Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_1mhgiBxyHvX5h1Y_L_u55o2jUk.roa
File: _1mhgiBxyHvX5h1Y_L_u55o2jUk.roa (raw, json)
Hash identifier: BwDBAApWnzrkeJFymj/TUxN57+t8oTjCRygs5doHD5M=
Subject key identifier: FF:59:A1:82:20:71:C8:7B:D7:E6:1D:58:FC:BF:EE:E7:9A:36:8D:49
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01873652DD7DCF844EA24CF1DEF068801B58
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_1mhgiBxyHvX5h1Y_L_u55o2jUk.roa
Signing time: Fri 31 Mar 2023 06:20:13 +0000
ROA not before: Fri 31 Mar 2023 06:20:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201579
IP address blocks: 84.32.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:52:dd:7d:cf:84:4e:a2:4c:f1:de:f0:68:80:1b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 31 06:20:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff59a1822071c87bd7e61d58fcbfeee79a368d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:a2:17:0c:be:0c:ce:19:a5:43:47:aa:d4:
82:6d:f2:4e:68:e9:ca:c1:c7:8c:91:13:c8:5b:ce:
e4:29:66:92:a3:b8:66:16:66:28:15:32:42:49:a2:
7a:ca:fc:ec:1e:ec:51:5b:45:c5:8f:34:9d:49:53:
8f:16:23:15:5f:97:a5:68:41:1b:65:5d:72:fb:33:
1e:f5:9d:7d:1e:c0:e7:6b:ec:8a:66:d2:a9:65:2d:
ee:44:00:6f:a3:75:49:bb:11:84:18:2d:e0:f1:4c:
15:eb:97:b8:e0:f5:dd:e9:b5:ee:08:20:a4:cb:95:
92:a6:1a:7e:4f:58:2d:93:fc:c1:43:fd:5b:81:83:
92:86:9c:25:0c:41:80:05:ec:69:52:bb:b4:13:49:
7d:21:0e:5d:3e:24:5d:50:4d:ec:b2:85:6e:e7:bf:
87:3b:67:99:63:ad:a6:05:f1:16:66:88:25:7b:3b:
c2:d7:27:db:58:07:01:df:15:5b:7f:fd:c6:3a:be:
16:92:a1:ab:bf:21:b1:c5:0a:27:0c:b1:ee:04:92:
00:fa:61:36:91:f0:11:ec:c0:5b:54:d8:81:88:de:
d1:28:9d:10:60:a3:4b:da:21:08:9e:7c:49:4a:7b:
20:3a:c8:d4:58:af:26:a4:e0:4c:aa:9b:9f:58:66:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:A1:82:20:71:C8:7B:D7:E6:1D:58:FC:BF:EE:E7:9A:36:8D:49
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_1mhgiBxyHvX5h1Y_L_u55o2jUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.41.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0d:a7:73:dc:4f:f3:76:dc:02:35:e7:6d:2f:61:65:24:70:
10:2f:3b:43:8d:e7:00:de:07:01:07:40:62:2e:d2:a1:d3:07:
c6:9b:7d:fc:3a:91:2a:43:3b:5e:30:54:70:58:52:e5:f6:99:
82:78:93:64:1d:bd:31:91:cd:9a:ff:a2:dc:a7:95:9b:17:bb:
2c:2b:3c:bf:a9:aa:39:72:51:4e:81:2d:94:f6:5c:eb:f5:3b:
da:d6:40:bb:b3:c7:cc:94:6c:75:fb:5c:40:0a:45:a4:fc:ca:
73:f6:c8:7b:69:4c:08:fa:76:96:77:2c:04:c1:f6:9d:53:8e:
bc:0a:44:07:6c:a9:e8:40:d6:46:1a:df:67:df:04:f4:43:a5:
a5:5a:6e:4d:84:4c:50:55:6d:ea:25:3e:96:fe:84:52:99:bc:
80:f4:09:7d:80:79:73:61:61:5d:ec:79:2a:6d:3e:6c:ac:cb:
8d:59:fb:87:8c:ea:62:e0:c8:36:5a:cf:1d:57:e0:cd:f1:47:
ff:92:9a:ea:b3:1d:fe:1e:4c:ca:c1:08:6b:e5:27:cd:5a:9b:
7a:2b:cc:9e:19:01:c5:6e:96:17:71:e3:01:80:42:5c:15:69:
2f:5c:2f:e8:b4:9d:81:82:6a:51:a9:aa:e3:4c:77:dc:8b:44:
e1:e0:dc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org