Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LjQOjIKlNwMhqgoMprbLKuueJg8.roa
File: LjQOjIKlNwMhqgoMprbLKuueJg8.roa (raw, json)
Hash identifier: XAf4QjAIhixxjSYGt5u1d2ci7atzHeI3OhgN/GsLTto=
Subject key identifier: 2E:34:0E:8C:82:A5:37:03:21:AA:0A:0C:A6:B6:CB:2A:EB:9E:26:0F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188A0D8F1ACC937F28878DDA06D12A3EF3E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LjQOjIKlNwMhqgoMprbLKuueJg8.roa
Signing time: Fri 09 Jun 2023 15:49:12 +0000
ROA not before: Fri 09 Jun 2023 15:49:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 84.32.177.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jul 2023 19:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:d8:f1:ac:c9:37:f2:88:78:dd:a0:6d:12:a3:ef:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 9 15:49:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e340e8c82a5370321aa0a0ca6b6cb2aeb9e260f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:a7:88:03:51:e9:70:0c:f1:21:67:94:12:
6d:3c:54:d4:ae:2b:9b:7e:b2:18:dd:02:95:3b:4a:
71:73:90:af:9f:63:11:d6:ea:39:4a:fc:92:e3:b7:
61:3c:1c:cd:f0:35:54:8b:8d:10:7e:6a:a4:79:24:
91:a7:22:3a:b0:d2:31:23:78:fe:a4:11:6a:fb:30:
16:99:3f:4b:35:3a:3b:d8:e7:76:83:33:4d:f1:3b:
c4:40:a9:06:36:7a:f1:c2:45:e8:65:41:18:db:50:
9c:16:4d:c8:a1:c5:64:b6:25:8b:ba:5e:02:db:c0:
ab:97:1f:e8:51:2e:a8:99:17:60:35:47:41:3c:02:
38:d3:a3:30:75:5c:d0:ac:88:1d:2e:b3:50:97:9a:
9d:f0:3d:66:6d:73:b6:ab:8b:f5:13:1e:7e:05:fe:
60:1b:5e:ad:b2:99:ff:bc:de:ac:01:d2:8d:70:f2:
39:00:81:e4:ff:4f:bc:22:35:6c:33:94:93:3e:93:
78:f1:91:39:b4:52:09:1c:f6:44:10:bc:87:b7:8c:
47:f1:41:a7:1b:42:36:f2:62:37:44:81:01:eb:fb:
31:10:27:c0:aa:22:bd:5e:9e:3d:0e:27:16:a7:87:
85:19:41:aa:46:15:c1:f8:b6:e8:04:ce:15:61:81:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:34:0E:8C:82:A5:37:03:21:AA:0A:0C:A6:B6:CB:2A:EB:9E:26:0F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LjQOjIKlNwMhqgoMprbLKuueJg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.9.0/24
84.32.14.0/24
84.32.48.0/24
84.32.177.0/24
Signature Algorithm: sha256WithRSAEncryption
69:db:f4:24:01:05:3e:bb:af:f2:21:0e:05:61:6b:fd:18:d6:
30:d4:8f:cd:f4:16:d0:86:f1:38:51:55:e5:fa:af:f4:82:17:
a4:96:ac:a4:8b:98:1f:b6:28:6b:4b:66:9b:59:5f:42:15:a3:
b3:a0:15:c2:9a:51:62:02:da:ba:f9:f6:58:e2:b9:89:4f:e9:
0f:95:87:69:d1:b0:38:c1:5d:05:f1:73:e1:e1:f6:14:04:28:
b8:49:74:30:0a:d6:ed:ec:e3:5e:aa:d8:d2:41:4a:ce:29:75:
17:c5:69:45:46:aa:74:39:7d:62:82:da:ca:1b:40:ab:1f:87:
40:79:72:e1:15:9e:2b:ad:a9:6d:6e:f8:a6:27:f0:87:00:ae:
9c:2b:c7:4d:59:f5:44:be:22:a9:a6:31:af:b2:79:39:39:35:
73:8c:d8:cd:be:16:5b:d4:80:40:84:a3:19:f9:15:3a:ef:6f:
72:12:7d:58:23:ff:48:fd:70:64:08:01:d0:b1:34:3f:3b:ff:
4c:2e:1e:34:aa:21:3c:05:35:dd:74:43:c6:01:6b:fe:51:06:
1a:7b:1d:5c:3d:1c:c3:b5:2b:4b:3b:33:70:f7:88:70:b9:18:
17:63:eb:3b:31:e8:76:1f:e4:11:a5:21:fb:8a:21:e7:35:0e:
e5:05:1c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org