Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/O9l5CIq1_dcBiY1_wJwWf4unzxM.roa
File: O9l5CIq1_dcBiY1_wJwWf4unzxM.roa (raw, json)
Hash identifier: eyauHlhvbsdijA9IreBYJ5ptDgoS5u9rL+uXmpEjwK8=
Subject key identifier: 3B:D9:79:08:8A:B5:FD:D7:01:89:8D:7F:C0:9C:16:7F:8B:A7:CF:13
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFB639557FC4B72AD6DD06CCF76F4B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/O9l5CIq1_dcBiY1_wJwWf4unzxM.roa
Signing time: Sun 01 Jan 2023 18:54:47 +0000
ROA not before: Sun 01 Jan 2023 18:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 84.32.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jan 2023 14:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:b6:39:55:7f:c4:b7:2a:d6:dd:06:cc:f7:6f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bd979088ab5fdd701898d7fc09c167f8ba7cf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:72:85:42:ad:32:f2:07:b7:62:38:15:8d:
f6:fe:01:bb:35:7e:72:37:6f:64:37:9b:91:fa:76:
62:08:c7:f9:59:14:3e:68:da:19:73:bf:cc:04:79:
69:a4:ec:35:89:60:50:ee:f8:5e:46:86:6f:51:8b:
6e:11:b9:8b:91:ba:63:13:97:84:d4:7b:c9:7d:dd:
0a:6f:6d:4e:f4:ed:c6:b9:77:92:6e:bf:02:2b:05:
cc:ae:37:b3:3d:3a:e7:f9:7f:b9:ea:70:9a:02:f5:
38:1a:c4:fd:32:6f:e9:3f:a4:18:2e:f1:20:e4:3b:
53:3e:92:76:31:fd:b5:c7:0d:96:3b:70:f5:53:a2:
35:41:1f:81:43:a2:bc:6e:2c:5e:3a:72:da:b6:0a:
8b:42:35:70:09:ae:e3:79:78:6f:13:a1:51:97:54:
ef:73:90:26:b4:e6:3d:d8:0f:cb:97:82:3c:4e:c7:
a6:87:b9:a5:93:88:a0:9c:93:c8:47:0b:e1:38:b6:
79:ff:cd:f9:32:78:94:8e:d4:50:61:fc:52:89:c9:
2b:fb:02:a7:7e:8d:5c:ea:6a:22:c7:ea:00:b5:4f:
69:db:2c:44:85:c8:75:ad:13:04:2b:f7:75:99:34:
5c:b8:e7:c3:7c:2d:5a:9b:5b:2a:79:30:80:d3:b1:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D9:79:08:8A:B5:FD:D7:01:89:8D:7F:C0:9C:16:7F:8B:A7:CF:13
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/O9l5CIq1_dcBiY1_wJwWf4unzxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d6:04:39:14:fd:d5:a7:ea:64:cc:9a:ae:af:4f:fd:4b:ff:
04:06:e6:82:7a:64:26:cc:76:75:c8:b6:af:75:39:55:48:9c:
0e:ab:d7:ed:d1:45:e5:51:de:40:73:2a:69:78:30:d3:27:d7:
7d:3c:72:bc:4c:97:fe:fa:a6:b5:b7:59:33:c7:35:f2:3c:74:
e0:77:71:1a:44:6c:71:19:07:40:e2:b3:12:b0:1c:84:10:6b:
90:c7:af:79:7b:75:1b:72:bc:8a:4f:2d:a5:0e:48:f7:96:18:
69:7f:a9:33:08:7a:93:68:d1:e5:99:f7:7c:81:98:49:53:a4:
d3:b8:e3:ec:22:9b:80:4a:94:76:b7:a3:ba:9c:e6:d8:ba:b3:
03:b9:c3:7f:f0:ff:22:56:96:73:86:c6:e0:92:c9:a1:3c:1a:
5d:1f:1c:1e:8c:2e:73:4d:57:a0:88:01:5e:82:f0:f7:84:67:
4e:80:0f:8a:70:73:26:61:88:42:29:a6:dc:a0:8b:20:d7:12:
80:86:20:10:ee:df:f3:9a:74:71:9c:58:01:fc:f5:ca:cd:e8:
30:74:90:83:fc:d2:16:9a:ae:95:42:8b:97:cc:b9:81:f6:b2:
9c:45:00:d1:c9:9f:78:8b:e9:4d:50:02:94:52:91:fc:58:f6:
c9:74:90:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org