Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T-8EyW1PHeSDB4-Zu9Em_wNeirA.roa
File: T-8EyW1PHeSDB4-Zu9Em_wNeirA.roa (raw, json)
Hash identifier: 4vdyJWNOmOEpb3eE4bQmv9ZsCp+0Mcn+KTJ/JVCo5qQ=
Subject key identifier: 4F:EF:04:C9:6D:4F:1D:E4:83:07:8F:99:BB:D1:26:FF:03:5E:8A:B0
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01881DF5849F93888D98508780C82E8A8233
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T-8EyW1PHeSDB4-Zu9Em_wNeirA.roa
Signing time: Mon 15 May 2023 05:50:09 +0000
ROA not before: Mon 15 May 2023 05:50:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 84.32.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 20:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1d:f5:84:9f:93:88:8d:98:50:87:80:c8:2e:8a:82:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 15 05:50:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fef04c96d4f1de483078f99bbd126ff035e8ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:d4:3d:97:79:57:81:63:ee:8d:ea:83:a6:
de:bf:9e:0e:cf:da:d9:83:d6:94:04:89:ac:96:b7:
fb:a2:0a:40:12:f4:b6:7e:cb:2b:c8:c1:f0:cf:ba:
9b:4e:ae:6a:57:a1:a8:a4:6e:6c:78:a5:3a:0c:f4:
00:33:ba:95:ba:f3:7c:05:0e:51:b8:74:eb:a3:18:
35:48:2d:71:9e:18:15:c8:c9:a5:64:35:3e:37:7a:
40:6e:a7:51:44:e5:ac:43:e6:a1:aa:fe:02:11:f8:
47:2f:40:03:44:2f:d6:6d:fc:7a:60:57:25:d6:8a:
ba:4e:fd:c5:14:e3:6a:9c:3f:30:98:ce:2f:d2:47:
18:b1:7a:4a:cb:24:7b:73:de:f6:e6:82:ab:e8:d1:
ef:5d:b3:10:62:1a:a5:97:1d:dc:e4:b2:f1:b8:9a:
71:29:a9:4d:29:67:68:7a:9a:31:a0:b9:23:ab:2f:
b3:89:35:c0:95:c7:6b:7c:e1:81:d4:89:2f:bb:68:
4d:5a:ad:f0:fc:11:8b:0d:47:15:dc:1f:10:10:8f:
a4:48:44:de:ea:91:c1:41:41:e2:b4:1b:45:4e:9f:
fe:57:3c:5e:19:f4:6a:1b:4c:b1:09:ee:6c:38:9a:
10:55:6b:c7:c9:97:74:d4:8b:b6:5a:71:a2:c4:3f:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EF:04:C9:6D:4F:1D:E4:83:07:8F:99:BB:D1:26:FF:03:5E:8A:B0
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T-8EyW1PHeSDB4-Zu9Em_wNeirA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.157.0/24
Signature Algorithm: sha256WithRSAEncryption
18:7e:20:a8:69:24:0c:fa:f4:25:b9:8e:c8:fa:f8:af:f8:e2:
04:79:87:b8:c5:8f:dc:1e:37:b9:c6:bd:6d:97:eb:ed:bc:09:
19:3e:f1:f5:74:fa:64:3e:98:4b:d5:0c:41:be:76:cc:ec:00:
57:9f:de:ab:5e:9a:16:ab:26:ce:4f:5b:be:5b:31:c4:96:de:
82:fe:59:d7:b9:3e:08:ef:18:6d:d6:94:0c:a8:ca:76:8c:89:
8b:a4:51:4e:c2:97:89:15:d4:b5:c6:87:03:35:7a:e7:61:a3:
dc:1f:ea:92:0c:fa:38:8e:cd:42:dc:0d:ed:a3:94:20:75:35:
a9:6f:5a:a2:ff:f5:22:6a:76:62:e9:a4:fc:e2:c9:1c:5d:9f:
88:26:ae:b2:7e:30:74:bf:6f:98:16:f0:a1:e7:3f:6d:59:b1:
60:1e:4f:35:ff:bb:08:48:22:e7:fb:cb:bc:a0:d9:53:5e:b2:
0c:31:65:76:6c:e5:aa:e2:29:13:7c:4e:43:01:75:ec:db:0e:
fb:92:d8:1e:91:47:c1:85:d2:54:f8:34:4d:73:41:37:f0:3c:
7a:a1:d4:c0:59:11:29:ca:c9:74:65:8f:00:0d:d2:b9:5d:d3:
f8:ea:68:c9:7b:07:62:79:e1:c7:de:70:a8:5b:06:5d:46:d3:
ce:e2:0d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org