Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WsKtRW-mF84omyGv4Np9TCabmnI.roa
File: WsKtRW-mF84omyGv4Np9TCabmnI.roa (raw, json)
Hash identifier: VwFJRZpQIxJstBBuUZ03b4StVLyd8Utt3i6oDf2QYd8=
Subject key identifier: 5A:C2:AD:45:6F:A6:17:CE:28:9B:21:AF:E0:DA:7D:4C:26:9B:9A:72
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFBB985CFA41AF4DBE525F0C4E84BA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WsKtRW-mF84omyGv4Np9TCabmnI.roa
Signing time: Sun 01 Jan 2023 18:54:48 +0000
ROA not before: Sun 01 Jan 2023 18:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 84.32.174.0/24 maxlen: 24
84.32.173.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jan 2023 14:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:bb:98:5c:fa:41:af:4d:be:52:5f:0c:4e:84:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ac2ad456fa617ce289b21afe0da7d4c269b9a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:0f:c4:e3:92:78:1b:a1:2d:11:7d:ac:d2:
b2:87:6e:64:ee:f6:3b:19:06:f5:c2:e8:6b:d9:dd:
4b:b5:9b:3d:47:23:70:2b:04:5a:63:49:38:c6:43:
a8:6d:c0:33:4c:08:82:f4:a0:cd:c2:b3:7b:5d:58:
46:09:88:95:27:8c:35:d1:c2:9f:80:9e:b5:3b:f0:
57:65:58:9b:5a:45:d5:90:bb:45:a3:4c:66:fb:6a:
da:9f:1b:2f:ed:c2:5f:60:42:3d:96:a0:2d:61:23:
71:a2:50:7a:dd:48:49:cd:0f:94:76:ee:8f:dd:9d:
5c:dd:2a:a6:03:cb:cc:56:36:af:6b:1b:0c:57:38:
51:b1:17:16:f4:b7:11:e8:6a:cc:36:99:08:3d:0b:
29:4c:22:fe:8e:d0:a0:b6:c6:5d:c4:32:f7:8c:60:
3d:2f:52:05:84:06:2d:09:e2:aa:c8:7a:85:92:a1:
13:1d:37:62:52:78:58:0c:da:ac:eb:22:ca:4f:8a:
82:3f:21:eb:84:fd:c9:3e:8a:49:8b:74:28:22:1c:
68:01:2d:17:1d:8a:99:9d:31:0d:ac:ae:8d:d5:b2:
2d:54:f2:56:60:d3:a1:69:fc:6f:28:c1:22:ea:df:
2d:db:40:bd:3f:85:8b:65:3d:04:4d:e4:0e:60:27:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:AD:45:6F:A6:17:CE:28:9B:21:AF:E0:DA:7D:4C:26:9B:9A:72
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WsKtRW-mF84omyGv4Np9TCabmnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.173.0-84.32.174.255
84.32.223.0/24
84.32.249.0/24
84.32.251.0/24
88.216.181.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7c:1d:02:4a:45:37:46:e1:67:30:be:2f:77:a0:cd:55:59:
23:5f:bd:7b:fe:12:ff:cb:ad:fa:4c:a8:4b:ee:98:06:a6:3e:
e9:d7:61:62:dd:04:dd:5c:09:46:b7:24:db:81:f3:f1:21:8e:
b0:12:59:b1:43:06:13:d8:6c:b9:a2:e8:c6:fe:9d:5f:28:2a:
d8:59:b8:73:6f:e6:d9:eb:63:40:18:40:e2:15:d5:a9:66:dc:
9e:87:6f:8a:25:9a:eb:83:74:1f:80:4d:e1:50:15:2c:1c:90:
4a:2e:be:cb:41:d9:ce:2e:77:d3:27:5f:bd:c1:9f:8b:9f:04:
b6:79:0a:66:68:b4:b8:a6:10:a0:27:50:7e:fc:4b:93:8b:b7:
f7:51:02:5a:12:11:a8:bb:80:24:92:d6:0f:c3:1d:e1:55:8e:
93:3b:5a:f2:65:e9:bc:57:8f:01:ff:86:a2:a4:8c:5f:92:c4:
e7:2e:06:9e:af:ef:b7:88:91:e2:c0:d6:71:63:69:2f:e1:0a:
83:87:7b:b4:6c:d5:9b:32:9b:5c:82:11:55:11:ac:33:6b:a3:
0f:5d:fd:ad:4b:2c:ec:89:50:e2:6d:59:0a:78:f3:96:f2:08:
3a:03:a2:c4:ee:0b:86:aa:96:7a:32:27:fd:49:26:16:47:b7:
48:63:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org