Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_dEToidWD3K-VqGDizuyKmsZK3U.roa
File: _dEToidWD3K-VqGDizuyKmsZK3U.roa (raw, json)
Hash identifier: ZIlLpIQKRh2piQqc3L0PtuQ6dfpLhf4Sb56P8r6FE9g=
Subject key identifier: FD:D1:13:A2:27:56:0F:72:BE:56:A1:83:8B:3B:B2:2A:6B:19:2B:75
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01859A78641C82C67F1C45B6A18DE74801AC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_dEToidWD3K-VqGDizuyKmsZK3U.roa
Signing time: Tue 10 Jan 2023 06:57:39 +0000
ROA not before: Tue 10 Jan 2023 06:57:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 84.32.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:78:64:1c:82:c6:7f:1c:45:b6:a1:8d:e7:48:01:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 10 06:57:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdd113a227560f72be56a1838b3bb22a6b192b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:59:01:ba:ba:0e:26:70:b8:45:ea:57:ad:
25:2e:dc:e2:de:31:98:12:59:a4:3e:99:49:f4:7a:
fc:8a:e8:a0:48:8c:a7:7b:17:9b:b3:a8:1e:c4:5b:
a5:43:08:c9:88:7c:03:db:b9:e6:cc:01:cc:36:68:
9f:80:ba:ae:4e:97:15:a5:5f:1e:e9:68:6d:7b:f3:
14:cc:2a:e7:03:01:76:dc:0b:7d:59:74:1d:01:07:
f5:85:db:d0:9e:b1:83:ed:64:d3:b5:6d:9e:36:26:
65:02:9c:18:20:cc:48:a1:92:27:66:9e:35:fd:3c:
d7:38:24:07:01:a7:42:f7:75:f3:0c:e2:56:a0:14:
93:5a:6e:ea:d2:79:54:a2:e3:19:02:58:ad:d1:dd:
26:d0:ff:17:08:92:73:96:25:85:1a:e2:f0:b9:6a:
d9:af:c8:52:2d:81:f5:19:13:b3:f1:49:d9:54:11:
34:f4:89:6a:e5:c8:0a:1b:65:21:eb:d7:ca:60:fb:
06:1d:79:6a:f1:01:c5:b3:18:85:fe:7d:56:2c:aa:
33:b0:65:17:6b:cc:2c:bd:10:ca:d3:d6:41:32:45:
1e:3b:5b:70:3c:94:b8:3f:f0:66:c1:2f:49:f6:b0:
33:e0:5a:cb:17:08:53:95:44:9d:70:fe:af:c4:f8:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D1:13:A2:27:56:0F:72:BE:56:A1:83:8B:3B:B2:2A:6B:19:2B:75
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_dEToidWD3K-VqGDizuyKmsZK3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.224.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d1:b5:f4:8e:1a:d5:dc:e1:d9:de:70:3e:de:47:89:46:9c:
21:90:de:29:48:3c:c4:94:52:60:6e:a8:76:46:e2:64:dc:4e:
f6:9c:79:24:14:a2:3a:4a:8d:8b:c7:bd:61:5d:36:f8:bc:52:
1d:98:d3:c2:c9:1c:b6:89:0f:5a:72:e5:3a:77:23:32:39:c5:
33:3d:61:88:a0:b3:52:d0:ea:a2:8b:ec:5e:1e:46:83:87:5c:
bc:5d:ce:fb:43:46:88:78:23:c5:7c:d6:7b:45:58:73:27:11:
7d:7c:a2:a2:9f:23:05:df:72:86:63:e9:0f:03:15:4a:d5:49:
bd:73:e3:31:32:82:a0:a7:5e:a2:66:bb:45:33:86:b7:44:2f:
c2:91:49:43:a5:58:63:58:5b:42:1f:00:27:16:6c:a0:ca:34:
27:e1:c4:1b:e2:f8:53:ee:d9:ff:33:ac:3f:a6:13:ef:c7:ad:
8e:bf:80:bb:d9:cd:f5:02:f9:9a:0e:e6:fe:f0:75:b6:48:4a:
05:f4:40:75:04:fd:5f:d1:ca:7c:7a:42:b0:04:5f:36:d9:83:
64:d6:37:50:a1:dc:53:1d:ba:e3:c7:0c:2b:be:02:69:4c:d8:
0b:bb:17:02:c0:9b:40:4d:22:77:9c:32:27:83:4f:33:6d:b1:
af:93:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org