Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_bk3YE90Sf2G7EO8ozmUVMRniQM.roa
File: _bk3YE90Sf2G7EO8ozmUVMRniQM.roa (raw, json)
Hash identifier: qT0CHbE7G16aySxx0Oh3A0Yf6lCvBuZQC3eVb0uHE7U=
Subject key identifier: FD:B9:37:60:4F:74:49:FD:86:EC:43:BC:A3:39:94:54:C4:67:89:03
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018863FD9C395644FFA0B9EA06C08C9F2E28
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_bk3YE90Sf2G7EO8ozmUVMRniQM.roa
Signing time: Sun 28 May 2023 20:12:24 +0000
ROA not before: Sun 28 May 2023 20:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140155
IP address blocks: 84.32.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Jun 2023 06:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:63:fd:9c:39:56:44:ff:a0:b9:ea:06:c0:8c:9f:2e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 28 20:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdb937604f7449fd86ec43bca3399454c4678903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b3:3c:7d:0d:8b:33:03:fe:2a:f3:2b:48:03:
5e:ad:fe:f3:28:d6:0a:4d:fe:15:2c:36:be:49:f4:
f5:8f:78:10:58:ab:7e:53:49:db:1f:b0:89:89:f3:
a9:5c:7c:35:cf:03:4e:9d:fd:e8:7e:a0:1b:f5:2a:
81:28:f4:d4:f0:39:a2:18:e6:96:90:64:ea:1e:a9:
48:2b:ed:70:92:a1:48:4b:3c:4c:2e:56:15:07:bf:
82:98:f7:22:9c:1f:bb:df:10:db:99:c9:cd:70:38:
f6:31:48:e3:93:0d:8e:d2:aa:7e:ac:54:f4:b7:16:
04:76:08:d3:f7:6e:45:f8:60:2e:75:d9:f7:2c:dd:
be:32:c0:9b:d8:94:bb:a4:41:d2:32:66:98:7e:6a:
fe:04:37:a7:7d:6b:c2:05:25:52:8b:f3:e6:7c:90:
8e:01:f9:a6:98:ce:ed:88:73:22:76:d3:2e:5a:db:
ed:89:d0:c2:b9:b4:9a:ce:21:d8:29:1a:c5:e7:79:
97:f9:19:28:82:64:53:bb:dc:3a:f5:3a:d5:80:84:
03:f7:6b:75:df:9a:54:77:51:6c:2f:8d:40:ee:ac:
df:7d:a6:04:28:43:c6:2d:de:a9:aa:da:25:d5:41:
1a:0a:52:13:ea:e3:4a:26:1a:22:f1:51:b4:63:a2:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B9:37:60:4F:74:49:FD:86:EC:43:BC:A3:39:94:54:C4:67:89:03
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_bk3YE90Sf2G7EO8ozmUVMRniQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.213.0/24
Signature Algorithm: sha256WithRSAEncryption
72:77:a7:e7:6c:b0:13:36:7f:ed:a9:21:19:a5:0b:63:ad:3d:
1b:1a:8a:91:1a:c4:1e:35:41:f7:1a:f4:f5:f8:68:69:5d:ef:
cf:f2:b7:b3:bc:f0:68:cd:40:ad:56:62:45:3c:73:9a:21:8b:
ab:2c:79:fe:04:af:00:9b:84:c5:14:32:ff:8b:fc:4c:68:15:
68:83:cd:a3:50:02:65:24:ee:77:f8:43:03:a5:75:95:98:cf:
a7:b1:bf:f5:c2:6f:68:63:8d:fa:a3:1c:41:ef:2d:4a:af:fc:
fa:b7:47:9a:d8:4c:a7:77:0f:cd:c9:36:fb:8a:5b:d9:bf:4a:
3f:7f:41:c6:b7:9d:53:9a:af:12:ab:83:6e:74:1a:7d:4d:d9:
54:81:57:ac:3f:00:76:8a:3d:66:71:a4:6b:8e:0f:c4:5d:a8:
4c:37:fc:00:6f:f5:44:de:74:b3:c2:54:ff:db:d2:4c:cc:09:
72:fd:f8:8a:02:5a:b4:38:a9:a1:85:82:f7:54:ec:a1:ea:d3:
04:f5:1e:84:27:10:db:9d:46:74:43:d7:b2:c4:ff:2c:95:69:
a4:8e:11:18:fd:70:6d:42:55:5d:76:48:bb:eb:0c:8a:e5:bd:
c9:52:d0:6e:48:1f:4d:56:28:6c:90:bb:8c:d6:7c:37:76:c8:
cc:cd:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org