:4f:3a:94:3f:74:5d:fb:
d1:b0:97:3d:9c:b3:d2:e5:d5:63:8b:a3:af:d0:80:
fb:50:85:59:77:ac:cd:24:25:ae:b6:1f:a9:37:d9:
bf:0e:cc:01:99:de:fe:9e:9c:27:77:52:40:76:c2:
10:53:e3:2b:2c:ae:61:7d:6c:51:a2:53:6f:8b:50:
00:81:ea:9f:ec:77:06:f3:02:eb:46:ab:bc:aa:71:
77:b2:1d:bc:02:6b:dc:12:c3:e3:92:90:17:f4:a4:
bf:c0:fc:1d:02:cd:48:b8:73:60:c3:52:a8:86:e1:
87:33:1f:8b:d9:ad:24:29:66:59:66:92:5e:1a:b8:
f4:5e:76:c3:78:4a:fb:29:4b:c2:3f:d6:69:f0:12:
98:ef:cf:94:5b:2a:8b:e9:bf:5b:21:35:68:e3:6c:
f8:da:6f:af:0b:45:9a:3d:81:80:8b:ab:22:c6:b5:
53:33:a8:73:36:93:78:ba:7b:4c:ae:fb:15:55:a8:
47:96:64:29:94:13:99:ac:26:e4:29:6a:46:df:53:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BA:47:95:9E:71:55:E5:AE:45:5E:DF:8E:B2:64:76:04:A6:EF:ED
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/L7pHlZ5xVeWuRV7fjrJkdgSm7-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.218.0/24
84.32.229.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cf:59:6e:d3:aa:41:1c:b2:2f:fc:44:c6:a5:e4:cc:6e:c9:
b1:66:6e:7f:73:68:69:27:55:02:13:88:72:de:3b:3c:bf:42:
56:7c:d5:93:f2:af:59:6a:a1:53:60:78:4f:b9:02:e2:d1:08:
de:be:7c:e9:e0:b3:de:12:90:c1:52:36:80:5f:0d:ba:d5:34:
c1:3a:8b:59:7e:49:cd:12:75:7e:2a:82:c7:75:48:d3:7b:1c:
ed:92:81:fc:ef:6e:18:d9:98:b6:4d:cb:ef:6d:93:41:7c:d7:
a1:4b:c2:7e:e8:70:22:12:63:db:19:f5:0f:b0:b0:4a:ad:4d:
00:80:a2:57:d8:96:12:97:e6:7b:9d:35:4f:2e:57:30:64:3a:
29:df:41:da:8d:ed:23:98:82:97:f3:75:0f:e6:f2:5d:75:92:
7e:24:66:6b:47:a1:c7:5f:2d:0b:ee:ba:b4:d0:bc:0a:7d:f4:
cc:3a:2e:28:23:26:83:cd:38:0f:61:15:89:13:b0:b4:f0:93:
cb:10:1a:e3:cd:f8:84:5d:6e:b0:86:a9:a8:1c:d2:38:20:b2:
e2:36:bf:c7:5e:5d:71:82:dd:36:28:d5:7c:96:52:b9:d1:fc:
fc:16:1e:41:5f:e4:c9:a2:9b:bc:96:39:94:1f:7d:88:8d:1d:
69:aa:56:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org