Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/R_n2vAZFJgFZefAgJLeRsCu6hU4.roa
File: R_n2vAZFJgFZefAgJLeRsCu6hU4.roa (raw, json)
Hash identifier: Vr6ff0p9i7/Lai5DHzu3K/lyRKqfememMbOq0IStMPs=
Subject key identifier: 47:F9:F6:BC:06:45:26:01:59:79:F0:20:24:B7:91:B0:2B:BA:85:4E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5013B0AD34650DA2F30C2005D57BCF5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/R_n2vAZFJgFZefAgJLeRsCu6hU4.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 84.32.70.0/24 maxlen: 24
84.32.216.0/24 maxlen: 24
88.216.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 06:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3b:0a:d3:46:50:da:2f:30:c2:00:5d:57:bc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47f9f6bc064526015979f02024b791b02bba854e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:86:aa:bc:7e:9b:ef:ae:f9:a4:61:37:08:4b:
6c:e8:3b:1e:d5:d7:8c:54:34:4a:a2:82:b5:16:e6:
93:d9:e2:95:4e:5b:0c:7c:81:55:b1:93:82:f4:47:
30:f7:74:47:42:51:7a:54:50:5b:9a:e1:57:8c:57:
1f:a4:43:ab:5e:46:75:c7:ad:b7:4b:be:f1:03:24:
37:41:71:3d:3b:ba:4d:a4:93:a2:e4:d2:91:e8:41:
80:63:b1:fe:da:24:9b:16:c4:8f:34:61:eb:84:1c:
df:b9:77:97:a7:14:3f:dc:f8:61:f8:c4:19:b4:20:
3a:71:96:35:30:75:62:51:f1:1c:11:db:31:82:13:
17:54:cf:04:b8:df:e7:65:21:14:4a:4a:94:6d:23:
82:a4:d4:98:70:5e:0b:0b:7b:53:b1:58:fa:5b:b6:
10:d6:b1:f1:ae:46:56:96:e0:dc:3f:28:cb:57:5c:
e8:b9:e4:47:16:f4:4d:e2:10:a1:3e:39:40:80:41:
8c:d5:68:15:1e:80:30:e9:d6:7c:2d:29:c1:21:21:
4a:72:8a:8a:93:18:6d:98:64:db:38:7e:27:48:c2:
31:20:1d:9d:cd:32:84:4e:8f:34:81:42:90:cc:58:
49:54:89:f0:04:82:29:0d:2c:e3:28:82:d1:6b:c2:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F9:F6:BC:06:45:26:01:59:79:F0:20:24:B7:91:B0:2B:BA:85:4E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/R_n2vAZFJgFZefAgJLeRsCu6hU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.70.0/24
84.32.216.0/24
88.216.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:9e:5f:c9:77:d4:87:94:68:a5:4b:cf:52:49:ae:d1:80:ca:
da:0d:2c:3f:d9:9c:e2:3b:7c:fa:55:bc:d4:d6:b6:44:cd:5f:
18:39:fe:65:48:73:6c:dd:96:74:4b:52:75:d7:3d:9f:ab:b3:
6d:1f:b3:17:d2:6f:77:16:80:50:9a:3f:72:41:7f:26:b0:c9:
87:c6:71:8c:96:41:90:eb:95:11:c0:3a:3f:3d:7b:9b:68:86:
4b:08:e2:cb:d8:d4:74:61:19:7f:70:90:95:8b:95:68:7c:d7:
27:24:4d:11:e7:d4:48:56:05:21:e1:05:5f:dc:49:5f:c2:d5:
b3:f1:6f:d0:50:43:b9:1d:c1:6a:24:b0:4e:e4:66:5d:23:d9:
01:1e:4e:05:9c:7a:f2:bf:f7:b2:d3:81:18:4a:49:4d:a9:ca:
01:eb:ba:f9:a6:6c:48:01:76:ab:66:38:9f:78:c6:6e:72:27:
84:0b:9d:19:33:8f:18:3b:df:f4:af:eb:67:c6:17:4a:f5:4b:
fa:2d:8f:f8:5f:dd:9f:46:47:97:f2:84:bf:57:b2:4c:e3:06:
b7:09:b4:c9:6a:30:fd:5a:a0:b5:1e:c6:10:b4:39:76:4a:51:
fd:7f:e4:a5:14:b1:20:47:ce:c6:a6:27:9e:39:c7:89:5b:f1:
77:a5:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 09:35:28 2024 by rpki-client on console-fra.rpki-client.org