Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bxs8xBphTKf2gujmFehHG4CgMBk.roa
File: bxs8xBphTKf2gujmFehHG4CgMBk.roa (raw, json)
Hash identifier: ZvC2sFviIjfpnjvD2F8LsW7oOrh5LBhJUmtOOf7FrVc=
Subject key identifier: 6F:1B:3C:C4:1A:61:4C:A7:F6:82:E8:E6:15:E8:47:1B:80:A0:30:19
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185EA915DD0A658DC0AB2E3A8AA2974F993
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bxs8xBphTKf2gujmFehHG4CgMBk.roa
Signing time: Wed 25 Jan 2023 20:14:33 +0000
ROA not before: Wed 25 Jan 2023 20:14:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ea:91:5d:d0:a6:58:dc:0a:b2:e3:a8:aa:29:74:f9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 25 20:14:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f1b3cc41a614ca7f682e8e615e8471b80a03019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:e2:19:e6:d8:f4:1e:40:87:f9:cc:55:aa:
18:1d:8e:42:c8:59:95:e7:eb:23:bd:88:9a:21:b7:
2b:43:34:9f:85:84:5d:97:1d:ad:44:98:74:33:c7:
94:66:a4:59:7d:22:92:4b:a2:fd:63:0d:43:ac:0d:
e6:f0:17:b6:7b:ef:ec:f6:c2:23:fa:7a:86:3f:f5:
2f:a2:d4:fd:8c:10:12:7d:95:5a:29:bb:f9:13:ca:
0d:7b:44:6f:02:e2:52:47:37:23:89:55:b8:ee:45:
f8:11:ed:31:ad:c8:89:2f:27:87:ea:b9:c4:14:54:
a4:e7:bf:eb:f2:73:3e:0b:e6:ad:0e:57:5b:3c:da:
28:6d:fb:9d:1c:0c:43:64:3e:4e:e1:0b:a9:8e:5f:
5b:ce:88:9a:51:83:f9:9a:16:dd:c3:a7:ab:fa:de:
54:8a:67:98:a0:55:50:15:f3:2e:be:e1:d9:4c:44:
ec:62:4e:61:de:bd:b3:d4:c3:8a:b2:30:a9:a2:86:
ad:92:91:60:1f:b8:2d:92:c6:dc:4c:48:81:04:9b:
d3:8c:75:8d:12:84:dc:fd:92:9d:46:cc:c4:96:11:
ba:2e:0e:2d:f4:00:55:d2:4d:36:1e:5f:5c:0f:ad:
e8:2b:a7:9f:f2:3e:cc:b7:b4:18:68:56:34:52:23:
20:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1B:3C:C4:1A:61:4C:A7:F6:82:E8:E6:15:E8:47:1B:80:A0:30:19
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bxs8xBphTKf2gujmFehHG4CgMBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.184.0/21
Signature Algorithm: sha256WithRSAEncryption
27:3e:e7:52:af:ae:41:3d:9e:99:b2:65:ef:9b:3f:92:2a:f8:
6f:40:03:77:c2:6c:e4:66:57:54:8d:f9:d1:50:af:e7:f8:66:
0b:d5:c4:01:ff:ec:e4:af:df:4b:a3:cf:e2:9c:b6:4d:13:28:
93:20:01:29:cf:09:87:25:d6:e1:ed:17:f7:a9:ef:7e:97:0d:
5f:bf:dd:fa:50:f5:1b:91:94:21:66:fc:86:93:29:78:90:8a:
b8:0c:17:d3:68:d4:6a:eb:24:e6:a1:fd:35:df:c1:c2:c2:98:
bc:11:1c:b7:9b:a1:cc:a9:1f:13:8e:a9:c2:17:91:7b:75:ea:
0d:42:f5:5a:ad:b7:0f:55:29:c1:fa:3b:f1:4f:9c:26:3b:8d:
07:c5:f9:06:6b:af:bb:5a:b3:35:65:23:65:1e:81:47:4c:7f:
a9:e6:45:ad:1c:f2:5d:67:09:6c:e7:06:26:bf:68:84:ec:3b:
34:74:0d:1a:42:e5:2a:df:66:b5:94:23:a9:ee:75:90:47:58:
4e:30:7f:22:a5:4d:68:e0:0b:4c:e2:61:9f:bf:a5:ce:09:69:
7e:a7:8c:f2:ef:02:ef:ec:ff:14:3d:ce:a7:fc:3f:45:ad:e6:
a0:ca:c5:d7:61:24:0b:ed:32:b0:69:78:12:bb:ba:5b:19:d3:
c6:ad:15:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org