Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SyWsVUlq4-mltIGt3Y-q8UQmRjs.roa
File: SyWsVUlq4-mltIGt3Y-q8UQmRjs.roa (raw, json)
Hash identifier: b9vgb4moSfrBEJi+nOxhiN3XoxXCZ69CplK9t/qCy0k=
Subject key identifier: 4B:25:AC:55:49:6A:E3:E9:A5:B4:81:AD:DD:8F:AA:F1:44:26:46:3B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01896E584B6F270CA2339E297874702BE615
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SyWsVUlq4-mltIGt3Y-q8UQmRjs.roa
Signing time: Wed 19 Jul 2023 13:30:27 +0000
ROA not before: Wed 19 Jul 2023 13:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 84.32.179.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Jul 2023 07:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:58:4b:6f:27:0c:a2:33:9e:29:78:74:70:2b:e6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 19 13:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b25ac55496ae3e9a5b481addd8faaf14426463b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:88:d3:6c:35:6c:64:7f:67:bd:88:8f:70:75:
be:67:b2:51:f8:03:b0:4a:3a:62:f3:11:b5:22:ad:
5b:e6:17:cf:99:62:18:44:3f:8e:a9:c7:f8:7f:33:
d1:c2:25:02:80:78:6c:78:3a:7b:b3:9d:3e:9b:21:
80:2d:34:cb:85:9c:aa:86:fd:c2:8e:18:a4:a5:72:
d3:2c:39:0d:56:44:df:45:c0:3e:22:53:67:dc:6d:
e2:45:fb:c6:55:c1:98:50:11:4d:58:17:8e:b3:eb:
16:8f:0b:5a:ae:46:b6:9f:21:7d:22:2c:a8:b4:22:
47:ce:d5:3f:2a:53:49:31:03:e8:bf:8f:fa:e1:d2:
34:4c:24:80:e7:45:6d:ab:00:4a:a3:b0:61:29:e5:
b5:56:0b:d7:fa:e9:07:f3:98:ba:26:9f:d4:33:70:
d1:c5:a5:4b:a8:ef:d4:17:10:bc:30:14:10:ef:9c:
5d:04:0d:d5:6b:d2:8d:25:8f:43:c6:43:b8:c3:56:
43:8a:9e:a6:ae:d9:e3:a6:76:6f:e9:9a:1c:de:40:
c9:ab:be:47:a0:da:0c:c9:1d:18:52:fb:f5:e2:75:
9b:80:03:5d:5c:c1:f5:44:c5:8b:5a:30:cb:d0:9d:
51:25:65:87:aa:3d:18:92:76:40:8f:46:55:8a:80:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:25:AC:55:49:6A:E3:E9:A5:B4:81:AD:DD:8F:AA:F1:44:26:46:3B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SyWsVUlq4-mltIGt3Y-q8UQmRjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.179.0/24
88.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3e:08:73:7f:6f:5b:18:3b:2d:3e:d4:16:76:5b:b0:92:92:
f0:10:12:36:53:5c:1c:53:aa:8f:c5:d7:1c:59:21:2c:05:87:
89:b2:7e:4c:4b:0f:f0:e1:23:e7:a7:72:61:bf:8d:40:17:92:
58:a2:49:ea:f8:5f:cf:a5:0a:90:6e:cd:e9:ac:3c:fe:b2:77:
0a:c1:69:31:92:97:40:6f:bc:13:79:52:61:13:2f:a8:c3:0a:
80:9f:9b:c4:58:73:46:5c:a2:e7:70:3e:6e:d7:e8:c8:73:7c:
7f:60:96:53:95:2e:8a:6a:71:a2:24:48:f4:71:03:35:86:6e:
de:1c:08:20:58:f9:61:98:0a:2e:88:db:8c:f5:53:65:a9:dd:
45:05:ed:4d:d6:2e:46:76:1d:7b:c7:ab:a0:f1:40:b0:ef:9a:
60:7f:ba:e5:39:fb:99:9b:b0:f9:e9:a6:19:61:8b:39:fe:f4:
0f:2f:9e:eb:d8:68:f1:01:c2:e9:71:65:54:33:6b:30:0a:2e:
e8:0a:75:a0:c0:2c:e4:a1:33:6e:5a:24:e6:8f:d2:d8:79:43:
02:40:c9:2c:ee:c1:b7:79:6b:68:2b:23:bf:c2:df:9e:90:b4:
8e:17:f7:75:39:d9:1d:cd:33:76:64:d8:d2:d5:c8:09:db:6a:
ac:47:1d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org