Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Pevf2AruFcmzJq6LV3XeDBWgc_k.roa
File: Pevf2AruFcmzJq6LV3XeDBWgc_k.roa (raw, json)
Hash identifier: EmkGzQDWpS8Vw8qE6L8eGpP879lDx+BVebL96LJZ9ZI=
Subject key identifier: 3D:EB:DF:D8:0A:EE:15:C9:B3:26:AE:8B:57:75:DE:0C:15:A0:73:F9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018673BA9E88967C6B701BB6D648D87BDDD9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Pevf2AruFcmzJq6LV3XeDBWgc_k.roa
Signing time: Tue 21 Feb 2023 11:27:35 +0000
ROA not before: Tue 21 Feb 2023 11:27:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 84.32.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:ba:9e:88:96:7c:6b:70:1b:b6:d6:48:d8:7b:dd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 21 11:27:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3debdfd80aee15c9b326ae8b5775de0c15a073f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:86:af:75:e6:4b:1f:7e:5b:cf:71:3d:5c:
77:2f:ef:13:72:6f:58:14:90:8d:0d:75:64:96:d0:
c6:f6:d4:19:81:44:66:c1:c3:28:d1:c2:be:90:1a:
dd:57:67:8e:12:6d:18:d6:00:b0:b7:73:f2:6a:e6:
b4:0f:09:28:82:10:da:80:d0:5c:e8:ba:c3:be:41:
3b:53:65:a1:3f:b1:5d:3e:0e:3d:24:e0:d8:53:76:
5a:6a:fb:1b:73:be:59:a5:6f:1a:c6:f0:33:e1:89:
e6:1a:e7:51:d2:97:a3:a6:6e:84:61:30:cd:a4:cd:
ba:87:b9:d6:86:ed:cf:95:b9:63:bd:00:d7:5b:2b:
43:fb:8b:8b:3b:ff:30:65:fa:33:43:01:ec:7b:49:
c7:3f:0d:3a:d0:87:e0:05:ae:74:72:59:ab:75:29:
62:8e:ba:20:79:c4:68:56:87:f1:f8:a4:98:90:ac:
18:99:03:2c:05:0e:7d:76:91:77:b2:59:76:a5:7d:
a4:b7:a7:b7:4a:5c:c4:44:d7:d1:24:ce:83:88:d7:
71:86:8f:79:d3:d8:4d:ea:cc:20:90:d0:60:7e:fd:
95:84:73:3b:ee:90:9a:ed:4c:e4:13:0d:c3:89:50:
74:8d:1d:ee:51:fd:05:11:98:72:54:b1:2e:96:97:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EB:DF:D8:0A:EE:15:C9:B3:26:AE:8B:57:75:DE:0C:15:A0:73:F9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Pevf2AruFcmzJq6LV3XeDBWgc_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.218.0/24
Signature Algorithm: sha256WithRSAEncryption
37:df:29:c8:d6:03:3d:d0:a9:55:a6:3b:87:c7:64:a1:22:a3:
0a:e9:f5:f9:67:06:3b:07:95:1c:e2:9b:27:79:0f:3f:63:f3:
aa:aa:1a:8e:40:4c:c5:a2:63:78:c9:73:e0:4a:71:f1:c5:91:
19:37:63:07:7e:76:6b:48:1e:7b:d5:55:66:0d:6f:b5:27:dd:
53:1b:ca:4d:bd:ab:f2:4a:2e:2e:89:a6:36:30:02:25:21:b7:
4d:3e:5f:11:f3:a3:3e:2b:f0:8a:22:ec:6d:24:de:c5:93:d3:
1c:6a:96:e5:ff:43:e3:79:69:a2:00:6b:08:c4:e1:45:25:38:
52:a8:48:93:af:8c:3c:ae:c7:8c:25:86:4c:e3:9d:d5:48:67:
b4:a4:5f:d8:64:75:07:3e:a7:e7:4d:df:b0:5f:8c:2d:be:44:
46:5b:e0:cf:4b:c2:d3:c7:3b:e7:04:df:a7:03:f9:2e:58:7e:
28:cc:6d:57:49:f2:bb:6e:14:af:b4:86:1d:ed:48:85:00:10:
88:e2:a4:f2:48:6e:a0:66:31:5e:e0:0e:31:41:96:34:11:82:
42:f3:2c:54:f0:17:4f:29:e7:a6:f2:4e:ac:e5:99:93:0c:77:
52:3b:c3:3e:ec:ef:47:99:2a:e2:37:1b:54:1d:95:6a:b9:9b:
6c:9a:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:47 2023 by rpki-client on console-fra.rpki-client.org