Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OSSMjaG8g_5BI_dnhB4-fyu2mz4.roa
File: OSSMjaG8g_5BI_dnhB4-fyu2mz4.roa (raw, json)
Hash identifier: orzDF2JTq8ePUzSI3BqgiSmAu3SUTPfZWnoSRLj7yEY=
Subject key identifier: 39:24:8C:8D:A1:BC:83:FE:41:23:F7:67:84:1E:3E:7F:2B:B6:9B:3E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018995D58B8637C53EF8B718F889022029B1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OSSMjaG8g_5BI_dnhB4-fyu2mz4.roa
Signing time: Thu 27 Jul 2023 05:32:27 +0000
ROA not before: Thu 27 Jul 2023 05:32:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 84.32.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:d5:8b:86:37:c5:3e:f8:b7:18:f8:89:02:20:29:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 27 05:32:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39248c8da1bc83fe4123f767841e3e7f2bb69b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:48:02:7d:a8:8c:ff:35:05:02:8b:74:87:7c:
a4:73:38:79:48:b5:8c:c7:08:5f:67:37:79:48:0f:
57:37:ba:3a:57:37:83:c5:4a:d9:c9:3a:d2:08:0e:
26:0a:5f:6d:fa:fa:bd:3a:1c:c8:f5:96:0b:7c:70:
6b:c1:23:b8:ef:f7:e2:9a:39:22:68:1a:d0:35:7e:
f7:36:36:c8:68:f2:c1:8e:ba:5d:54:5f:df:18:9e:
a3:e1:1e:2b:c2:84:ce:f8:e0:2a:6e:e8:94:11:bb:
33:19:25:65:50:f8:de:7f:ad:46:d1:60:58:48:f1:
a0:91:53:d8:fe:56:38:9f:97:d7:f1:32:e0:98:51:
54:0e:32:55:fd:cc:60:ed:2f:65:53:5b:1c:02:db:
6d:8a:c0:a1:ec:42:e7:ed:d1:f9:50:fb:fb:ba:f7:
9f:89:55:c1:c2:fc:a2:d0:4b:43:ba:58:b1:8c:6f:
f2:b5:1c:52:86:05:73:fd:1e:bf:29:d0:4b:2c:50:
47:8a:07:3e:d8:ad:0a:12:e3:12:0a:4f:1c:57:97:
95:d6:84:c5:7b:31:5e:6a:11:53:d1:40:34:08:0b:
de:97:52:73:06:71:a8:19:56:90:86:67:11:b4:77:
4a:cc:61:02:6c:69:15:a2:a5:29:08:f4:d8:0d:5f:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:24:8C:8D:A1:BC:83:FE:41:23:F7:67:84:1E:3E:7F:2B:B6:9B:3E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OSSMjaG8g_5BI_dnhB4-fyu2mz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.211.0/24
Signature Algorithm: sha256WithRSAEncryption
14:49:67:04:53:76:cc:fc:ef:19:53:b1:d9:72:8b:6c:1b:e1:
5f:0b:44:f2:4d:12:45:7b:4c:1c:9b:a6:2e:cb:75:f5:bb:72:
cb:96:d9:1b:d9:8e:c9:9d:a1:ae:7c:32:38:52:a7:f7:88:58:
7c:a6:92:ae:94:97:85:38:fc:f4:7a:53:3c:fa:17:2b:ec:07:
69:09:11:04:ee:4b:89:b9:2b:8a:77:76:7a:f2:63:c2:77:0a:
96:b2:ae:3d:43:2b:a9:e7:ce:19:2a:c2:7b:53:6f:f0:cd:f2:
91:e2:51:3c:f7:c0:4d:30:25:ea:87:6f:4a:2d:39:ff:57:22:
07:4e:96:c3:c5:05:6b:9d:a5:cf:35:42:14:e2:58:da:0f:26:
2d:2a:14:d6:e9:bd:c7:e0:26:92:0d:67:21:51:70:42:af:a0:
89:bf:82:41:78:df:b9:d2:58:fe:62:9f:a1:bb:78:08:f9:ab:
aa:8b:1a:a8:b0:5f:2d:9e:a9:bb:07:0e:d1:89:f7:37:2d:9d:
31:58:08:55:33:03:01:cb:a4:cc:16:e7:cb:0e:20:c4:f7:cf:
a1:43:2d:11:9e:e8:05:30:cc:84:96:7b:8e:4c:ab:66:48:54:
17:51:14:28:00:c9:11:be:24:8d:5f:22:e1:5d:d5:d6:bc:f3:
89:b0:fd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 11:18:04 2023 by rpki-client on console-fra.rpki-client.org