Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TcbkOkU89xTe3QM2nYLjCgj_xlc.roa
File: TcbkOkU89xTe3QM2nYLjCgj_xlc.roa (raw, json)
Hash identifier: 648dUNFmd3fqgoK/LKc4tu71vmxQxjc6fbYYGbWmco8=
Subject key identifier: 4D:C6:E4:3A:45:3C:F7:14:DE:DD:03:36:9D:82:E3:0A:08:FF:C6:57
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188E3FA101E840C9B93D81D4478D5F86085
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TcbkOkU89xTe3QM2nYLjCgj_xlc.roa
Signing time: Thu 22 Jun 2023 16:39:56 +0000
ROA not before: Thu 22 Jun 2023 16:39:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13830
IP address blocks: 84.32.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Jun 2023 06:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:fa:10:1e:84:0c:9b:93:d8:1d:44:78:d5:f8:60:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 22 16:39:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dc6e43a453cf714dedd03369d82e30a08ffc657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dc:8e:db:d4:0a:a7:6c:bb:4c:42:5c:5c:f2:
d8:bc:f7:0d:1e:ba:3b:2d:4e:6f:8f:ac:e4:d8:db:
90:0f:88:30:5f:5d:6e:cf:c9:0b:c6:10:e4:ba:74:
ac:c6:f7:f9:2e:94:17:c1:30:75:46:fe:b6:b4:e9:
3f:1b:fb:25:3b:d1:02:a5:de:f1:4c:b5:2b:75:2b:
95:4d:58:0c:f1:a5:a5:ea:15:7b:82:2c:eb:c2:1a:
e8:7e:89:b8:ea:1a:77:5b:77:73:89:b7:e1:71:bb:
ce:73:c3:48:ef:5f:43:d8:05:a8:38:89:4c:b1:2a:
0c:07:b7:d2:5e:76:2e:a1:72:c4:a2:21:e5:0b:b6:
95:48:d5:61:9a:35:4e:b7:02:9f:85:dd:03:f8:ad:
5e:cb:23:86:55:92:d7:41:24:34:cf:da:ee:3e:44:
1b:e2:4b:38:ea:d6:83:d8:b7:a6:7c:3f:df:08:7b:
d3:c4:06:56:a3:44:a4:d7:4e:2e:b1:dd:c0:31:31:
36:cd:03:61:a7:6a:06:02:b0:89:d8:ae:89:2f:14:
e2:db:9f:6c:e7:57:23:d9:08:39:37:8b:a7:c7:8c:
85:55:e3:54:73:3b:dc:d7:16:c1:78:d5:d3:d6:65:
e2:6f:50:fb:1a:f0:aa:47:bd:ea:35:49:49:58:e8:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C6:E4:3A:45:3C:F7:14:DE:DD:03:36:9D:82:E3:0A:08:FF:C6:57
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TcbkOkU89xTe3QM2nYLjCgj_xlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:48:9c:63:f4:c9:84:b6:cd:b6:42:02:e2:31:8c:dd:86:e8:
6d:26:24:6f:55:54:ee:60:c1:65:25:68:4e:54:58:f8:b1:4d:
86:34:a5:2a:52:57:7b:66:f8:86:52:9e:82:35:6a:00:cb:08:
18:72:0d:df:be:16:b5:e9:e2:b7:3f:73:d8:9f:85:14:2c:9d:
28:05:88:05:77:5e:e7:89:e4:b0:a5:2c:b5:3c:bf:05:b5:85:
10:71:11:4b:d0:cd:82:1a:05:7e:43:c7:8d:44:c1:bb:b0:2f:
5e:2d:32:01:7d:b8:0b:c9:1a:8b:7a:b4:01:f0:ca:33:77:62:
ad:56:c8:b4:08:c0:82:a8:26:5c:4b:99:93:8f:08:ca:30:4a:
7e:e1:e5:1c:78:7b:0e:da:54:7b:f7:62:43:10:27:c9:36:05:
56:e8:6a:3c:34:49:55:3b:55:47:65:e3:e5:32:4f:81:92:29:
23:25:e8:34:2f:bb:1e:21:f2:5d:c2:49:72:48:f5:f8:e9:70:
ab:47:8a:82:bf:61:51:67:15:99:2e:f8:a0:89:e8:39:44:37:
14:2c:cd:5c:93:4d:54:5c:1f:5d:51:2a:54:66:cb:18:b8:56:
7d:e1:78:c6:6a:c2:47:51:93:13:07:cc:4d:7f:6d:03:38:36:
de:21:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org