Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SAxV3RlVhWrDJLdSPus1pCFuXfk.roa
File: SAxV3RlVhWrDJLdSPus1pCFuXfk.roa (raw, json)
Hash identifier: 9SUXaNpGXYP0E6Vj7oUIJ//5w9P5elGO5KR9JTmqBLM=
Subject key identifier: 48:0C:55:DD:19:55:85:6A:C3:24:B7:52:3E:EB:35:A4:21:6E:5D:F9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018609C9EB0BB08F06742262F50F3FA5EC1C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SAxV3RlVhWrDJLdSPus1pCFuXfk.roa
Signing time: Tue 31 Jan 2023 21:44:33 +0000
ROA not before: Tue 31 Jan 2023 21:44:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43043
IP address blocks: 84.32.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 11:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:09:c9:eb:0b:b0:8f:06:74:22:62:f5:0f:3f:a5:ec:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 31 21:44:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=480c55dd1955856ac324b7523eeb35a4216e5df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:6a:aa:c4:00:0e:c8:2a:24:62:e3:06:78:
33:3b:4d:45:9c:d8:9b:52:dd:28:c1:54:28:1e:6d:
5c:66:9b:4a:a1:7b:dd:6f:87:f1:d6:26:d0:63:a8:
71:dd:14:e6:fd:45:d0:ac:ec:72:b8:1f:8f:80:c4:
5f:b9:f0:29:4a:ee:eb:01:1e:f2:c5:cf:94:27:e6:
fc:7f:e8:ef:14:7f:ca:60:b2:ba:a7:2a:1d:af:33:
81:0f:8d:e4:96:fc:49:6b:0f:da:49:6c:4b:36:62:
c1:7e:b6:4f:a3:bc:ec:64:c4:b2:2f:3f:bb:04:a6:
64:a4:6b:7e:35:29:37:28:93:cf:c1:c2:16:85:1d:
fc:ec:32:de:69:7e:b8:48:47:b5:f9:e6:aa:ba:c9:
a6:2b:2a:7f:5e:95:29:a6:83:6b:04:2c:f3:f7:97:
c8:71:36:b4:8e:e7:e2:dc:8a:ad:82:f0:69:de:da:
0e:05:b6:36:4e:32:fb:ff:df:d5:97:4a:4c:b2:fa:
5e:21:8e:fe:2f:b0:09:16:4e:17:43:4f:c5:ee:d7:
04:8d:c3:fd:49:de:11:13:e2:62:a5:83:67:0a:37:
10:29:77:3c:10:05:c6:6b:aa:0e:98:f8:7f:cd:1a:
c2:5b:89:cb:a4:6a:0a:ba:5b:ae:b8:4e:f4:f2:94:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0C:55:DD:19:55:85:6A:C3:24:B7:52:3E:EB:35:A4:21:6E:5D:F9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SAxV3RlVhWrDJLdSPus1pCFuXfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.11.0/24
Signature Algorithm: sha256WithRSAEncryption
39:26:b9:42:2b:45:0a:5c:d0:2a:f3:ae:d2:d0:f1:de:0d:fd:
56:50:0a:42:f3:52:64:4a:b1:ed:62:2d:b8:fc:6e:d4:70:24:
6f:11:69:a1:75:fb:f3:b9:a1:a9:1b:5a:86:85:66:74:1d:dc:
dd:18:b2:4b:6f:49:57:d8:45:3b:72:a5:b4:d5:5e:13:f7:3c:
ec:85:02:5c:3a:1e:79:a4:b7:d4:d2:56:37:00:47:f6:62:47:
1e:bf:da:d8:72:99:cb:13:6c:5d:93:45:09:6e:74:fe:ac:b0:
4e:6d:52:3e:7d:47:47:cf:b1:17:ca:d8:c1:84:83:5e:93:f0:
31:23:30:d9:c8:ea:14:0c:ad:8b:87:f7:23:e9:12:85:ac:bc:
03:1c:92:ea:03:e3:a3:32:52:6b:67:da:80:c2:28:18:61:03:
0d:6c:f5:e4:9a:b7:c6:eb:f4:d0:b2:28:0e:2f:73:be:f3:d5:
e8:d3:6d:87:d0:da:64:85:90:44:7c:c9:a9:e1:06:8a:89:a0:
32:05:ec:39:d6:82:6f:83:e2:e7:15:9b:dd:36:e1:6c:46:d8:
36:ca:fa:f4:f8:0e:94:f1:93:fe:77:92:e6:19:cb:2b:0b:3e:
b5:9f:3c:0a:08:b9:7e:ff:af:a8:d8:fc:94:9c:4a:93:48:41:
43:dd:96:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org