Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WiSp15qAzbhVAZQnhuOfGf9xSEg.roa
File: WiSp15qAzbhVAZQnhuOfGf9xSEg.roa (raw, json)
Hash identifier: CjvApWtqtJOb6aS0F8UuQb8vZZyeoPZJAWmoDUj7kCM=
Subject key identifier: 5A:24:A9:D7:9A:80:CD:B8:55:01:94:27:86:E3:9F:19:FF:71:48:48
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01859FCE5E7B51C869DBD8877096E7A4FB71
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WiSp15qAzbhVAZQnhuOfGf9xSEg.roa
Signing time: Wed 11 Jan 2023 07:49:40 +0000
ROA not before: Wed 11 Jan 2023 07:49:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 10:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9f:ce:5e:7b:51:c8:69:db:d8:87:70:96:e7:a4:fb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 11 07:49:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a24a9d79a80cdb85501942786e39f19ff714848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:f2:e6:98:86:f0:60:fb:0c:ff:2c:93:b8:
a0:bb:9a:b7:e7:a4:9d:ae:0c:c5:0b:15:aa:08:64:
40:5d:4f:68:00:23:22:fe:da:a7:cb:38:c2:5a:9a:
46:89:b3:44:2c:da:2c:07:0b:40:d9:8a:40:8a:e7:
00:fa:74:84:fa:4f:fe:1b:9e:7b:a4:79:67:21:e5:
bf:5c:a1:45:85:a1:cc:6f:c6:23:5d:6c:52:8b:7d:
e7:81:49:7e:3f:b1:ee:b2:fb:db:a9:4e:ef:cd:38:
f0:80:1a:cb:ef:57:9b:74:d1:cd:df:1e:64:a2:48:
30:f4:3c:22:c1:d2:e1:11:1d:7e:b3:a0:47:db:68:
db:21:2d:64:7c:8d:de:c0:35:08:bf:11:ea:7c:38:
dd:71:21:e2:b0:07:df:e3:cc:58:ae:50:b5:3a:89:
f3:69:5f:10:e9:74:c8:ab:56:11:03:c1:f2:0a:02:
30:ae:88:1d:ac:bc:a4:5b:70:b8:08:01:c9:dd:c1:
a1:af:48:21:2d:6b:89:a1:02:6e:0a:ff:02:e2:31:
37:e4:b1:b2:33:ae:f5:87:e8:5d:d3:ec:4d:46:6a:
f5:08:21:8a:37:f4:04:64:f0:15:c8:d1:d3:44:90:
84:f9:2e:20:73:1e:a1:7e:87:48:fd:b7:0d:ca:9c:
04:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:24:A9:D7:9A:80:CD:B8:55:01:94:27:86:E3:9F:19:FF:71:48:48
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WiSp15qAzbhVAZQnhuOfGf9xSEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.79.0/24
Signature Algorithm: sha256WithRSAEncryption
09:60:82:f6:49:e0:52:7d:ff:0b:b7:0f:30:e8:7e:2b:5a:02:
6e:43:1c:7a:5a:7d:61:27:46:08:e1:7c:6f:b3:65:38:14:3f:
69:ea:65:b3:99:1b:79:b0:08:40:39:09:c3:c1:5b:50:fd:73:
41:7e:f1:21:38:52:bc:07:48:cb:5e:fc:ac:73:58:11:4f:8f:
ab:31:22:52:32:54:ef:9b:34:b8:01:fb:96:9b:62:6a:59:7e:
4c:00:30:0d:80:34:de:59:80:70:cd:e0:f7:db:c5:fb:db:e9:
34:90:af:41:66:1c:26:dd:70:e9:df:7f:c6:71:51:04:12:fd:
2d:f9:20:d9:39:9b:84:97:77:c7:8b:1b:3c:f3:52:ae:27:a2:
eb:34:9a:1a:8c:71:52:72:8a:0d:4f:56:a8:07:4d:30:27:0b:
36:dd:24:7b:be:9b:23:98:67:5d:12:89:f4:91:a0:8d:ce:f0:
86:e1:9d:13:56:51:ed:3f:43:55:f5:9c:37:a4:fb:1a:36:12:
01:ff:d7:8c:44:92:28:a3:f3:e7:75:f2:6f:e7:79:98:54:41:
eb:ac:86:e4:a7:ad:9d:13:3c:3c:9f:d5:23:f3:10:7d:a6:8b:
1c:58:e5:d9:bf:d0:e7:a7:14:75:3c:f1:f9:0b:aa:b9:05:db:
1f:35:63:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org