Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/M9f6v5eXPYcxxDw5jk6iw6P1KhY.roa
File: M9f6v5eXPYcxxDw5jk6iw6P1KhY.roa (raw, json)
Hash identifier: 5ti3GJfc0UILxsUz70+oBQQdw/rabEEI/ZwVlJ7Xj6c=
Subject key identifier: 33:D7:FA:BF:97:97:3D:87:31:C4:3C:39:8E:4E:A2:C3:A3:F5:2A:16
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186E42C81F412254C389766F60B04F214ED
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/M9f6v5eXPYcxxDw5jk6iw6P1KhY.roa
Signing time: Wed 15 Mar 2023 07:29:27 +0000
ROA not before: Wed 15 Mar 2023 07:29:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 84.32.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Mar 2023 16:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:2c:81:f4:12:25:4c:38:97:66:f6:0b:04:f2:14:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 15 07:29:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33d7fabf97973d8731c43c398e4ea2c3a3f52a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:fa:4f:2f:d8:5f:63:72:43:7e:8c:89:6e:
cf:56:cc:eb:dd:48:70:df:11:29:e7:81:2a:99:87:
28:ef:e0:85:32:44:6a:1f:3a:b6:c2:37:62:db:6a:
17:c7:a9:87:cd:cf:a8:f5:30:eb:d4:eb:fe:3e:92:
b2:0a:f9:f3:ba:92:48:ab:bc:6a:e6:2b:99:7b:fc:
50:31:22:9e:95:e2:1e:20:cf:d0:07:a1:be:c8:28:
6a:98:7a:84:c9:82:63:70:17:6f:73:b0:85:81:cc:
b7:3f:0e:d1:4f:6e:d9:01:89:35:fa:ce:2a:fc:34:
2a:12:c6:ec:3c:db:00:13:0d:91:5f:07:19:87:37:
c9:67:8b:60:47:86:c3:c4:b8:81:35:55:31:12:d2:
c5:75:9c:1a:3b:63:c5:4d:e7:37:ac:63:93:5f:2b:
d8:f5:5b:00:b8:cc:14:07:d7:5d:6e:fa:84:bc:bd:
f4:0b:1f:1b:56:d2:18:7c:ad:5f:49:38:d0:a2:62:
ef:8b:1a:a9:4c:60:d2:90:35:cd:f1:72:0b:5b:a6:
2e:e7:a5:7c:e8:6c:0f:84:a3:40:8f:22:66:14:62:
25:8f:74:1f:52:21:7a:a0:43:ea:d0:8b:cd:5e:00:
ac:30:94:6c:43:90:50:04:43:4f:a4:34:42:de:40:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D7:FA:BF:97:97:3D:87:31:C4:3C:39:8E:4E:A2:C3:A3:F5:2A:16
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/M9f6v5eXPYcxxDw5jk6iw6P1KhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.222.0/24
Signature Algorithm: sha256WithRSAEncryption
90:91:fe:24:f2:ef:bd:3b:09:f7:ff:1d:f1:3a:ce:65:0f:8f:
a0:9a:1b:18:71:0e:e9:26:84:a6:47:c2:f3:d8:e7:3d:e4:4f:
80:41:a4:4e:d4:af:7d:9b:a4:13:ac:57:ec:09:b7:fc:3f:bd:
23:25:2d:8f:6b:15:12:cf:1c:17:a8:00:43:f9:87:92:16:0a:
9c:2c:7a:6a:b5:61:ef:82:37:a5:17:a4:d9:72:f2:b6:94:3d:
7a:e1:ec:b1:2c:07:25:96:4e:22:ca:95:7a:d3:ea:2e:cd:c7:
e8:f5:06:c2:c4:2f:2e:eb:5a:5c:f5:61:26:8e:37:93:69:0a:
50:1b:cf:ef:58:42:22:f0:bf:7c:9d:d4:08:13:e1:31:71:27:
f1:08:41:2f:cf:58:a3:c5:40:8b:62:48:3a:d2:16:23:1f:01:
86:27:41:a3:c3:f1:a2:3a:f3:d3:b3:c2:bd:ea:a0:f3:2b:2d:
94:99:5d:27:f6:9d:bc:7e:94:95:92:e2:03:ef:80:10:90:3c:
a2:3f:b6:e2:c3:46:98:81:1d:3c:1a:24:f3:82:d8:6a:7a:b4:
be:26:c2:31:43:9c:30:b1:db:68:8f:b0:6e:51:bd:8c:95:d6:
be:16:22:66:d6:bc:1f:35:53:a5:58:14:b7:c5:8c:22:7b:26:
a8:cb:3f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org