Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WRJrKGRmSTVDsGMWRQ4RdJDBBd0.roa
File: WRJrKGRmSTVDsGMWRQ4RdJDBBd0.roa (raw, json)
Hash identifier: sRFCtSXfB7n31MaQQ6Dlcx3QvQzNLklM47BzNlaCu/A=
Subject key identifier: 59:12:6B:28:64:66:49:35:43:B0:63:16:45:0E:11:74:90:C1:05:DD
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018F2862ECF26F422B6AC6549DAD119C7D80
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WRJrKGRmSTVDsGMWRQ4RdJDBBd0.roa
Signing time: Mon 29 Apr 2024 05:45:22 +0000
ROA not before: Mon 29 Apr 2024 05:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215038
IP address blocks: 84.32.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 06:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:62:ec:f2:6f:42:2b:6a:c6:54:9d:ad:11:9c:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 29 05:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59126b286466493543b06316450e117490c105dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:87:5d:51:b1:9a:62:42:93:72:b6:18:c1:
68:ee:5f:00:62:37:14:ed:45:84:10:4a:fb:a7:15:
8b:14:48:54:8d:37:22:3d:27:2a:f1:97:20:74:9f:
01:2e:69:97:a0:42:77:32:44:0c:af:8b:7c:fe:6e:
ac:bb:0b:8b:4a:cf:97:02:82:f6:56:94:fc:76:11:
9f:0f:6d:da:6a:d5:45:2c:4b:c6:af:24:44:1b:1a:
c6:f3:fc:78:40:93:97:d9:1b:fe:4a:4e:10:ca:a0:
e3:a5:ff:2c:4b:a4:fa:e5:9e:cd:86:b6:2f:e2:e5:
7a:5d:aa:e7:5e:97:06:25:2b:eb:1a:8c:f4:48:63:
65:41:dd:4c:ce:f7:e4:21:5e:4d:62:99:0f:db:8d:
68:fa:bf:ef:44:81:e7:48:f9:dd:21:e4:2a:a3:70:
ed:f5:9e:06:1b:0a:26:95:e5:94:83:ff:ce:7f:88:
ea:cf:03:71:1b:8d:c0:2d:66:f2:4e:c5:b1:8b:e7:
b4:69:97:a3:84:d2:2f:12:d6:59:67:7e:71:8f:cb:
dc:89:8e:ee:dc:9c:ec:80:d0:e7:19:52:fc:9f:46:
86:50:e0:23:1d:57:7d:82:79:df:7b:59:80:45:a4:
cd:ca:32:85:a6:75:2c:01:15:7c:6f:4a:41:50:7b:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:6B:28:64:66:49:35:43:B0:63:16:45:0E:11:74:90:C1:05:DD
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WRJrKGRmSTVDsGMWRQ4RdJDBBd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.71.0/24
Signature Algorithm: sha256WithRSAEncryption
09:22:a4:8a:0d:c0:b5:4f:10:e4:84:45:93:9d:73:09:79:39:
11:ce:58:ee:23:12:71:63:56:2b:db:dc:0b:2e:b7:e5:30:19:
a6:95:41:fd:96:28:55:25:98:58:5a:98:2b:99:55:2d:dc:bd:
b8:04:68:fc:29:fb:98:67:d4:75:30:61:ce:50:28:c2:17:2c:
a1:2d:19:98:c4:9c:4a:b5:5e:7a:b6:2f:6c:17:53:52:8b:d2:
ec:45:3e:fa:d0:ac:9e:bf:60:76:98:31:00:a0:6a:30:5e:93:
af:55:46:64:24:b6:07:89:b2:6d:38:09:7f:21:3a:26:a4:95:
79:44:0e:f6:8d:70:58:05:8a:1d:1d:b4:42:67:8f:d4:79:11:
fd:7f:12:a0:56:d4:2a:cf:b0:16:56:af:51:f1:51:4e:32:da:
95:12:7d:67:1e:37:d7:ad:45:c1:32:44:2c:dc:a5:4a:95:ad:
3b:01:8d:5b:f9:46:18:a7:3d:88:ac:f2:48:82:dd:ef:49:b8:
8c:17:ed:61:0b:94:c0:e6:bd:48:fe:fa:bd:d7:32:7a:02:28:
66:30:19:17:b9:42:eb:1f:45:48:de:4d:f8:39:c0:4f:4c:63:
cb:fc:50:2a:24:24:38:fd:ff:a8:29:c1:89:2e:22:22:db:8f:
74:f1:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org