Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/b0GqGgtqrMPttGLjBVtlT1jErFc.roa
File: b0GqGgtqrMPttGLjBVtlT1jErFc.roa (raw, json)
Hash identifier: TgKLCl9l2ekSfDjT80xiFQLqPlexovPwPD9yLh+u32A=
Subject key identifier: 6F:41:AA:1A:0B:6A:AC:C3:ED:B4:62:E3:05:5B:65:4F:58:C4:AC:57
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189AAD3B0BA18E7FFB962C8E36104F9DFAF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/b0GqGgtqrMPttGLjBVtlT1jErFc.roa
Signing time: Mon 31 Jul 2023 07:22:27 +0000
ROA not before: Mon 31 Jul 2023 07:22:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197644
IP address blocks: 84.32.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 12:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:d3:b0:ba:18:e7:ff:b9:62:c8:e3:61:04:f9:df:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 31 07:22:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f41aa1a0b6aacc3edb462e3055b654f58c4ac57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:79:98:32:96:35:00:30:8d:32:13:49:96:
b1:20:11:4b:8b:2b:84:35:a9:9e:85:90:8f:3c:b3:
ef:2f:13:bd:4c:4a:e4:67:14:14:86:a0:f3:d2:a4:
0a:0b:23:d0:68:4f:44:b5:57:95:94:34:40:3d:78:
40:99:96:92:86:72:4a:96:76:06:8d:9b:51:1c:68:
79:e0:f9:b2:3c:ea:c7:6c:b9:c6:d4:c1:6f:40:48:
64:0a:ad:bf:c2:0e:48:80:02:36:cd:d5:b3:b2:37:
e7:9f:09:8b:07:36:ed:9e:3e:f7:51:0c:12:8a:64:
0f:f7:35:d0:fd:7b:ec:f3:fd:0d:43:7f:a5:19:0b:
59:6a:c9:b8:84:7d:a3:6a:47:2e:44:55:48:28:37:
59:c4:a7:0d:0d:e6:4c:4e:86:c2:da:a3:87:47:08:
56:ed:c1:4d:44:f2:dd:bc:55:ca:e2:0b:26:9c:a8:
ba:db:0a:6b:d7:49:89:ae:90:ad:91:26:16:92:20:
08:62:5f:e7:e6:0f:eb:04:4e:66:8e:4c:d2:46:1d:
df:a6:fe:0f:c4:ce:75:6e:04:eb:81:a1:c0:30:a3:
92:57:48:8b:52:1b:a6:31:99:3f:1a:7d:db:dc:e9:
b7:e2:16:f8:72:68:e3:17:1e:f5:fe:6f:81:89:cc:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:41:AA:1A:0B:6A:AC:C3:ED:B4:62:E3:05:5B:65:4F:58:C4:AC:57
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/b0GqGgtqrMPttGLjBVtlT1jErFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.155.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9a:0d:d7:3a:20:56:e4:cf:f1:41:ba:24:85:0a:ec:31:44:
2b:0d:2f:65:7b:20:d1:2c:de:63:c0:cd:e0:59:5f:3c:ec:e5:
49:3d:f9:69:78:d2:b9:01:d0:fd:c1:2f:34:33:01:e9:c2:af:
b9:34:8d:6c:0d:47:91:04:d2:1d:db:df:39:20:bd:cd:c6:01:
45:dc:ce:26:b2:50:de:3e:a5:a4:58:94:82:d6:90:8c:8c:48:
6c:d8:cd:3f:18:d4:f9:7f:da:80:b3:3e:da:dc:61:b1:67:2b:
9b:d9:22:5c:bb:c9:fe:91:14:87:11:d0:43:ba:bc:92:0f:4d:
1b:fc:74:be:58:94:7d:db:fe:fb:49:95:82:99:31:cc:55:25:
a2:b6:ad:e9:dc:6d:74:47:71:d5:58:13:e1:f7:0c:8a:8a:0f:
ba:7e:3f:85:ac:d3:a5:68:c1:4d:0d:25:42:42:e2:2c:d9:a2:
1c:f5:59:ab:2f:44:3e:dd:90:4c:f6:a7:64:88:17:f4:87:7c:
5d:d4:04:4d:cc:91:2e:ae:0f:19:2e:cf:17:05:1f:8d:ea:15:
0a:85:2c:09:2f:e0:cb:2c:e5:03:d7:38:47:1b:58:56:23:e0:
4b:75:10:14:96:45:9b:23:f1:24:1e:86:3b:a1:38:1b:b7:50:
d4:b4:19:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org