Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XqMcHMUCKQKZ2FlPbYhQDdMhwvg.roa
File: XqMcHMUCKQKZ2FlPbYhQDdMhwvg.roa (raw, json)
Hash identifier: 0A17+ILfYcBjewq2dgP+NVCFIX/SSrxZS6lKyOOUvME=
Subject key identifier: 5E:A3:1C:1C:C5:02:29:02:99:D8:59:4F:6D:88:50:0D:D3:21:C2:F8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B036D69F203B316938BE02C0CF2EA412B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XqMcHMUCKQKZ2FlPbYhQDdMhwvg.roa
Signing time: Fri 06 Oct 2023 05:19:44 +0000
ROA not before: Fri 06 Oct 2023 05:19:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 84.32.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:6d:69:f2:03:b3:16:93:8b:e0:2c:0c:f2:ea:41:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 6 05:19:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ea31c1cc502290299d8594f6d88500dd321c2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:a7:04:bb:00:12:9e:35:91:44:df:39:f7:
b2:14:ae:db:c4:21:82:bd:44:92:08:00:e0:b2:ae:
bd:a5:dc:7e:22:45:dc:35:ef:64:6d:c4:e7:0e:37:
a2:58:5a:cf:d1:77:e4:70:b4:23:75:4c:7e:8c:16:
55:10:33:a1:94:ac:c2:09:3c:d9:0a:71:2b:9b:98:
c9:b2:6c:14:fe:ea:86:30:91:49:1f:5e:f2:2a:cf:
a9:8c:10:64:a6:10:4d:f9:d6:2c:f8:e6:68:05:19:
f6:8e:1b:c6:a5:d7:24:70:ef:1a:1e:b9:8a:68:37:
68:1a:64:89:19:ed:35:60:88:65:7e:58:9a:70:47:
24:b6:44:87:ea:3b:d2:06:77:c2:dd:46:30:9b:41:
3a:09:32:9f:5f:cf:0a:16:99:1f:1c:04:00:a8:57:
cf:19:95:4e:45:8b:ce:f6:5e:ac:7e:a3:50:67:20:
34:1b:43:f3:4b:3f:67:38:44:2f:64:06:36:e6:92:
fd:05:e7:e2:c8:d1:fe:c1:44:34:fb:a2:a3:f7:9c:
fb:9a:7b:45:fd:49:9d:79:b4:a2:2c:40:2a:2d:ff:
4a:39:af:5b:a8:91:17:7b:7d:fa:59:df:d9:bd:c8:
e1:fc:7f:83:dc:c9:bf:ee:83:54:d0:c2:f2:a1:14:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A3:1C:1C:C5:02:29:02:99:D8:59:4F:6D:88:50:0D:D3:21:C2:F8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XqMcHMUCKQKZ2FlPbYhQDdMhwvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.104.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:12:7e:bc:83:98:74:a6:ea:5b:05:9d:31:45:70:16:73:98:
29:ec:6d:95:82:40:8d:c4:f7:61:90:42:59:e8:b2:97:c6:18:
61:c5:79:79:1e:58:0b:54:21:cd:db:3d:20:1f:cd:73:bf:3f:
4c:e9:a9:fa:32:87:9a:dc:af:24:e6:bc:a7:57:ba:13:a1:35:
a0:b4:5f:55:45:7f:43:8a:86:79:7e:8f:8e:24:61:f2:76:dc:
51:cb:70:8e:2d:c8:a7:b7:20:9b:74:a7:7f:cc:5e:2c:2d:06:
a6:1d:fd:0b:c2:91:46:27:e4:82:a0:ed:ec:72:d1:d7:ca:c8:
39:c3:b3:0d:0d:f0:b9:83:ee:f1:ce:6f:c1:6b:f3:1a:7a:06:
1c:3f:64:1f:79:9e:a1:23:c4:3a:ac:23:8d:02:f9:e3:58:2b:
79:d2:a2:ac:dd:16:1e:6d:5c:cc:73:39:94:12:2f:86:ae:d2:
19:d1:95:ca:a3:d5:80:53:61:66:40:28:6b:26:eb:9d:77:93:
96:52:90:06:eb:8c:27:c3:66:27:46:13:85:09:8f:75:e8:47:
8d:d7:e1:91:86:c4:40:d0:82:f2:65:56:e8:80:42:54:b1:f9:
d4:3d:2d:4d:90:8a:47:bd:18:ae:d6:03:8c:d8:83:d4:1a:ba:
b5:5c:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 8 18:37:20 2023 by rpki-client on console-ams.rpki-client.org