Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XyuQ0Be7A0NiDsFD2NL4H-DRnOI.roa
File: XyuQ0Be7A0NiDsFD2NL4H-DRnOI.roa (raw, json)
Hash identifier: bTOZRLvAeFhSu3xzJJIjoCcYGFj0XadA2rwC3Rl+oOo=
Subject key identifier: 5F:2B:90:D0:17:BB:03:43:62:0E:C1:43:D8:D2:F8:1F:E0:D1:9C:E2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01891810254E0574A70BC7316E8A64E72CF2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XyuQ0Be7A0NiDsFD2NL4H-DRnOI.roa
Signing time: Sun 02 Jul 2023 19:24:18 +0000
ROA not before: Sun 02 Jul 2023 19:24:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 84.32.71.0/24 maxlen: 24
84.32.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:18:10:25:4e:05:74:a7:0b:c7:31:6e:8a:64:e7:2c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 2 19:24:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f2b90d017bb0343620ec143d8d2f81fe0d19ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9c:28:ed:b9:48:5d:a7:fd:8b:99:0d:2d:53:
5e:3f:3f:13:0f:9f:0a:a3:93:26:71:f8:da:f8:f7:
f1:21:46:e9:74:6f:13:45:a7:0a:34:f5:9d:d7:0b:
e8:f4:53:f5:ab:20:61:34:be:de:94:be:78:72:6a:
04:6d:b1:4e:0f:83:f6:b6:d0:d4:85:20:3b:51:8c:
df:3e:eb:42:31:4a:6f:52:72:40:2a:30:0b:d3:2f:
7e:2d:fa:4b:5e:c8:4c:03:71:b6:b1:e3:0a:91:49:
29:48:f9:31:56:0f:44:c1:c1:b5:60:d5:7c:8c:e8:
cb:b4:86:b8:0b:c5:11:24:60:ee:a5:ad:f6:a5:d6:
1e:19:61:b5:10:47:8a:f1:c5:1a:e7:ad:d2:48:4f:
fd:88:ac:6a:86:65:4f:6d:0f:ad:c8:2b:ea:24:32:
58:7d:5a:d6:3e:90:30:cf:a2:0c:e9:37:7f:23:76:
ec:ed:36:24:8a:7f:67:21:2e:a7:d9:8a:d1:85:6c:
05:58:37:1c:f9:64:8b:18:3b:03:6a:d7:cc:97:17:
49:50:eb:b1:eb:91:30:a5:38:a2:56:bb:d1:53:17:
98:9d:95:63:ef:48:d5:23:2e:05:ee:d7:7c:32:d1:
b0:f1:1a:23:27:13:33:3b:55:4f:79:e2:47:35:51:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2B:90:D0:17:BB:03:43:62:0E:C1:43:D8:D2:F8:1F:E0:D1:9C:E2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XyuQ0Be7A0NiDsFD2NL4H-DRnOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.71.0/24
84.32.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:2c:1d:17:a3:b5:98:6b:d2:ed:c1:a4:b9:da:98:e5:83:bf:
55:48:e2:1a:01:d0:19:c7:9e:9d:2f:3a:f6:31:63:50:34:57:
13:e4:6a:5f:fc:51:32:68:2a:52:9c:81:a5:63:32:97:1f:a6:
c1:3f:ca:90:b7:2a:13:10:5d:99:ab:66:21:fc:0e:20:e0:77:
fa:9a:a3:04:cd:be:f4:7f:4b:14:45:bf:ba:d7:fb:a9:d0:48:
c3:b2:f0:b5:cf:97:94:8d:76:ff:87:63:69:b1:89:6b:65:24:
60:e5:32:46:98:ec:fe:1b:b6:6f:8e:8e:a2:36:d5:3a:98:28:
85:52:1c:f4:be:a9:1e:74:79:0a:99:76:22:05:61:a3:85:19:
a5:91:a8:93:38:cd:52:51:69:d3:9b:96:84:03:4e:fe:67:50:
cb:0a:02:05:17:77:3e:6b:ea:c0:f2:20:28:7a:d0:19:3c:be:
94:22:69:c2:ed:8c:4c:08:19:36:95:1a:a9:98:e3:b6:24:cb:
bf:ca:6d:b6:28:6a:ec:3b:8a:b2:ed:63:4a:04:20:5d:e0:28:
32:97:a5:05:e2:46:45:a3:9b:bf:ac:42:8a:34:61:b9:b1:57:
6d:6b:33:5a:4f:42:6c:0b:6d:cd:e3:84:d7:44:08:8e:cb:8b:
1c:8f:f9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org