Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T3H3YEPQFChGEVExbMnzgXvL2Hw.roa
File: T3H3YEPQFChGEVExbMnzgXvL2Hw.roa (raw, json)
Hash identifier: 0IJlRgnWYmTE0P/5uBATwGLtngguGdoHuER0dvlqLg8=
Subject key identifier: 4F:71:F7:60:43:D0:14:28:46:11:51:31:6C:C9:F3:81:7B:CB:D8:7C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019253D2FC4B5E05DBB0573B39940C4C1BF2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T3H3YEPQFChGEVExbMnzgXvL2Hw.roa
Signing time: Thu 03 Oct 2024 19:19:49 +0000
ROA not before: Thu 03 Oct 2024 19:19:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 84.32.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 09:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:d2:fc:4b:5e:05:db:b0:57:3b:39:94:0c:4c:1b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 3 19:19:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f71f76043d01428461151316cc9f3817bcbd87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:29:0a:dd:84:f1:66:e8:bf:de:4a:f7:1d:
fb:81:f8:39:f4:f4:b3:89:35:27:98:c3:d0:3c:02:
22:fd:86:a1:5f:78:42:ab:38:00:06:d2:b8:c2:e1:
84:fc:69:0c:39:6c:60:a6:b7:0f:f8:d1:d1:00:e5:
53:9b:e1:57:72:36:2a:26:35:5a:25:c7:af:45:d9:
7c:2b:25:12:e2:ed:e0:b9:4f:d1:12:f6:dc:02:6e:
88:d1:f1:ec:2f:ef:b7:e6:0e:7f:21:0f:12:7a:c1:
fe:c0:7c:52:c1:c4:d3:80:f0:ab:25:1c:d0:6e:cf:
b6:ab:ff:f8:db:3f:2c:e9:15:72:8c:de:c8:e2:77:
90:70:69:80:f3:3d:74:ef:a9:c1:8a:c7:10:63:c8:
0b:f4:32:c3:42:2c:df:65:c3:d2:45:1f:4b:e4:65:
3a:15:47:fe:3a:ce:e7:4e:db:6a:d8:5b:12:09:ce:
27:59:18:79:db:bd:61:8d:73:25:01:e8:93:56:c2:
8f:e1:82:da:4d:af:f2:56:53:7e:11:4b:6c:57:7d:
45:bb:bc:06:36:c9:df:d4:7c:83:09:43:75:aa:37:
d9:d5:fe:80:e8:c0:6d:ce:7e:f6:23:d5:20:fe:87:
d6:78:21:8f:d7:95:da:8d:0b:77:04:d9:e3:43:bc:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:71:F7:60:43:D0:14:28:46:11:51:31:6C:C9:F3:81:7B:CB:D8:7C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T3H3YEPQFChGEVExbMnzgXvL2Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8b:4e:e0:c3:4c:24:18:ad:4c:37:9d:00:15:45:db:21:af:
58:be:92:06:73:55:db:98:61:2c:00:1b:c9:ad:ba:48:66:aa:
87:39:85:39:ac:47:59:49:43:a9:3c:d9:43:6c:a3:27:5b:5c:
b6:c9:c7:02:49:3a:76:44:33:f9:17:f4:5b:c8:a1:59:75:ea:
79:7a:95:08:3f:1d:67:45:d8:0f:94:ad:c5:de:77:f7:48:d9:
a1:59:60:de:a7:e2:c4:ec:d4:b8:50:ff:2e:f1:60:96:dc:bd:
53:eb:b7:d2:b9:dc:4b:7d:5b:9d:1b:fb:5a:5a:9b:ec:7f:76:
02:9f:c0:33:9a:20:92:e2:3e:95:34:12:de:63:6f:89:d3:48:
ea:5c:1f:31:84:8a:fe:e0:1e:94:38:32:58:d8:ca:16:84:ef:
e7:99:f1:7f:8d:1e:b5:67:e0:e2:f2:5b:8b:a0:f1:65:fb:ae:
ff:94:68:c0:8e:8b:8b:e5:8c:e6:f0:e0:41:d3:cf:19:84:61:
84:33:68:28:6d:10:64:c6:77:71:58:56:03:9a:b5:b5:51:34:
35:3f:df:81:58:b2:05:e5:a2:bc:7b:60:9a:3d:fd:09:0d:48:
ab:12:b6:37:9d:66:1e:1e:98:81:a9:5c:db:dc:ea:45:3a:e0:
81:75:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 13:29:12 2024 by rpki-client on console-ams.rpki-client.org