Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bORkAF9305uIgULdquse3Kg-Zzg.roa
File: bORkAF9305uIgULdquse3Kg-Zzg.roa (raw, json)
Hash identifier: qDJDEkcdm+14xFqLaK1WsEuaqlIyD2H5GHQfmgjZdvc=
Subject key identifier: 6C:E4:64:00:5F:77:D3:9B:88:81:42:DD:AA:EB:1E:DC:A8:3E:67:38
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018611D2C00D5EFF926852FE3FA3115DABA6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bORkAF9305uIgULdquse3Kg-Zzg.roa
Signing time: Thu 02 Feb 2023 11:11:09 +0000
ROA not before: Thu 02 Feb 2023 11:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43043
IP address blocks: 84.32.56.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.11.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:d2:c0:0d:5e:ff:92:68:52:fe:3f:a3:11:5d:ab:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 2 11:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ce464005f77d39b888142ddaaeb1edca83e6738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:11:99:b1:c0:cf:fa:a7:58:b5:8f:3d:5f:f0:
92:fb:16:af:42:0b:de:15:a2:94:07:fb:43:26:9b:
64:83:e3:97:cb:91:a3:cb:55:9f:1c:81:1f:52:e0:
f4:b8:ba:25:8e:21:5f:08:ee:39:3a:0c:9a:56:79:
30:ba:54:57:66:d6:f2:5e:74:dc:2a:37:3b:88:8e:
89:9f:a1:66:7b:5b:01:83:bb:f6:c2:87:05:3b:26:
2d:81:40:cb:53:fd:6d:3b:2a:7f:bf:dd:1b:11:6e:
e8:5b:4f:cc:30:7e:1f:67:27:c3:99:d0:6f:d1:82:
37:df:b1:8e:bf:4d:9e:80:8e:8d:8a:8b:23:d3:43:
04:e3:1a:ac:3b:d6:1a:b2:60:4b:5c:d8:b8:c2:76:
e7:99:ea:61:a0:64:b1:13:7b:3e:f5:df:ce:e8:c8:
d5:7d:c4:20:d4:a2:46:c4:13:03:5a:d4:f8:0f:1b:
5d:84:07:61:c6:e9:61:80:1b:8e:50:65:1d:ed:0e:
61:c3:7c:4b:d2:db:25:5b:7c:1f:ac:a6:39:38:ee:
f1:ad:65:1d:e1:3b:4c:65:a2:6c:88:12:ca:12:12:
45:5b:ac:f6:42:98:46:71:5f:26:81:52:1c:2a:69:
58:06:09:10:7d:cc:0b:be:21:e7:aa:54:b7:48:47:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E4:64:00:5F:77:D3:9B:88:81:42:DD:AA:EB:1E:DC:A8:3E:67:38
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bORkAF9305uIgULdquse3Kg-Zzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.11.0/24
84.32.46.0/24
84.32.56.0/24
84.32.83.0/24
Signature Algorithm: sha256WithRSAEncryption
50:89:0d:65:73:14:02:32:cb:e2:6a:f8:9c:bc:5b:18:c7:d3:
e8:0b:bf:c3:0f:02:4a:2b:5e:39:0b:3a:b1:5a:df:4d:b6:a5:
11:0b:31:e6:a2:37:aa:96:d2:d5:9c:35:a3:77:89:1f:f9:d4:
53:7b:02:59:04:ff:f6:4a:e3:94:b6:6c:ac:c5:04:be:8e:67:
0a:35:10:b7:ef:22:0b:96:98:8b:21:4e:02:56:0e:7e:6d:11:
c0:10:b4:e5:be:64:5d:07:01:c5:ac:e9:ab:09:93:d8:40:d3:
85:ae:71:1a:bc:92:6b:66:7d:11:46:81:b7:87:a1:d7:f6:c4:
e2:6a:c5:97:66:72:e8:bb:8f:e0:04:7d:5f:1d:8e:2b:99:c6:
54:6d:66:0d:90:14:6d:dc:17:39:2e:7c:de:3f:2c:50:6c:2f:
57:ab:4f:7b:0c:21:31:c3:82:92:29:6c:c7:9e:6b:fa:63:2c:
7d:6c:63:1f:e1:99:04:fd:06:90:cf:b8:53:9b:05:7e:2c:01:
5d:d6:99:4b:19:a8:01:92:bc:29:3b:07:b9:12:46:be:ab:af:
cb:4d:b2:22:03:5f:05:06:de:c2:a5:21:d6:fd:a4:df:af:71:
11:d5:f1:a8:45:7b:d7:f3:c1:9a:b2:cb:a8:f0:44:ae:42:4b:
f1:0d:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org