Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MUlAyz9Gzr9eampnsWIxqTIqXfs.roa
File: MUlAyz9Gzr9eampnsWIxqTIqXfs.roa (raw, json)
Hash identifier: p7HEFNwOvdIEU+IwcOjIh7tWJshpSM6mfoMABMRyNBA=
Subject key identifier: 31:49:40:CB:3F:46:CE:BF:5E:6A:6A:67:B1:62:31:A9:32:2A:5D:FB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185954198EE56C42812861C04453B196FBB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MUlAyz9Gzr9eampnsWIxqTIqXfs.roa
Signing time: Mon 09 Jan 2023 06:39:42 +0000
ROA not before: Mon 09 Jan 2023 06:39:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 84.32.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jan 2023 06:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:41:98:ee:56:c4:28:12:86:1c:04:45:3b:19:6f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 9 06:39:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=314940cb3f46cebf5e6a6a67b16231a9322a5dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:dd:a5:2b:e4:38:0e:52:da:7c:e4:18:91:
c4:6a:a5:e0:98:ba:ae:9b:2e:bb:b6:1b:eb:61:70:
f0:3f:17:06:a8:0b:c0:0b:26:b1:b4:30:27:42:03:
33:81:f9:5f:3f:aa:c3:c6:37:0b:4d:f3:98:ab:0d:
38:f2:df:12:a1:40:7b:67:8e:1e:30:0c:92:d8:29:
2a:08:cb:1a:b8:ce:d2:3c:d3:7a:0b:2a:0f:d0:29:
c4:9e:25:5a:1c:e1:f4:85:28:53:1e:9c:1d:21:e9:
c1:7d:fe:09:da:b2:c0:65:2b:f3:35:61:34:c2:55:
69:5c:ff:e3:64:90:f9:bf:4f:e3:1e:94:00:66:b2:
77:2e:8d:37:82:39:38:58:dd:cc:92:69:f9:86:b9:
f8:57:66:1e:2e:96:da:f8:fb:e0:b4:02:84:00:ec:
8c:ed:40:8f:ae:68:24:77:ee:b8:ed:f2:bb:3d:9b:
49:93:20:5b:5f:7f:a7:27:38:16:95:7b:33:9f:ca:
ca:4c:ae:7b:05:da:5c:74:6f:29:9c:57:48:71:a1:
cc:e1:0e:4b:b9:7c:ed:83:ae:44:c2:9c:dd:3f:d6:
ee:4a:25:f3:5a:87:2e:f6:9c:5c:96:56:9b:48:ea:
67:be:ec:91:21:27:21:d2:08:fd:ee:47:77:d1:fc:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:40:CB:3F:46:CE:BF:5E:6A:6A:67:B1:62:31:A9:32:2A:5D:FB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MUlAyz9Gzr9eampnsWIxqTIqXfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.14.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7c:8c:e9:15:56:8b:df:3c:4f:a8:cf:13:4b:4e:da:44:ba:
60:dc:6c:7e:bc:48:d4:2a:2c:e0:75:02:2f:95:13:e9:86:5b:
02:0a:e9:d3:86:6b:fc:7b:4a:98:c3:e5:e4:ed:e2:bd:a0:61:
8e:33:1f:7b:23:06:fd:89:00:86:ba:8d:2d:ee:64:1b:26:74:
03:4c:3e:9a:50:25:67:96:25:08:be:1f:e9:9c:48:7d:40:d4:
4c:51:8e:aa:0f:40:e8:21:e8:25:06:ac:de:82:59:04:45:18:
80:75:4d:66:5b:d2:18:f8:0f:68:56:1a:fb:f1:52:71:d9:7a:
9d:fd:eb:6e:05:00:be:8c:3e:1f:c4:13:8b:aa:2d:1c:03:c1:
25:70:c4:5c:b4:11:8e:4d:0e:6a:ba:d5:fe:a3:d9:f3:90:9b:
bc:39:8c:e6:75:4d:f5:b4:cf:33:72:00:e9:91:79:06:05:c8:
af:c1:3c:3c:c2:33:48:62:23:df:54:7f:d7:2e:05:f4:87:97:
80:ac:b6:f8:06:de:98:4d:cd:d0:2e:00:10:af:6a:b8:5b:69:
be:df:82:6a:b1:86:87:00:04:21:6e:bc:8d:af:49:8e:d7:73:
86:d1:c6:99:0e:9c:00:15:7b:96:8f:c4:5c:e8:36:a1:f5:f9:
42:01:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org