Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aIFPJcx8XtsVUdS6Gv-T7QJIWzE.roa
File: aIFPJcx8XtsVUdS6Gv-T7QJIWzE.roa (raw, json)
Hash identifier: ASuJyaQmoqbWpOCru+G06ivq82lng9JnVLj11qOIxHY=
Subject key identifier: 68:81:4F:25:CC:7C:5E:DB:15:51:D4:BA:1A:FF:93:ED:02:48:5B:31
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFD69B712D485D93C70D2B4F50B136
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aIFPJcx8XtsVUdS6Gv-T7QJIWzE.roa
Signing time: Sun 01 Jan 2023 18:54:55 +0000
ROA not before: Sun 01 Jan 2023 18:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 84.32.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Mar 2023 20:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d6:9b:71:2d:48:5d:93:c7:0d:2b:4f:50:b1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68814f25cc7c5edb1551d4ba1aff93ed02485b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f4:db:31:3b:5e:b1:66:ea:59:09:08:fc:88:
82:eb:7b:43:3a:b7:72:d8:87:bc:3b:f5:b9:2a:42:
1f:38:ac:a5:9d:1a:58:f9:87:32:dd:4a:bf:f1:98:
22:4a:7d:78:ee:f6:b4:38:11:75:32:04:0d:b0:10:
e2:6c:07:41:81:2f:77:ef:05:c8:46:d6:b8:a5:3f:
e7:97:f6:77:71:44:20:5e:c5:ca:1b:58:3c:87:9b:
c0:9e:73:ff:7a:82:41:97:37:3a:a7:c9:68:47:64:
30:1d:ff:47:f8:5e:ed:18:57:bc:59:e8:21:43:bf:
1b:c6:5c:b2:77:e1:3f:c9:7a:d8:4d:15:9a:ae:3d:
eb:1f:d1:97:bc:40:f3:01:b6:67:42:52:1b:92:34:
93:0a:52:e3:75:ef:b5:64:00:9b:e9:91:7c:c0:2a:
6f:f7:87:00:6c:00:46:4c:16:c6:85:c0:0f:fb:b4:
65:0b:2e:90:4a:c9:d6:22:cd:de:eb:50:13:c4:cd:
24:f5:fc:c0:5f:28:69:dd:2b:b1:94:95:75:0e:36:
13:c6:76:92:04:47:fe:6a:0a:37:c6:cb:69:d0:ab:
5f:a9:64:3f:99:ad:71:7e:b8:00:5a:a2:05:f4:f0:
84:ae:42:06:32:58:ec:82:c5:ef:b9:0f:43:95:21:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:4F:25:CC:7C:5E:DB:15:51:D4:BA:1A:FF:93:ED:02:48:5B:31
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aIFPJcx8XtsVUdS6Gv-T7QJIWzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.86.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9c:1f:a2:f6:4d:ba:5e:9b:c1:0c:21:6f:94:20:86:4d:9c:
49:6f:9f:08:52:3e:4a:12:f6:9b:80:74:ff:88:3e:f4:8e:e7:
c7:48:10:a5:85:0e:74:58:19:d2:ad:71:84:b3:47:85:2e:3c:
c7:fe:08:f7:53:30:74:02:52:29:8a:af:a1:63:9a:46:67:f0:
40:ee:07:02:65:c6:84:d4:dc:ec:9b:ab:2d:b3:70:2f:20:e2:
dc:62:1b:76:49:d8:ad:1b:27:1f:8a:e5:d2:77:9e:dc:99:39:
41:c8:5f:63:17:5e:95:6f:e9:e4:f5:b0:6a:f0:c8:ac:1a:31:
6d:95:e9:71:ce:81:33:30:fd:7e:69:21:bd:a3:d4:f7:ab:c1:
08:3f:03:ea:f2:99:25:16:c1:58:39:ac:fb:9f:b9:59:0c:a8:
55:6e:26:e9:b9:9f:9b:a0:c3:fc:80:d9:33:45:ca:58:2a:b6:
8e:0d:fc:3f:5b:63:65:82:83:c1:53:a9:a0:d4:a4:f1:b9:dc:
51:fd:5c:b9:58:90:a6:46:72:9a:ef:b1:50:4a:4e:94:7f:d8:
34:97:5a:20:54:d1:9f:ee:f9:88:62:75:9a:2e:12:21:9b:60:
11:f4:fe:38:cd:57:6f:d0:66:d7:f5:d4:81:e5:47:72:5c:39:
e4:a4:10:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org