Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bd-sQ0grEbAQSxi3A3u9DOvsTdw.roa
File: bd-sQ0grEbAQSxi3A3u9DOvsTdw.roa (raw, json)
Hash identifier: hG15DQVD20t6myjw2E0KjX6GJf2Jfv3kqCrWLowpm00=
Subject key identifier: 6D:DF:AC:43:48:2B:11:B0:10:4B:18:B7:03:7B:BD:0C:EB:EC:4D:DC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01858E1421C711810657802840CFC659D0C4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bd-sQ0grEbAQSxi3A3u9DOvsTdw.roa
Signing time: Sat 07 Jan 2023 21:12:42 +0000
ROA not before: Sat 07 Jan 2023 21:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 84.32.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jan 2023 14:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8e:14:21:c7:11:81:06:57:80:28:40:cf:c6:59:d0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 7 21:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ddfac43482b11b0104b18b7037bbd0cebec4ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:d4:61:18:73:69:2d:02:c9:a4:47:ad:db:
1d:da:7a:11:b6:ce:70:83:38:f3:70:d3:06:aa:d8:
04:b3:d4:ab:3d:78:78:e3:68:27:29:7f:7e:6a:4f:
8e:85:f6:dd:60:3a:01:f6:69:a2:d6:02:0b:b3:24:
14:3d:2a:95:4a:bf:b4:d0:fe:dc:8a:b9:0d:17:f7:
fb:a8:57:bd:2e:a1:fe:14:56:17:8b:05:e3:75:9c:
84:03:0e:23:52:12:45:31:80:19:ca:23:34:13:91:
09:d7:db:2d:70:ab:09:41:53:72:2f:7e:ec:3e:56:
2b:2b:d9:cc:e8:d7:ae:dd:48:12:08:f0:8a:27:d6:
bf:cd:00:02:c1:3f:8b:51:48:43:47:c0:04:ec:ec:
0b:9e:58:ee:bc:fe:59:5f:cf:ec:04:11:74:98:93:
32:68:86:96:73:31:f2:40:ac:a3:6f:d9:40:d4:02:
65:42:6b:98:05:76:c6:ab:fa:d3:68:e7:24:e4:3d:
18:52:3f:d6:1f:8f:41:96:40:86:fa:53:ad:da:0f:
81:de:1b:40:06:dd:f1:7c:6c:dd:93:dd:c2:09:c7:
a0:f7:a9:71:73:b3:89:66:cf:8a:55:46:46:dd:13:
81:ca:42:27:31:df:bb:c6:68:d8:57:e5:5f:67:ba:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DF:AC:43:48:2B:11:B0:10:4B:18:B7:03:7B:BD:0C:EB:EC:4D:DC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bd-sQ0grEbAQSxi3A3u9DOvsTdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.34.0/24
Signature Algorithm: sha256WithRSAEncryption
83:bd:ac:ba:13:c0:84:b8:dc:76:2d:49:f6:df:65:f2:25:a0:
8c:e1:db:fe:41:b5:14:43:72:9b:99:93:90:58:ff:54:70:80:
88:5e:b3:f1:9a:c4:64:f6:0c:ef:7b:16:09:91:37:1f:40:0c:
db:2e:e5:cf:8c:0c:af:1d:15:1e:6a:6c:ba:80:67:55:90:5d:
68:86:24:3d:85:f0:ea:c4:91:a5:8a:bf:17:de:c2:22:6e:4d:
90:df:b3:4b:d0:c8:88:ed:70:22:fe:1d:a9:98:cb:e1:e0:bc:
af:33:b4:97:ca:c1:bf:bf:24:64:ac:f6:15:f3:d6:2c:13:2a:
7c:3e:89:d7:d9:d5:4f:b7:c4:4c:a2:12:50:86:9f:28:c9:fc:
48:b5:74:bd:78:a0:a4:05:73:e3:1d:33:0a:88:b1:6f:c9:e3:
19:36:2e:79:b1:4d:cf:1d:98:de:ad:51:b6:1f:f6:5a:ad:1b:
9a:a0:9a:e6:c1:a6:eb:01:99:b4:02:22:1f:11:80:ce:51:02:
2d:b3:b1:df:7b:04:3d:02:03:3c:00:b7:c5:48:46:11:fe:93:
ec:b9:d6:c9:93:1e:14:5d:d1:b3:61:f8:8d:a5:20:b9:1d:27:
bf:de:20:85:98:72:c7:44:c1:ae:e5:13:9a:20:18:63:5b:74:
02:03:c7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org