Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N6FJtq3VyC2t8xoRsB-ss9774_s.roa
File: N6FJtq3VyC2t8xoRsB-ss9774_s.roa (raw, json)
Hash identifier: wRKDwX6q5p9zKK7QTS4e2hEujKaxF4bP70ndvQevYD4=
Subject key identifier: 37:A1:49:B6:AD:D5:C8:2D:AD:F3:1A:11:B0:1F:AC:B3:DE:FB:E3:FB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFBE2F8C616081DFEA92CD15872566
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N6FJtq3VyC2t8xoRsB-ss9774_s.roa
Signing time: Sun 01 Jan 2023 18:54:49 +0000
ROA not before: Sun 01 Jan 2023 18:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51358
IP address blocks: 84.32.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jan 2023 10:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:be:2f:8c:61:60:81:df:ea:92:cd:15:87:25:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37a149b6add5c82dadf31a11b01facb3defbe3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a0:3e:5d:a2:57:4d:80:75:c2:fb:79:2a:03:
57:52:1f:47:7a:08:c1:96:f2:b4:19:35:43:ed:88:
f4:cf:fd:fd:3c:49:de:ba:70:d3:e3:ed:0a:88:72:
02:23:61:e1:00:1a:d1:ce:75:62:f9:ee:e5:da:d9:
02:93:c2:ee:80:c1:a4:da:44:0e:2a:f5:3e:f1:0b:
7d:f9:43:ec:18:13:e0:88:e8:ea:f8:b1:21:c5:ef:
e8:63:18:9b:e8:b3:09:38:34:cf:04:86:e2:25:44:
04:c0:fa:5a:27:57:f6:46:90:fb:5f:9c:a9:c0:58:
af:4a:4b:c2:bc:e4:67:00:c0:9f:88:39:3e:66:be:
6a:11:32:68:21:f1:94:d2:82:8c:f8:df:37:56:2b:
be:4b:f5:de:5d:30:d0:74:d5:62:bf:fa:50:8e:9c:
1c:1a:6a:42:51:1b:dc:42:57:3e:9b:69:f2:e3:d2:
73:a2:ae:0c:60:dd:a2:9b:6d:cf:df:79:c4:e9:d5:
cf:0e:8d:39:0d:a4:7f:64:f4:a0:58:ad:54:af:11:
46:ff:20:38:34:d1:eb:53:ce:ef:00:9d:64:d4:1d:
85:c6:34:96:b7:bb:15:e2:ab:b5:89:bb:fe:a8:0c:
d3:64:ad:ea:40:aa:b7:bb:98:9a:fb:6a:06:29:a7:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A1:49:B6:AD:D5:C8:2D:AD:F3:1A:11:B0:1F:AC:B3:DE:FB:E3:FB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N6FJtq3VyC2t8xoRsB-ss9774_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.33.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0c:d1:97:17:a0:aa:62:3c:48:e7:3a:5d:42:cd:4d:25:a7:
9b:f2:31:08:7a:46:34:eb:26:b8:40:15:b8:17:ae:75:4c:b8:
dd:44:dd:17:0d:4f:3d:91:01:92:38:0f:9a:cf:78:7e:ed:b4:
88:b4:65:24:e2:92:f3:68:f9:1e:3d:64:d5:b2:cf:9e:d0:c2:
b2:76:76:68:75:f3:51:73:48:06:9e:ce:0e:82:b1:91:be:b4:
40:8e:f1:11:f5:7a:54:33:f5:c1:54:5c:ef:53:73:10:ed:cc:
80:4a:49:35:ba:30:73:e7:97:b1:4e:5d:26:73:78:96:0b:35:
c1:73:56:11:31:bf:31:d7:2e:dc:9f:49:17:55:83:2d:af:c9:
7a:59:cd:c1:b5:41:4d:b5:61:f3:7a:a4:f7:2b:c8:5a:c5:06:
52:05:63:f1:68:73:18:12:bb:5d:35:f5:b8:03:21:38:a1:8a:
1c:99:42:6f:02:c8:fc:3f:ca:f2:40:81:5e:79:f7:71:e4:ba:
ef:75:f0:f2:79:8f:20:8c:c9:d9:1a:b8:12:60:cb:2c:fe:ba:
e5:8e:43:5d:da:70:82:b1:5f:09:8a:b3:62:24:28:9f:99:96:
c2:a4:8e:93:96:1c:e1:72:3f:4e:72:c7:37:5f:9a:8d:7e:10:
ae:5c:3e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org