Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RXRL6961dLxsLNun9zETDOW6YYU.roa
File: RXRL6961dLxsLNun9zETDOW6YYU.roa (raw, json)
Hash identifier: z2Sr+YS71gcSY9ab0OqklnlBki7HRXrOiiAF7g2DlXE=
Subject key identifier: 45:74:4B:EB:DE:B5:74:BC:6C:2C:DB:A7:F7:31:13:0C:E5:BA:61:85
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01890791BAEE67D85FD79B97E26C7CB0DA96
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RXRL6961dLxsLNun9zETDOW6YYU.roa
Signing time: Thu 29 Jun 2023 14:32:18 +0000
ROA not before: Thu 29 Jun 2023 14:32:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35409
IP address blocks: 84.32.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 05:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:91:ba:ee:67:d8:5f:d7:9b:97:e2:6c:7c:b0:da:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 29 14:32:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45744bebdeb574bc6c2cdba7f731130ce5ba6185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:42:fa:04:30:a9:47:8a:90:14:d8:4c:05:39:
57:91:11:80:bf:27:52:7d:e7:af:72:4d:8f:c4:6b:
52:7e:46:07:4d:af:b1:fe:5a:10:42:ba:d0:30:21:
fb:d1:b5:62:75:bd:bf:22:1f:ef:ed:1e:f0:09:11:
eb:6e:4d:55:93:38:4b:01:ca:a0:be:3e:c3:73:26:
76:bf:19:44:93:e6:4c:44:13:78:45:b8:9c:cc:42:
ed:62:1c:1a:11:af:0e:52:97:56:90:1a:81:a6:af:
b3:ff:93:3b:6e:98:a0:f2:02:af:4d:d6:e5:ad:08:
03:5a:ac:ee:5f:ce:4a:0b:70:71:c7:ae:64:ab:ec:
54:98:46:da:ea:48:e1:a6:71:8a:c9:70:61:46:90:
85:f2:2a:0e:5b:29:ed:b5:82:f0:88:6f:19:f9:f4:
c2:5e:50:dc:0e:b6:65:7f:17:b8:cf:8f:49:98:bc:
7d:f7:fc:35:b5:f5:1f:53:c9:5c:45:20:65:fe:66:
10:e6:3c:30:1d:f4:68:ad:fd:17:71:fa:7e:69:25:
f7:96:7f:6b:c8:a3:a5:c6:13:82:35:93:a1:d2:6f:
9b:9c:1a:cf:93:9c:cd:c4:31:f9:cd:ed:c2:67:33:
f8:fc:df:7b:19:83:e3:a2:b2:ec:f8:63:ec:81:bb:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:74:4B:EB:DE:B5:74:BC:6C:2C:DB:A7:F7:31:13:0C:E5:BA:61:85
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RXRL6961dLxsLNun9zETDOW6YYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.246.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c4:3c:67:53:c2:22:c4:da:87:47:11:8d:18:73:9a:c1:45:
c2:bb:ea:1b:c7:3d:a9:d7:1a:d3:f8:4a:b0:cb:64:13:38:b3:
22:3b:8d:f8:48:ec:0f:2a:95:6e:a3:a4:38:10:06:3f:08:ee:
93:a8:75:63:c7:f9:7c:af:16:ff:61:a5:27:29:47:7b:75:60:
79:f3:4f:d5:4f:50:36:21:45:75:70:f9:5c:76:97:24:f4:f1:
d7:b9:f5:ef:53:f0:05:69:d3:fe:50:81:82:fb:63:51:c8:40:
7e:23:df:75:21:01:a6:18:10:d1:ab:32:35:90:fb:c5:55:a5:
ef:6a:23:d1:c8:cf:76:b0:3c:5d:ed:97:74:59:d3:e9:2a:37:
a1:53:96:93:75:4e:06:c2:17:51:68:9a:41:c2:62:0b:27:b0:
4d:5f:c2:59:6e:2e:e7:86:4b:0d:34:ee:20:e2:1b:34:64:bb:
ca:bd:2c:60:1a:11:2e:9a:95:1e:fd:e7:46:65:8e:c4:31:78:
ca:12:59:63:b1:a4:dd:c9:8c:86:51:e4:fa:fe:d1:68:16:19:
15:ac:62:f9:05:5e:8c:64:b6:d2:62:fa:17:02:1c:b0:4a:43:
34:6b:6a:51:7a:3f:31:8b:6f:14:3c:f8:19:7c:ad:38:b7:0e:
2a:97:06:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org