Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N9cKMhTuXOBNc6iq7U65JBKhKP8.roa
File: N9cKMhTuXOBNc6iq7U65JBKhKP8.roa (raw, json)
Hash identifier: 22AmDH4zHiSHbiQfeNnMR1QjSoOwLBdk0cc6u79nH8k=
Subject key identifier: 37:D7:0A:32:14:EE:5C:E0:4D:73:A8:AA:ED:4E:B9:24:12:A1:28:FF
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018D45E4CF96E20DC7649A89A20A4C0D230B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N9cKMhTuXOBNc6iq7U65JBKhKP8.roa
Signing time: Fri 26 Jan 2024 13:10:39 +0000
ROA not before: Fri 26 Jan 2024 13:10:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 84.32.26.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 11:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:e4:cf:96:e2:0d:c7:64:9a:89:a2:0a:4c:0d:23:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 26 13:10:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37d70a3214ee5ce04d73a8aaed4eb92412a128ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:90:2b:89:e1:61:1b:4c:09:70:04:38:7e:
03:93:72:1e:6f:44:b1:75:47:d5:73:3b:f0:35:44:
07:2e:2a:c0:5d:7a:6d:63:c8:d6:d0:6a:e2:3f:b7:
56:53:00:d2:c8:59:c2:99:14:ca:5a:39:e8:b2:6a:
4b:ff:d4:0c:c9:55:38:8b:7c:76:e0:f8:52:9f:84:
1e:5a:68:dd:c4:cb:b7:7c:82:f9:e2:16:14:aa:04:
95:53:bb:87:42:b0:d7:24:c9:ed:6e:6c:75:48:08:
6b:34:6d:9a:08:26:29:b6:05:9e:25:e6:28:a8:25:
4a:de:08:50:ce:dc:f9:c5:9d:d7:0c:65:74:66:e3:
6c:7b:33:c3:5e:7f:fc:1f:0d:21:8b:87:d1:b0:ba:
17:a1:f3:8c:c4:5f:b2:11:27:ca:88:e0:1b:21:f5:
a0:15:ce:ca:1b:b2:aa:e5:34:50:ef:7e:28:84:14:
28:97:f3:3a:37:59:ad:53:69:25:40:f2:36:d3:16:
d4:be:9f:98:57:15:a8:b0:b5:c9:0c:40:70:55:ea:
9b:55:da:50:c4:b9:7f:92:04:35:56:3c:4c:e3:1f:
8b:e2:d0:46:fc:42:6e:6d:15:ab:3e:fc:b8:a5:7d:
e5:63:ce:07:d9:1d:e7:fa:ec:35:ad:71:ca:bd:64:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:0A:32:14:EE:5C:E0:4D:73:A8:AA:ED:4E:B9:24:12:A1:28:FF
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N9cKMhTuXOBNc6iq7U65JBKhKP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/24
84.32.39.0/24
88.216.187.0/24
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ae:ab:42:1c:2b:69:77:16:f4:00:6b:b6:24:3d:1e:d1:63:
8c:26:d2:17:d6:f1:fa:9f:e6:46:da:1d:c6:31:81:3c:a3:bb:
39:19:2a:5b:84:3b:62:df:5b:c3:48:99:a7:a8:fb:f4:b4:28:
c6:5b:75:bb:89:75:5e:af:81:0a:01:8a:81:47:cb:70:3d:a4:
65:c8:e0:2e:fe:56:f4:f9:fa:c4:34:5e:b8:87:bf:31:0c:a8:
70:b5:bd:b2:91:f1:46:6e:dc:22:bc:e1:ce:e4:d1:e7:2f:53:
ef:d0:b3:8d:3c:a6:d5:7d:5e:f3:a1:2a:1b:a0:f5:f0:a4:70:
f8:44:9b:74:9b:f2:2d:0f:ed:a9:65:cd:a0:5f:3c:a8:dd:67:
25:39:35:e2:ef:44:f6:ac:b4:f9:77:90:19:40:8c:6a:aa:52:
ec:50:c9:77:f2:24:81:0f:69:3c:3e:fc:0f:77:07:5c:b1:16:
ec:b3:c6:6e:be:1c:63:a9:98:9c:f9:ff:f0:78:21:13:e0:40:
94:66:ab:9c:fa:06:96:8f:6c:c7:22:9a:6b:8b:84:c0:6c:ba:
5e:73:41:8f:ac:1c:1b:4f:08:28:4e:3a:7d:33:f6:46:5a:04:
49:97:bd:f4:83:c3:61:b2:cf:1c:4e:4c:82:ae:91:eb:05:d2:
02:fc:95:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:11:01 2024 by rpki-client on console-fra.rpki-client.org